[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 86.644077][ T30] audit: type=1800 audit(1559664620.698:25): pid=11792 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 86.682181][ T30] audit: type=1800 audit(1559664620.718:26): pid=11792 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 86.702364][ T30] audit: type=1800 audit(1559664620.728:27): pid=11792 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.60' (ECDSA) to the list of known hosts. 2019/06/04 16:10:35 fuzzer started syzkaller login: [ 106.030784][T11951] as (11951) used greatest stack depth: 53608 bytes left 2019/06/04 16:10:41 dialing manager at 10.128.0.26:37589 2019/06/04 16:10:42 syscalls: 2300 2019/06/04 16:10:42 code coverage: enabled 2019/06/04 16:10:42 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/06/04 16:10:42 extra coverage: enabled 2019/06/04 16:10:42 setuid sandbox: enabled 2019/06/04 16:10:42 namespace sandbox: enabled 2019/06/04 16:10:42 Android sandbox: /sys/fs/selinux/policy does not exist 2019/06/04 16:10:42 fault injection: enabled 2019/06/04 16:10:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/06/04 16:10:42 net packet injection: enabled 2019/06/04 16:10:42 net device setup: enabled 16:12:49 executing program 0: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) io_submit(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 235.447298][T11956] IPVS: ftp: loaded support on port[0] = 21 [ 235.595093][T11956] chnl_net:caif_netlink_parms(): no params data found [ 235.666243][T11956] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.674133][T11956] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.683292][T11956] device bridge_slave_0 entered promiscuous mode [ 235.694432][T11956] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.701797][T11956] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.711002][T11956] device bridge_slave_1 entered promiscuous mode [ 235.747034][T11956] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 235.759578][T11956] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 235.795588][T11956] team0: Port device team_slave_0 added [ 235.805356][T11956] team0: Port device team_slave_1 added [ 235.996926][T11956] device hsr_slave_0 entered promiscuous mode [ 236.122950][T11956] device hsr_slave_1 entered promiscuous mode [ 236.402572][T11956] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.409965][T11956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.417830][T11956] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.425252][T11956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.505603][T11956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.527606][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.539039][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.550567][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.565244][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 236.585400][T11956] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.604846][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.614469][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.624950][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.633825][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.684804][T11956] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 236.695909][T11956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.711495][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.721264][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.730454][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.737922][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.746495][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.756648][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.766645][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.776446][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.786139][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.796084][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.805853][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.815232][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.824907][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.834182][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.849435][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.858637][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.891097][T11956] 8021q: adding VLAN 0 to HW filter on device batadv0 16:12:51 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffa) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 237.722051][T11962] vivid-000: kernel_thread() failed [ 237.819763][T11967] device nr0 entered promiscuous mode [ 237.980256][T11969] device nr0 entered promiscuous mode 16:12:52 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000000c0)) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x186) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r6 = getpid() write$cgroup_pid(r5, &(0x7f00000003c0)=r6, 0x12) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000007c0)) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="ff038aa174036ed7e08f93dd81006052c06772696ffe004fd28aa508a169e939f5e97588d01eba73580000000000003900"/65], 0x41) recvmsg(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001100)=""/210, 0xd2}, {&(0x7f0000001200)=""/251, 0xfb}, {&(0x7f0000001300)=""/64, 0x40}, {&(0x7f0000001340)=""/244, 0xf4}], 0x4, &(0x7f0000001480)=""/242, 0xf2}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r3, 0x0, 0x19a, &(0x7f0000000800)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&'}, 0x30) perf_event_open(0x0, 0x0, 0x0, r7, 0x2) 16:12:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:12:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x1268, 0x0) 16:12:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) fstat(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, 0x0) r1 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 239.355065][T11984] IPVS: ftp: loaded support on port[0] = 21 [ 239.512515][T11984] chnl_net:caif_netlink_parms(): no params data found [ 239.601073][T11984] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.608619][T11984] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.617764][T11984] device bridge_slave_0 entered promiscuous mode [ 239.638343][T11984] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.646078][T11984] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.655270][T11984] device bridge_slave_1 entered promiscuous mode [ 239.691284][T11984] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 239.701911][ C0] hrtimer: interrupt took 127557 ns [ 239.713726][T11984] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 239.754207][T11984] team0: Port device team_slave_0 added [ 239.763860][T11984] team0: Port device team_slave_1 added [ 239.917435][T11984] device hsr_slave_0 entered promiscuous mode [ 240.042677][T11984] device hsr_slave_1 entered promiscuous mode 16:12:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setuid(r2) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x10000, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0x4d, 0x1f}, {0x7, 0x5}, {0x6, 0x7}, {0x3ff, 0xaba1}, {0x544a9a40, 0x40}]}) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VT_DISALLOCATE(r4, 0x5608) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x420000, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, 0x0) [ 240.223727][T11990] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 240.336189][T11984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.358917][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.367705][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 16:12:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x8000, 0x0) getsockopt$inet6_int(r0, 0x29, 0x43, 0x0, &(0x7f0000013000)) [ 240.383306][T11984] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.423235][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.432835][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.441951][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.449239][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.457797][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.467241][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.476332][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.483711][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state 16:12:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x8000, 0x0) getsockopt$inet6_int(r0, 0x29, 0x43, 0x0, &(0x7f0000013000)) [ 240.535492][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.544302][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.554296][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.564349][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.575906][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.585544][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.595456][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.626337][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.636997][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.646402][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.658147][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.668059][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.681409][T11984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 16:12:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x9, 0x480082) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000001c0)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000000000000000000007000000830b040000000000000000400300003661000000000000002038f5cfbce0beda0a2ce2415c2759d7a002c696bb5c70710c2ee1f004402a2d6db1abfeed1345b988e207b93e89c42c2d1b7b2fb1e77cf99ba3498c9f900960405db0127d24577deb84596a6c77686fa69977587a47b9d2a7"], 0x81}, 0x0) [ 240.746510][T11984] 8021q: adding VLAN 0 to HW filter on device batadv0 16:12:55 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400080, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000022ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x3, 0x6}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) [ 240.953647][T12005] binder: 12004:12005 ioctl c0306201 20000140 returned -14 [ 240.987343][T12007] binder: 12004:12007 ioctl c0306201 20000140 returned -14 16:12:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:12:55 executing program 0: add_key(&(0x7f00000000c0)='blacklist\x00', 0x0, &(0x7f0000000100)="00000000000000006d3b87e88bac615ddfd207f921c0f265fe72c79b1090c20b5dd02b44319be2646b3bf003ef388070b5a913d249d1ec98b978e29c9dc612eda92d9799af9938983a98534a3f53ae0134fb8214f5b59b042bbc262b5669f63caef061bf70e9fb77a0828cd9579dfeebc7d9db9bbc", 0x6313, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x88, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x826}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffff7f}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x840) 16:12:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 241.148632][T12014] binder: 12013:12014 ioctl c0306201 20000140 returned -14 16:12:55 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcf, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xffffffffffffffa2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r1, 0x10001, 0x9, [0x7fff, 0x3f8, 0x1000, 0x4, 0xaf97, 0x101, 0x7, 0x0, 0x737f]}, 0x1a) 16:12:55 executing program 0: unshare(0x400) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) fdatasync(r0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000000)=""/208, &(0x7f0000000100)=""/173, &(0x7f00000001c0)=""/188, 0x4000}) [ 241.313555][T12023] binder: 12020:12023 ioctl c0306201 20000140 returned -14 16:12:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:12:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 241.486191][T12031] binder: 12030:12031 ioctl c0306201 20000140 returned -14 16:12:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x5, 0x4000000000000001, 0x0, "80e28681ba41ef528ee5c7e82339ed17dc1bca32434ea575d5a14978a0c16400"}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x16800, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040)={0x1, "ec"}, 0x2) 16:12:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:12:55 executing program 0: clone(0x20000002, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) 16:12:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:12:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:12:55 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) move_pages(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=[0x0], &(0x7f00000000c0), 0x0) r1 = dup(r0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c0044dff, &(0x7f0000001000)=0xfffffdfd) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2, 0x7}, 0x1c) 16:12:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:12:56 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) setxattr$security_smack_transmute(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) mq_getsetattr(r0, &(0x7f00000001c0), 0x0) accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x800) fcntl$getflags(r0, 0x403) mq_open(&(0x7f0000000000)='\x00', 0x0, 0x80, &(0x7f0000000040)={0x7fff, 0x7ff, 0x1, 0x79141478, 0xffffffffffff927c, 0x100, 0x4, 0x9}) 16:12:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:12:56 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:12:56 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 242.277594][T12068] binder: 12067:12068 ioctl c0306201 20000140 returned -14 16:12:56 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x181042, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000e00000/0x200000)=nil, &(0x7f0000fb7000/0x1000)=nil, &(0x7f0000e0f000/0x1000)=nil, &(0x7f0000f09000/0x4000)=nil, &(0x7f0000f96000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e4c000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000edf000/0x2000)=nil, &(0x7f0000f35000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) [ 242.433791][T12071] binder: 12070:12071 ioctl c0306201 20000140 returned -14 16:12:56 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:12:56 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="230000002c0007051dfffd946fa2830020200a00090000000200000000040000000000", 0x23}], 0x1000000000000071}, 0x0) [ 242.610168][T12079] binder: 12078:12079 ioctl c0306201 20000140 returned -14 16:12:56 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:12:56 executing program 0: r0 = gettid() r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) prctl$PR_SET_TSC(0x1a, 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000080)=0x1) prctl$PR_SET_FPEXC(0xc, 0x0) r3 = timerfd_create(0x3, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000040)={r2, r3, 0xe0}) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x9) getpriority(0xfffffffffffffffe, r0) [ 242.777043][T12084] binder: 12083:12084 ioctl c0306201 20000140 returned -14 16:12:56 executing program 0: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f00000000c0)="927b12370a053d1755c1ad9db4b3d520c9667951204d45ccfbda7b71b37046064b78c99a55b04d1e74a3a9397e90c5e793fcf4b7457dad4662501e47b49126a2c8", 0x41) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0xfffffffffffffffc) init_module(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x76, &(0x7f0000000000)='[%keyringem1\x00') r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$bt_hci(r1, 0x65, 0x4, 0x0, &(0x7f0000000040)=0xffffffffffffff45) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) 16:12:56 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:12:57 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 242.930186][T12094] binder: 12093:12094 ioctl c0306201 20000140 returned -14 16:12:57 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 243.031456][T12097] binder: 12096:12097 ioctl c0306201 20000140 returned -14 16:12:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x10000, 0x8000) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e20, 0x0, @rand_addr="1814d960863ed37f07d575cc2dbc1443", 0x100000001}, {0xa, 0x4e22, 0x1, @empty, 0x9}, 0x400000, [0x68, 0x8, 0x0, 0x42f800, 0x629bfdc1, 0x8, 0x5, 0x5]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$VT_WAITACTIVE(r1, 0x5607) clone(0x206, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x801, 0x0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) [ 243.169164][T12100] binder: 12098:12100 ioctl c0306201 20000140 returned -14 16:12:57 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 243.303728][T12107] binder: 12106:12107 ioctl c0306201 20000140 returned -14 16:12:57 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 243.439118][T12112] binder: 12111:12112 ioctl c0306201 20000140 returned -14 16:12:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:12:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000005500000000000000000000000000000005000900ff0000000a0000009c570000fe8000000000000000000000000000ff000000000000000002000100000000000000050c0000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) ftruncate(r0, 0x8) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000180)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={0x0, @rand_addr, @dev}, &(0x7f0000000380)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) pipe2(&(0x7f00000004c0), 0x4000) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f00000007c0)={@rand_addr, 0x0}, &(0x7f0000000800)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000840)={@local, 0x0}, &(0x7f0000000880)=0x14) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003340)={'\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000003500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000034c0)={&(0x7f0000003380)={0x13c, r3, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x100000001}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8}}}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r10, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}, @SEG6_ATTR_SECRETLEN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48801) 16:12:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 243.621776][T12121] binder: 12120:12121 ioctl c0306201 20000140 returned -14 16:12:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 243.741389][T12127] binder: 12126:12127 ioctl c0306201 20000140 returned -14 16:12:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 243.835410][T12133] binder: 12132:12133 ioctl c0306201 20000140 returned -14 16:12:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 243.955174][T12141] binder: 12140:12141 ioctl c0306201 20000140 returned -14 16:12:58 executing program 0: pidfd_send_signal(0xffffffffffffffff, 0x19, 0x0, 0x0) [ 244.053058][T12145] binder: 12143:12145 ioctl c0306201 20000140 returned -14 16:12:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:12:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = semget$private(0x0, 0x0, 0x100) semop(r1, &(0x7f0000000080)=[{0x4, 0x9}, {0x0, 0x7ffffffd, 0x800}], 0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x2c, 0x2d, 0x10, 0x1a, 0xa, 0x9, 0x3, 0x15d, 0xffffffffffffffff}}) semop(0x0, &(0x7f0000000040)=[{0x0, 0xb, 0x3f00}], 0x1) [ 244.175563][T12151] binder: 12150:12151 ioctl c0306201 20000140 returned -14 16:12:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:12:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) unshare(0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000002c0)) [ 244.321785][T12159] binder: 12158:12159 ioctl c0306201 20000140 returned -14 16:12:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:12:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@rc={0x1f, {0x8, 0xe6e1, 0x7, 0x9, 0x2, 0x5}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="804c2678370839c07c089f487bc6ce80c848", 0x12}], 0x1, &(0x7f0000000180)=[{0x68, 0x119, 0x8, "ab4962ce8093a4646b7e3333e2725cdf59d2637dd653bb69239a74a5d6daab71cc379b85b2ca381351226134ca8ab912572ea6ec4d356e5e83b072c5071d827c2bb6b555c6635b254731fa246891d597aa1efe"}], 0x68}, 0x4) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000180007041dfffd946f6105000af000001f0000000400080008000300022bd000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 244.454030][T12166] binder: 12164:12166 ioctl c0306201 20000140 returned -14 16:12:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 244.573229][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.670151][T12173] binder: 12170:12173 ioctl c0306201 20000140 returned -14 16:12:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:12:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil) dup3(r1, r2, 0x0) [ 244.824586][T12176] binder: 12175:12176 ioctl c0306201 20000140 returned -14 16:12:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 244.987087][T12183] binder: 12181:12183 ioctl c0306201 20000140 returned -14 16:12:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) lookup_dcookie(0x4, &(0x7f0000000100)=""/106, 0x6a) sendto(r1, &(0x7f0000000880)="8aa2e6f00a2e8a13cb432827f9915694d6bde7fa26edd3c0d3fe16194fa9ccda4f20f020657ee01d4fc354f4deb5ded7e5a106cbf651e7792d9b264e725d1edf014fe8f2e0ac9e853225cacc5a0e3f2060ae3741bb0dd6e8431ca0bda91a6769b504872e3f9c99d315", 0x69, 0x0, 0x0, 0x0) 16:12:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 245.152158][T12191] binder: 12190:12191 ioctl c0306201 20000140 returned -14 16:12:59 executing program 0: prctl$PR_SET_SECUREBITS(0x1c, 0x0) 16:12:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:12:59 executing program 0: unshare(0x20400) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x208500) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6174000000000000000000000000008c6302c6fd07a6db00000000000000008b0000004ec55a41c42e90b42f26ada3171c971226ca6feb1a0276d23194afebab33559c01000000a0c3e618cc48b4ca68f035a28fca6fdca8763f6728a8a5d66a294d83c8679a351f958fcf8f7f38357153b301f3dac9acb176d4bcfb33fd46daedd28dda1bf8424665d1dc73a8e07c1f88d59bd85e8d133a0ea1c2af9bb3ae55542059582f2fa774bc2242feced4093fa11f9ebfe7a1359872f5d6ac1a78"], &(0x7f0000000140)=0xaf) setsockopt(r0, 0x65, 0x3, &(0x7f0000000040)="f3f80003", 0x4) [ 245.281454][T12196] binder: 12195:12196 ioctl c0306201 20000140 returned -14 16:12:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 245.429615][T12203] binder: 12202:12203 ioctl c0306201 20000140 returned -14 16:12:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") membarrier(0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='task\x00') ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000080)=0x7) 16:12:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:12:59 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x2000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x7}}, 0x30) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r2, 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x9205, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x420002, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) tkill(r0, 0x30) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000040)) [ 245.627199][T12211] binder: 12209:12211 ioctl c0306201 20000140 returned -14 16:12:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:12:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 245.797027][T12218] binder: 12217:12218 ioctl c0306201 20000140 returned -14 16:12:59 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x2000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x7}}, 0x30) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r2, 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x9205, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x420002, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) tkill(r0, 0x30) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000040)) [ 245.899954][T12223] binder: 12222:12223 ioctl c0306201 20000140 returned -14 16:13:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 246.028661][T12229] binder: 12228:12229 ioctl c0306201 20000140 returned -14 16:13:00 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x200800, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r1, 0xffffffffffff0000}, 0x8) r2 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xffffffff, 0x0) read(r2, &(0x7f0000000000)=""/104, 0x84e5d5d2) 16:13:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:00 executing program 0: capset(&(0x7f00000008c0)={0x20071026}, &(0x7f00000004c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x1e3) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000080)=""/110) 16:13:00 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0), 0x2) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000180)=0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', r1}, 0x10) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000240)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000280)=0x1) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0xf32, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000400)=0x0) capset(&(0x7f0000000440)={0x20071026, r3}, &(0x7f0000000480)={0x2, 0xfffffffeffffffff, 0x7, 0x0, 0x8, 0x20}) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000004c0)) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000500)=[0x9, 0x9]) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000540)={'raw\x00', 0x2, [{}, {}]}, 0x48) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={0x0, r0, 0xd, 0x1}, 0x14) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000600)) r4 = add_key(&(0x7f0000000640)='logon\x00', &(0x7f0000000680)={'syz', 0x2}, &(0x7f00000006c0)="365183a8a659c9339a38c8ce68", 0xd, 0xfffffffffffffff8) r5 = add_key(&(0x7f0000000700)='.request_key_auth\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$unlink(0x9, r4, r5) r6 = semget(0x3, 0x3, 0x20) semctl$SETVAL(r6, 0x0, 0x10, &(0x7f0000000780)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000007c0)=0x8, 0x4) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000800)=0x559) openat$uinput(0xffffffffffffff9c, &(0x7f0000000840)='/dev/uinput\x00', 0x802, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000880)=0x2e5, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000008c0)={{0xfffffffffffffffc, 0x7f3}, {0x80, 0x1000}, 0x7aca, 0x4, 0x8}) [ 246.414158][T12249] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure 16:13:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) ptrace$pokeuser(0x6, r2, 0x5, 0xfffffffffffffff9) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x10000, 0xf2901) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000100)=0x6, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x2ba, &(0x7f0000000400)=[@assoc={0x18, 0x117, 0x4, 0x5d}], 0x18}], 0x49249249249272b, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000500), 0x2d2, &(0x7f0000000580)=""/250, 0xfa}}], 0x40001c6, 0x0, &(0x7f0000001040)={0x77359400}) 16:13:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_vif\x00') accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x80800) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@xdp={0x2c, 0x1, r1, 0x3c}, 0x80, 0x0}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 16:13:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:00 executing program 0: unshare(0x2000100) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xfffffffffffffffa) prctl$PR_GET_DUMPABLE(0x3) 16:13:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 16:13:01 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4008408}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x511, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x24040000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0x44, 0x2, 0x90, [0x0, 0x0, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=[{}, {}, {0x0, '\x00', 0x2}]}, 0x108) [ 247.102710][T12275] binder: 12271:12275 ioctl c0306201 0 returned -14 [ 247.115485][T12276] IPVS: ftp: loaded support on port[0] = 21 16:13:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 16:13:01 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xfffffffffffffffc, @rand_addr=0xb7c}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x2000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e22, 0x80000001, @dev={0xfe, 0x80, [], 0x17}, 0xffffffff00000000}, {0xa, 0x4e23, 0x5, @empty, 0x5}, 0x0, [0x0, 0x7ff, 0x400, 0x28000000000000, 0x9, 0x5, 0xf2, 0x8000]}, 0x5c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r0, &(0x7f0000000280)="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", 0x1a4, 0x40000cb, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000240)={0xffffffff, 0x5, 0x3, 0x7f, 0x40, 0x9, 0x96, 0x2, 0x400000000000, 0xff, 0x7}, 0xb) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10) [ 247.298543][T12281] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 247.340633][T12283] binder: 12282:12283 ioctl c0306201 0 returned -14 16:13:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 247.397563][T12276] chnl_net:caif_netlink_parms(): no params data found [ 247.466577][T12289] binder: 12288:12289 ioctl c0306201 0 returned -14 [ 247.531899][T12276] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.539249][T12276] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.548390][T12276] device bridge_slave_0 entered promiscuous mode [ 247.576614][T12276] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.584124][T12276] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.593469][T12276] device bridge_slave_1 entered promiscuous mode [ 247.649988][T12276] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 247.664221][T12276] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 247.700155][T12276] team0: Port device team_slave_0 added [ 247.710396][T12276] team0: Port device team_slave_1 added [ 247.787054][T12276] device hsr_slave_0 entered promiscuous mode [ 247.833604][T12276] device hsr_slave_1 entered promiscuous mode [ 247.984106][T12276] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.993902][T12276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.001791][T12276] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.009620][T12276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.102068][T12276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.125816][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.138638][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.149504][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.164862][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 248.186014][T12276] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.205878][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.215107][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.222484][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.264977][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.275767][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.283195][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.294234][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.325627][T12276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.336290][T12276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.354735][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.364758][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.375813][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.385539][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.404379][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.458393][T12276] 8021q: adding VLAN 0 to HW filter on device batadv0 16:13:02 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) listen(r0, 0x3) ioctl(r0, 0x8992, &(0x7f0000000000)="158e62345d766070723a") r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8000, 0x200881) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000080)) 16:13:02 executing program 0: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@local, @random="c17f97f920f2", [], {@ipv6={0x86dd, {0x0, 0x6, "bb5615", 0x44, 0x2f, 0x0, @remote, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0xffffca88}}}}}}}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000000c0)={0x81, 0xffffffff00000000, 0x3, 0x34, &(0x7f0000000040)=""/52, 0xa, &(0x7f0000000080)=""/10, 0xe5, &(0x7f0000000180)=""/229}) 16:13:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:13:02 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@mcast2, 0x45, r1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000100)=0x1200000, 0x4) 16:13:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:13:02 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = socket(0x20000000000000a, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f00000001c0)={0x43, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000080)={0x9, 0x7, 0x9}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x90000, 0x0, [0xffffffff, 0x4, 0x681, 0x1, 0x5, 0x5, 0x0, 0x8000]}) getsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000dbb000), &(0x7f0000329000)=0x4) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000180)) 16:13:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x1c, 0x80800) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000140)=0x1, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:13:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:13:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r1}, {r0, 0x220}], 0x2, &(0x7f0000000100)={0x77359400}, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000240)={0xcd2, 0x8, 0x8005, 'queue0\x00', 0x6d}) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000300)) r3 = getpid() r4 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x101, 0x408000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7fff, 0x1ff, 0x5, 0x1, 0x0, 0x1ff, 0x20000, 0x6, 0x20, 0x3, 0x3, 0x7f, 0x2, 0x8, 0x5, 0xff, 0x3f, 0x5, 0x4, 0x0, 0x8f43, 0x800, 0x1ac800000000, 0x1, 0x2, 0x7fff, 0x0, 0x7, 0x0, 0x3, 0x9, 0xa7d3, 0x6, 0x5, 0x6, 0x5, 0x0, 0xab, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x20, 0x1ff, 0x3, 0xf, 0x8, 0x9, 0x4}, r3, 0x0, r4, 0x9) 16:13:03 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$BLKRRPART(r0, 0x4004092b, 0x0) 16:13:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 16:13:03 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400000, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c65302020232c24776c616e3129232c6c6f637075736574766d6e6574315c202f6465762f736723000afb1cd5bf9de912a665ad958cf025a93738e08c253cb6c04114b0860a7c3ba8d5ccc7f1f951c6c7219119e29efec5a9b6e726f89334576884df8b2c5833bc8287484e7d5e76c6b123d69a4d36487ffc82163a0269e5aa97002d7b2cbb42eecb276eac2fc274f9a130897d8d878dd89685192c1743f49c1c862bf08c78c6dffcaf6e7c0df203a14f390b0b81f74949508b438a9248b799b12c5b28b7603e45c3060648645d7028606adc153ca65a044e9d729115acc6f4c50f20ce64a5d15b8efae0429b00225d4aa437c9b37b72a2edbfd26a4207edd352d77bb6c2c9da4a702cef26df9c2b2bc6d0fd7a0e4696cdfc01f3e80112b46e"], 0x127) r1 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x80000000042) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000d8c1a0bab9000000393c15729606024ebb8e98b3afe50a0000000000"], 0x2a) readv(r1, &(0x7f0000000700)=[{0x0, 0x1e1}, {&(0x7f0000000580)=""/202, 0xca}], 0x98) 16:13:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_mtu=0xc8}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x28040, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl(r0, 0x1, &(0x7f0000000000)="0adc1f123c123f319bd070") seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x2d}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x114, r3, 0x210, 0x200, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @mcast1, 0x2}}}}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100000000}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x237}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4040}, 0x4011) 16:13:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 16:13:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 16:13:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x2000000a) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 16:13:03 executing program 1 (fault-call:4 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x2, [{0x277}]}) r3 = dup2(r0, r1) write$P9_RXATTRCREATE(r3, &(0x7f0000000000)={0x7, 0x21, 0x2}, 0x7) [ 249.676137][T12355] FAULT_INJECTION: forcing a failure. [ 249.676137][T12355] name failslab, interval 1, probability 0, space 0, times 1 [ 249.689257][T12355] CPU: 0 PID: 12355 Comm: syz-executor.1 Not tainted 5.1.0+ #1 [ 249.696893][T12355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.707720][T12355] Call Trace: [ 249.711117][T12355] dump_stack+0x191/0x1f0 [ 249.715574][T12355] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 249.721577][T12355] should_fail+0xa82/0xaa0 [ 249.726103][T12355] __should_failslab+0x25f/0x280 [ 249.731150][T12355] should_failslab+0x29/0x70 [ 249.735845][T12355] kmem_cache_alloc_trace+0xf7/0xae0 [ 249.742483][T12355] ? kmsan_internal_memset_shadow+0x104/0x3a0 [ 249.748666][T12355] ? binder_get_thread+0x404/0xf60 [ 249.753894][T12355] binder_get_thread+0x404/0xf60 [ 249.758938][T12355] binder_ioctl+0x485/0x23b0 [ 249.763645][T12355] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 249.769620][T12355] ? binder_poll+0xbd0/0xbd0 [ 249.774266][T12355] do_vfs_ioctl+0xea8/0x2c50 [ 249.778942][T12355] ? security_file_ioctl+0x1bd/0x200 [ 249.784317][T12355] __se_sys_ioctl+0x1da/0x270 [ 249.789368][T12355] __x64_sys_ioctl+0x4a/0x70 [ 249.794059][T12355] do_syscall_64+0xbc/0xf0 [ 249.798613][T12355] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 249.804767][T12355] RIP: 0033:0x459279 [ 249.808788][T12355] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 249.828765][T12355] RSP: 002b:00007f12569aac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.837443][T12355] RAX: ffffffffffffffda RBX: 00007f12569aac90 RCX: 0000000000459279 [ 249.845607][T12355] RDX: 0000000020000140 RSI: 00000000c0306201 RDI: 0000000000000005 [ 249.853659][T12355] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 249.861726][T12355] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12569ab6d4 [ 249.869788][T12355] R13: 00000000004c0726 R14: 00000000004d2f68 R15: 0000000000000006 [ 249.878063][T12355] binder: 12353:12355 ioctl c0306201 20000140 returned -12 16:13:04 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffc, 0x200) getpeername$unix(r0, &(0x7f0000000040), &(0x7f0000000100)=0x6e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001e40)=ANY=[@ANYBLOB="140000000b00"/20], 0x14}}, 0x0) socket(0x10010, 0x80002, 0x0) 16:13:04 executing program 1 (fault-call:4 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:04 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000180)) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000140)=0x2) r1 = semget(0x3, 0x3, 0x40) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000002c0)=""/228) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffff7fffffffff86dd6076605100303afffe809c000000000000000000000000ffff020000000000000000000000000001860090780014000060c5961e00000000ff090000000000001903000000000001ff020000000000000000000000000001c44e7549acef65874480e2d0a8c6110115f1ae0cc065818ddf2e5b51ddb952156badcabdc98e6712a1261e650490773427211d5a78b8e5899fc53399a1c1509e8965ab3c78fcb917e71c24c4c9948daa7c70390d9e929721e2a98ce3831a3f37146039c4d09589fc4faa8156d44766437d1d44218836da203a33c7b6a250cf9039750ab479c08623e556124244c5352e833026b43406a66b530b4b88c4841200d1209359fdcdd761f4577bb9c2f0e8d49d76ab0ae5108e2888935574faefb27f60c814389aa22a8d81d2435584b254b4a9199ac3ce4de123bd3c698d967ae0ea074c2180f5886ac32e1b4284cc641a970f900aee77ee0036f9a215aebb79f061e6de79a0523847d3dabbc31cd92993c84021cbdd9165e38cc604335b9b3e8df5f697b6bd59c413d923af49a3e895a2e0356ce3602d63abeb37d4bec559e6fd415314d16ca29e4517a3476eafc5b0a87f83d24dd097628d3886600ee610e43411b3c292a868562627e06f"], 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) [ 250.170059][T12367] binder: 12366:12367 ioctl c0306201 20000140 returned -14 16:13:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:04 executing program 2: r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x49, 0x20}, &(0x7f0000000240)=0xc) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0xc002, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="04a302000000f19d"], 0xc) write(r0, &(0x7f0000000040)="200000001a0001fffffff0000000a00080000f00000000800000000000002000", 0x20) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="d0b4c2493f083fed6a5151d2b0d4ae01000000", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e23, 0x3ff, @loopback, 0x7f}}, 0x0, 0x81}, &(0x7f00000001c0)=0x90) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x9, 0x10000) [ 250.359731][T12376] binder: 12373:12376 ioctl c0306201 20000140 returned -14 16:13:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = dup(r0) ioctl$BLKRRPART(r1, 0x125f, 0x0) setitimer(0x0, 0x0, &(0x7f0000000200)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="df5fcc7669ce19921f918013f3b921a6316c8384a95e04713483bbfc3e6f945000000000000000"], 0x1) 16:13:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008915, &(0x7f0000000080)="11dd04004e0bcfec7be070e6c626fb9855f93cc475894a4feddfdc46") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01634040000000000000000000c9f599f80e45aa62356e8a370400000000000000"], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:04 executing program 2: r0 = socket(0x10, 0x4008000000803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x81a, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}}], 0x1, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x2) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @dev={[], 0x1e}}, 0x10) [ 250.527877][T12386] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 250.614210][T12389] binder: 12388:12389 ioctl c0306201 20000140 returned -14 16:13:04 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 250.654787][T12393] binder: 12388:12393 ioctl c0306201 20000140 returned -14 16:13:04 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x4) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x0, 0x4000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x100000000, 0x30, 0x7, 0x8}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0xba, @remote, 0x5a2f}}}, &(0x7f00000002c0)=0x84) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x420000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f00000000c0)=""/72) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000300)={0xffffffff, 0x8, 0x81, {0x0, 0x1c9c380}, 0x8000, 0x9}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 16:13:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = fcntl$getown(r1, 0x9) ioprio_get$pid(0x3, r2) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 250.895136][T12401] binder: 12400:12401 ioctl c0306201 20000140 returned -14 [ 250.904725][T12403] input: syz0 as /devices/virtual/input/input5 [ 250.912955][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 250.919519][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 250.923619][T12404] binder: 12400:12404 ioctl c0306201 20000140 returned -14 16:13:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xffffffffffffff80, &(0x7f00000000c0)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x44400, 0x0) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000040)='-vmnet0.\x00', 0x9) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000080)={0x20, 0x2, 0x0, 0x8, 0x5, 0x40}) [ 251.047714][T12407] input: syz0 as /devices/virtual/input/input6 [ 251.101527][T12410] binder: 12409:12410 ioctl c0306201 20000140 returned -14 [ 251.117516][T12412] binder: 12409:12412 ioctl c0306201 20000140 returned -14 16:13:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x400) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000080)) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:05 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045006, 0xffffffffffffffff) ioctl$RTC_WIE_ON(r0, 0x700f) 16:13:05 executing program 1: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3, 0x2) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000100)=0x7fff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0157444000002600000000a0c86f2ffcf37a542336882637332e8578ce0ff3ee29c051a3633ba6af837277316dfd9b9ef56a52b82ca45185415b3364a9ba865cf372f5495292fe992ab5d99db9d09469d7c445e24203b805fa1320de759ad57e8a08710734803e35b57d071c349f0b4252abe105c9febcb5d137652c239459204d701ad171b562cf569b08ac44c092d58020df24c191c5e39bc48aecd7c7386280452fd14030f387207f1ae7a0c5e94a9ef4c8c1fcfc2bf986f255fefdfdc8a71e7598a9439ff15934e7df9c55b3f477e8b7963652118caa88aacf7a7ad37d0da4fbc7cbc0cd1618f90c423e59451d2336773bdf67"], 0xfffffffffffffda1, 0x0, 0x0}) r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$CAPI_GET_ERRCODE(r4, 0x80024321, &(0x7f0000000080)) [ 251.462741][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 251.469202][ C1] protocol 88fb is buggy, dev hsr_slave_1 16:13:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0x6) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x6, 0xd) [ 251.524332][T12422] binder: 12421:12422 unknown command 1078220545 [ 251.531033][T12422] binder: 12421:12422 ioctl c0306201 20000140 returned -22 [ 251.597207][T12422] binder: 12421:12422 ioctl 80024321 20000080 returned -22 [ 251.658988][T12425] binder: 12421:12425 unknown command 1078220545 [ 251.665662][T12425] binder: 12421:12425 ioctl c0306201 20000140 returned -22 [ 251.696972][T12424] binder: 12421:12424 ioctl 80024321 20000080 returned -22 16:13:05 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x101, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, 0x1bcd, 0x2, 0x28, &(0x7f0000ffe000/0x2000)=nil, 0x6}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0x0, 0x0) pipe2(&(0x7f0000000180), 0x84000) ioctl(r2, 0x7f, &(0x7f0000000000)="f561bb45b6d53bb44c98a8770022") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="016340400000000000001c05c5a6000000000000501b404d6f068c6ac0f5896f8e8c7e2f1f82b75de3aed63f"], 0xfffffffffffffda1, 0x0, 0x0}) [ 251.809397][T12432] binder: 12431:12432 ioctl 7f 20000000 returned -22 [ 251.823513][T12432] binder: 12431:12432 ioctl c0306201 20000140 returned -14 [ 251.842995][T12432] binder: 12431:12432 ioctl 7f 20000000 returned -22 [ 251.856021][T12434] binder: 12431:12434 ioctl c0306201 20000140 returned -14 16:13:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00a09ad200000085989187277985abc4d160682efd49aa88ad574f098485656922455707efd5e12c2fe488642789052f390fc99109b4ff05c5e7030399f09abf532d6be146e032c15c49f8e14d69f902890901c263fe3f6c5ecd8a0ecf326bdec7b040ca5377e6fc2da3571b0f9a360a7c6bf6d9bc58bbc705f962f779e69c0d2dff0fc11e85c3ab86c992cc16169062d7ddacca4ea922b908c8c60b9a7c9f79b371439b720db1485ec2071eca2f445e093188c27f26a1c6ebb2397c3a2bc0f8bee98874f11ab8f2ece761356472fae4b7cc0204e536bc844248575f3e1baf983bf07fce3a9c4bc507c0bad9e70652be47f556c45e952844a163b04b003a0ed4c680"], 0xfffffffffffffda1, 0x0, 0x0}) r2 = semget$private(0x0, 0x1, 0x2) semctl$GETNCNT(r2, 0x2000000000000003, 0xe, &(0x7f0000000440)=""/244) [ 251.959959][T12436] binder: 12435:12436 unknown command -761618432 [ 251.966627][T12436] binder: 12435:12436 ioctl c0306201 20000140 returned -22 [ 251.987731][T12438] binder: 12435:12438 unknown command -761618432 [ 251.994396][T12438] binder: 12435:12438 ioctl c0306201 20000140 returned -22 16:13:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="5537a77dc50aac60acaeb79b23eee3a3b20931f7b19913229ad8ffa43bcaf64cd38dcbea8eed980cb0f11ab50739747cbf37af1d62d4a7fd824a575f7f2395864458449835ca", 0x46, 0xffffffffffffffff) keyctl$read(0xb, r2, &(0x7f0000000180)=""/102, 0x66) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 252.100539][T12441] binder: 12440:12441 ioctl c0306201 20000140 returned -14 [ 252.129402][T12442] binder: 12440:12442 ioctl c0306201 20000140 returned -14 16:13:06 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x1a000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x4, 0x3f, 0x3f, 0x4, r0, 0x3f2, [], r1, r2, 0x2, 0x1}, 0x3c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='cpuset@@mime_type&\x00') ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 252.316348][T12445] binder: 12444:12445 ioctl c0306201 20000140 returned -14 [ 252.344398][T12446] binder: 12444:12446 ioctl c0306201 20000140 returned -14 16:13:06 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@md0='/dev/md0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='iso9660\x00', 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)="7860fc611539097de813c9bd0df290ae7af8df7dc2d48e5c7b3334b2c78e27d9b3e8c4d68d1985d6c2398d99978e255439cf5fe6599e02e68848") 16:13:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7ff800000000000, 0x40000) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x82000, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000100)={0x0, 0x2, [{r2, 0x0, 0xfffffffffffff000, 0x1000001000000}, {r3, 0x0, 0xa000}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:06 executing program 2: syz_open_dev$rtc(&(0x7f00000001c0)='/dev/rtc#\x00', 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0x4, @empty, 0x1}, {0xa, 0x4e22, 0x3, @empty, 0x8001}, 0x81, [0xb9, 0x0, 0x80000000, 0x704f, 0x7d4, 0x4, 0x6, 0x101]}, 0x5c) ppoll(&(0x7f0000000280), 0x200000000000020b, &(0x7f0000000000), 0x0, 0x92) [ 252.916039][T12451] binder: 12450:12451 ioctl c0306201 20000140 returned -14 16:13:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000e42000/0x1000)=nil, 0x1000, 0x0, 0x10000000000032, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x42, &(0x7f0000e41ff7)={0x0, 0x0}, 0x10) 16:13:07 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x9}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)) r1 = getpgrp(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000200)='ne\x00\x00\x00\x00\x00\x00\x80\x03a\x95\x18\xf6@\xc6\xc4\xdd\xbb7j\x1c\xe9!\xdcJ\x05\x0e\xa7K\xc4?d\xb2\x97u\xd5\xe1\xc6\xd6=\xc5\xf9\xd4\xc4\x1b\vD\xe6o\xa1\x83\xb0\xe1\x97\xcc\xab\xda\xd7\xb4\xedt\x9a\x80_G\xfd0\x01`\xcc\x9d\xfc\xd1%i\xf8\x16wd\xe9<\x17\xf5$\x95\x98\xa5\b\xc7+\xeb/\x98\xb1H\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00') ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000140)={0x0, 0x1, [0x2, 0x2, 0x4, 0x1, 0xa12, 0xffffffff80000000, 0x800, 0x6]}) write$P9_RCREATE(r2, &(0x7f0000000180)={0x18, 0x73, 0x2, {{0x0, 0x4}, 0x5}}, 0x18) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000100)={r3, r4/1000+10000}, 0x10) 16:13:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0163404000deffffffffffff66bd12fabd109106000000000000b06e6cc6e9dfc04f86577346dc6abecf3b0800c0cd3a896356fb8ea3e8312a60e537c6"], 0xfffffffffffffda1, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r6 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=r3, @ANYBLOB="03630840", @ANYRES64=r4, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r5, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r6, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:07 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000080), 0x16b) [ 253.118039][T12469] binder: 12468:12469 ioctl c0306201 20000140 returned -14 16:13:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000000a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) unshare(0x24020400) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x1e, 0x0, 0x1ecadfd6878a736) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r3, 0x1}, &(0x7f00000000c0)=0x8) [ 253.173085][T12469] binder_alloc: binder_alloc_mmap_handler: 12468 20ffd000-20fff000 already mapped failed -16 [ 253.212690][T12469] binder_alloc: binder_alloc_mmap_handler: 12468 20ffc000-20fff000 already mapped failed -16 16:13:07 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x20}}, 0x18) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10100, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) [ 253.255374][T12469] binder_alloc: binder_alloc_mmap_handler: 12468 20ffd000-20fff000 already mapped failed -16 [ 253.298220][T12474] binder_alloc: binder_alloc_mmap_handler: 12468 20ffc000-20fff000 already mapped failed -16 16:13:07 executing program 2: r0 = getpgrp(0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/net\x00') r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x6, &(0x7f0000000140), &(0x7f0000000080)=0x4) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x20000, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000001c0)={0x2, 0x3ff, r0, 0x0, r3, 0x0, 0x2, 0x4}) 16:13:07 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000080)={0x3, 0x1, [0x4, 0x0, 0x7, 0x20, 0x355, 0x2, 0x401, 0x6]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000180)={{0x73, @multicast2, 0x4e20, 0x0, 'dh\x00', 0x2, 0xff, 0x72}, {@empty, 0x4e24, 0x0, 0x2, 0x5, 0x6d}}, 0x44) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01634040eaffffffffffffff0000000000000000"], 0xfffffffffffffda1, 0x0, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) socket$bt_cmtp(0x1f, 0x3, 0x5) [ 253.456821][T12487] Unknown ioctl -1071094779 [ 253.485332][T12490] Unknown ioctl -1071094779 [ 253.498985][T12491] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20000 [ 253.514375][T12491] binder: 12489:12491 ioctl c0306201 20000140 returned -14 16:13:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0163404000deffffffffffff66bd12fabd109106000000000000b06e6cc6e9dfc04f86577346dc6abecf3b0800c0cd3a896356fb8ea3e8312a60e537c6"], 0xfffffffffffffda1, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r6 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=r3, @ANYBLOB="03630840", @ANYRES64=r4, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r5, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r6, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:07 executing program 2: shmctl$SHM_LOCK(0x0, 0xb) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$TCXONC(r0, 0x540a, 0x5) shmctl$SHM_UNLOCK(0x0, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x80045432, &(0x7f0000000140)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x240208}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4000000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) recvfrom$packet(r0, &(0x7f0000000180)=""/210, 0xd2, 0x21, &(0x7f00000002c0)={0x11, 0xf7, r4, 0x1, 0x2, 0x6, @dev={[], 0x14}}, 0x14) [ 253.553372][T12491] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20000 [ 253.555383][T12492] binder: 12489:12492 ioctl c0306201 20000140 returned -14 16:13:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x410000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000180)={0x2, 0x2}) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x2, 0x80000000, 0x1, 0x3, 0x1, 0x20, 0x43, 0x2, 0x1f9b, 0x5, 0x3, 0x8001, 0x8000, 0x1, 0x12, 0xa}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 253.666128][T12498] binder: 12496:12498 ioctl c0306201 20000140 returned -14 [ 253.677017][T12498] binder_alloc: binder_alloc_mmap_handler: 12496 20ffd000-20fff000 already mapped failed -16 [ 253.694128][T12498] binder_alloc: binder_alloc_mmap_handler: 12496 20ffc000-20fff000 already mapped failed -16 16:13:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0163404000deffffffffffff66bd12fabd109106000000000000b06e6cc6e9dfc04f86577346dc6abecf3b0800c0cd3a896356fb8ea3e8312a60e537c6"], 0xfffffffffffffda1, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r6 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=r3, @ANYBLOB="03630840", @ANYRES64=r4, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r5, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r6, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) [ 253.787427][T12505] binder: 12504:12505 ioctl c0306201 20000140 returned -14 16:13:07 executing program 2: mknod(&(0x7f0000000000)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x800046800) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000780)={{0xa, 0x4e22, 0x8, @loopback, 0x400000}, {0xa, 0x4e23, 0x5, @rand_addr="9051527af3325f00ddfbba3e3641b0c1", 0x24}, 0x3, [0x7, 0x6, 0x401, 0x7, 0x6, 0x9, 0x7, 0xfff]}, 0x5c) r1 = request_key(&(0x7f0000000040)='trusted\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='system_u:object_r:apm_bios_t:s0\x00', 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r1, 0xef38) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:apm_bios_t:s0\x00', 0x20) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000840)) execveat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)='system_u:object_r:systemd_logind_exec_t:s0\x00', &(0x7f0000000180)='system_u:object_r:apm_bios_t:s0\x00'], &(0x7f0000000380)=[&(0x7f0000000240)='system_u:object_r:apm_bios_t:s0\x00', &(0x7f0000000280)='(^securitycpuset..\x00', &(0x7f00000002c0)='system_u:object_r:apm_bios_t:s0\x00', &(0x7f0000000300)='system_u:object_r:apm_bios_t:s0\x00', &(0x7f0000000340)='system_u:object_r:systemd_logind_exec_t:s0\x00'], 0x1000) r2 = getuid() ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xfff) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r1, r2, r3) execveat(r0, &(0x7f0000000500)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000540)='system_u:object_r:systemd_logind_exec_t:s0\x00', &(0x7f0000000580)='system_u:object_r:apm_bios_t:s0\x00'], &(0x7f0000000740)=[&(0x7f0000000600)='cgroup\x00', &(0x7f0000000640)='syz', &(0x7f0000000680)='system_u:object_r:systemd_logind_exec_t:s0\x00', &(0x7f00000006c0)='cgroup\x00', &(0x7f0000000700)=':-\x8a+selinux($!\x00'], 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x100000001}, 0x1) 16:13:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x800, 0x0) accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0xffffffffffffff2c, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0163404000d200000000fffffff6000000000000"], 0xfffffffffffffda1, 0x0, 0x0}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x2, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x67, 0x1, {0x84, 0x4, 0x1}}, 0x14) [ 253.867498][T12508] binder: 12507:12508 ioctl c0306201 20000140 returned -14 [ 253.903870][T12508] binder_alloc: binder_alloc_mmap_handler: 12507 20ffd000-20fff000 already mapped failed -16 [ 253.932990][T12508] binder_alloc: binder_alloc_mmap_handler: 12507 20ffc000-20fff000 already mapped failed -16 16:13:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0163404000deffffffffffff66bd12fabd109106000000000000b06e6cc6e9dfc04f86577346dc6abecf3b0800c0cd3a896356fb8ea3e8312a60e537c6"], 0xfffffffffffffda1, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r6 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=r3, @ANYBLOB="03630840", @ANYRES64=r4, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r5, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r6, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:08 executing program 2: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x62, 0x2001) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000900)={0x5, @raw_data="505c631f862d8d38f4ea9bbd00d6e25e2efb4afa4fd49df79e5058d0ce4acc08a81b4eef32e733d658c9b38715fbb4f6fe4e9f19357b24983b35625498c8d32d94b89cce480fc78a24839298205853ed2e2f8917426319d51bcc54c7a3b8e5b5c9d579c985f2709e7c22429dde7e5524e2b767eb263c3dc79b47fc46fa003ab1150874efd688474d19b014e867b7651249f1a2cfd0c87fef34dd111b2a8c01290c62c27456cb98aef0a997ad1d903f83034d248b5898562375e855aa06e0277b482631802a496fdf"}) [ 254.055243][T12518] binder: 12517:12518 ioctl c0306201 20000140 returned -14 [ 254.106081][T12522] binder: 12517:12522 ioctl c0306201 20000140 returned -14 [ 254.117592][T12521] binder: 12520:12521 ioctl c0306201 20000140 returned -14 [ 254.143962][T12521] binder_alloc: binder_alloc_mmap_handler: 12520 20ffd000-20fff000 already mapped failed -16 16:13:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) flistxattr(r0, &(0x7f0000000180)=""/134, 0x86) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0163404000000000000010804fcfea87b2eb6dcc76f125792200e58300cd8fc4f1e9407ead0600008ab020b4b55ca1039a4935e6b32f003e3a834f6879bcec2efe4e14d5fa0c3452e40b3a3ed96bf7904e713798e47fd675c2534eebf1322944c34c6d85b2a3bc27ba7a265e6ef85666fd00"/126], 0xfffffffffffffda1, 0x0, 0x0}) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) [ 254.174419][T12521] binder_alloc: binder_alloc_mmap_handler: 12520 20ffc000-20fff000 already mapped failed -16 16:13:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0163404000deffffffffffff66bd12fabd109106000000000000b06e6cc6e9dfc04f86577346dc6abecf3b0800c0cd3a896356fb8ea3e8312a60e537c6"], 0xfffffffffffffda1, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 16:13:08 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f0000000140)=0xff10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_netdev_private(r2, 0x89f6, &(0x7f0000000180)="1a71e955e714d9e73b36473605150a20a1eb53c8476bce1200d1de4a99a49d227d107bf795e833f3f3bc3c70d319e943fb7c73bac3efe5179279382e1774322c53b10f94d65c1793190f5d8319f450437e306c3262a250f84ff819cc0cbb0ee68a6b5fc759942ef7045390574b54ea7f3a384938e5cafc5b1998a3cada597c87a1542bbe56") write$ppp(r2, &(0x7f0000000040)="256d06f75a568c6eb52e8eb5cee72d02e5a5e75219a5bb5f2e33c7159bfbc13790178fcb9bfd6eed933a2d03879d916d4cf3565e1984c508742c94c7818309cbb2f78d2133db5adfe9c25dc4db09b897a39409a3cea4a368f4c18bdba450fe5d71b586d2a98d7d0b25bdaf896907788cbeb46474a62c2710aaba0ec94996fcb2a747093101c63d1d2eadb5c2f5a7e3a7107f000e846db07bc512277a31d2c64b81dcb3e279262185bb33aa2eb0626277d492259831f9f2ac105ca95952", 0xbd) [ 254.314218][T12529] binder: 12528:12529 ioctl c0306201 20000140 returned -14 [ 254.359191][T12533] binder: 12532:12533 ioctl c0306201 20000140 returned -14 16:13:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x200) write$P9_RREADLINK(r1, &(0x7f0000000080)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L+', 0x898c}, 0x28, 0x2) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0163404000deffffffffffff66bd12fabd109106000000000000b06e6cc6e9dfc04f86577346dc6abecf3b0800c0cd3a896356fb8ea3e8312a60e537c6"], 0xfffffffffffffda1, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 16:13:08 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6b276fda"}, 0x0, 0x0, @offset, 0x4}) [ 254.513674][T12543] binder: 12540:12543 ioctl c0306201 20000140 returned -14 16:13:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = dup(r1) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000080)=0x4) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0163404000deffffffffffff66bd12fabd109106000000000000b06e6cc6e9dfc04f86577346dc6abecf3b0800c0cd3a896356fb8ea3e8312a60e537c6"], 0xfffffffffffffda1, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 16:13:08 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) fallocate(r0, 0x40, 0x0, 0x80000001) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2100, 0x0) [ 254.668335][T12551] binder: 12550:12551 ioctl c0306201 20000140 returned -14 [ 254.686155][T12554] binder: 12550:12554 ioctl c0306201 20000140 returned -14 [ 254.705995][T12553] binder: 12552:12553 ioctl c0306201 20000140 returned -14 16:13:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000000)={0x9, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}]}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000080)="c2665db6399c4c165089673d6ff5826bd69b629a08efd6792b37a82e65d7b63bf5a77b4412b10427619fc206a4489f19635ea71730a19db45483fdf7d6830fbc41946215ecf1b89501b92ab72f52cd2419cb7ffade184fc26e304c85704e4085a54329875d5e809981e1c12da36870c3b54470ab593c7c3e9b428b", 0x7b) 16:13:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0163404000deffffffffffff66bd12fabd109106000000000000b06e6cc6e9dfc04f86577346dc6abecf3b0800c0cd3a896356fb8ea3e8312a60e537c6"], 0xfffffffffffffda1, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=r3, @ANYBLOB="03630840", @ANYRES64=r4, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r5, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:08 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0xc0000) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xff, 0x8, 0x3, {0x6, @pix={0x40c5dd66, 0x9, 0x50313134, 0x7, 0x7f, 0x1f, 0x3, 0x2, 0x1, 0x6, 0x2, 0x7}}}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) [ 254.843804][T12560] binder: 12559:12560 ioctl c0306201 20000140 returned -14 [ 254.871492][T12564] binder: 12563:12564 ioctl c0306201 20000140 returned -14 16:13:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0163404000deffffffffffff66bd12fabd109106000000000000b06e6cc6e9dfc04f86577346dc6abecf3b0800c0cd3a896356fb8ea3e8312a60e537c6"], 0xfffffffffffffda1, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=r3, @ANYBLOB="03630840", @ANYRES64=r4, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r5, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) [ 254.902634][T12565] binder: 12559:12565 ioctl c0306201 20000140 returned -14 16:13:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000080)={0x6, 0x73}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 255.069485][T12573] binder: 12572:12573 ioctl c0306201 20000140 returned -14 16:13:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0163404000deffffffffffff66bd12fabd109106000000000000b06e6cc6e9dfc04f86577346dc6abecf3b0800c0cd3a896356fb8ea3e8312a60e537c6"], 0xfffffffffffffda1, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=r3, @ANYBLOB="03630840", @ANYRES64=r4, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r5, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:09 executing program 2: r0 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1004004, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) uname(&(0x7f0000000080)=""/237) [ 255.137128][T12575] binder: 12574:12575 ioctl c0306201 20000140 returned -14 [ 255.198723][T12578] binder: 12577:12578 ioctl c0306201 20000140 returned -14 16:13:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0163404000000000000000000009000000000000"], 0xfffffffffffffda1, 0x0, 0x0}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x50100, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x74c7}) 16:13:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0163404000deffffffffffff66bd12fabd109106000000000000b06e6cc6e9dfc04f86577346dc6abecf3b0800c0cd3a896356fb8ea3e8312a60e537c6"], 0xfffffffffffffda1, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r6 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=r3, @ANYBLOB="03630840", @ANYRES64=r4, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r5, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r6, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:09 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x20000, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000080)={{0x7, 0x10000, 0x8001, 0x8001, 0x5, 0x7fff}, 0xfffffffffffffffe}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06671cef559be1f104e4bbd797abc3852194a908d328142cbc83", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L+', 0x7e}, 0x28, 0x3) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0xffffffffffffffff}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup3(r1, r2, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)=0x6, 0x4) tkill(r3, 0x1000000000016) [ 255.352867][T12588] binder: 12587:12588 ioctl c0306201 20000140 returned -14 [ 255.368081][T12589] binder: 12585:12589 ioctl c0306201 20000140 returned -14 16:13:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0163404000deffffffffffff66bd12fabd109106000000000000b06e6cc6e9dfc04f86577346dc6abecf3b0800c0cd3a896356fb8ea3e8312a60e537c6"], 0xfffffffffffffda1, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r6 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=r3, @ANYBLOB="03630840", @ANYRES64=r4, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r5, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r6, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) [ 255.413675][T12593] binder: 12585:12593 ioctl c0306201 20000140 returned -14 16:13:09 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x40, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x1, 0x70, 0x3f, 0x7ceb, 0x100, 0x100000001, 0x0, 0x800, 0x4000, 0x8, 0x100, 0x20, 0x4, 0x6, 0x1, 0x7, 0x1, 0xcde8, 0x4, 0x20, 0x9, 0x100, 0x6, 0xb00, 0x9, 0x7, 0x53c, 0xffffffffffffffe0, 0x8000, 0x100, 0x6220, 0x7ff, 0x3f, 0x1ff, 0x3ff, 0x39, 0x2, 0x8000000, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x10000, 0xb6b, 0x5, 0x7, 0x6, 0x6, 0x80}) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x9d}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000900)={r2, 0x1000, "b83f66ff2413b1d179b5ec4c5abc4fc96cb99b639060bb61d6e535fadaffd0b7d8984f55f3832231bd1855b375091902c5b1f92c13629d00f11b15fbd6557dcd27d51c307f59159cafbfa639ac22c81d946dd302433b319662445beadcb772eeabd8f3ef0c189bb99b5e99fbf9feccb2843e895085491624213fa88e7a314d64934ea1907689c411338e20d202bc30f26629026e75c032bef15a2ea896ad6339c97c44415e0536a62be60a689f106784a2344b3eb75586432bdca5ed6eabf59427ba4fbd4e295bed2edac624d9e980d94210b9e64b00427b851be1efd9fa2b99480c4b22b8979a81e5f6acc2ee6d9ad43cd5d7e7a7cee0e3e39870511ac5b51f67c9b618bcfe5f6a0469ca9785573644109b5cf647878a05cce149dec8c2461e8733ca4ea9846412b536d92f5184824c0dd0cea3b924f6b4b2591e46e8e50a28224837dc269188230e977111dc577a11dc777b3965cab931969aa09d5f7a1bbff2a43c5aac10fe9056b7199567f811fb480c915be7ba4f9e49f9b06ea32c88d4f2c6d628862884f89dd0ffad82e01bb28b41622309b09f7bc896c11664772238eeb23048f88fde6467d60e857bc35297e4196ff97f7089659d892bb5b1559dce89e3fe53c07961dafb01c2d581a88614e3e90cbfb5e0630bf4b11a14247fca398c70ffd3d4e06a3e4cac180d71519604751aa79b14ee182750d15721e7e7f17a6a73710618162918b0f328e12afa7453e5dfb4a702dc2d494c761b2a0ac224d5ea87d8c1baa30e1e4e5bba2ef75e7a51ddd0495030b4608757e2e672fbbf6dc3f0bfdb6a848af7857d371c4f2494cbd563b6e2dc5ee13b513695704e75f3d833514377a04d169b32e682e6fb59af4388788e08ccba6772d4768cb1f49538afe994986285df0aec0cb79ead2577bc2e4e85ebf2ea8a23297513b2ccd60300ad4287a871e17c1e4d4f3b6fd06d392d94b6a6c2b57383292540a8c2c0eb3ceeb2fd6fd8097b111b2a25c3368425b47d07210d1234849dd69e8319a38f3c07ce0d1a63847982497af2969a14841cd0547230628fde7494069e5b987b55afbad48a6080ba5b05a04b94440e5b3af7324f6b94afb6b1295c9e5a55f556e0978d208e9b0e349c02d15ec95c23129bf4148a9b67e5a46e24c2fc1f93392f4a942923f8c35e28f202e8ca36457d04a4d5df9693a998c7a78339656edb1eed883614d9b4329e19ce9edabe4b3fba012cf5a5ab37e8cead39bf27d71b68142f61aebd9fcdcbbb42dcb2501f79280a4fbb02791784bdba623b1ba9d5be9e65d6e4950b81e55197bdc8187b1247370d85c4a82e7d1289ba03e2d6ac364fe4e9db0c2fe754ed875be21c618482ba7cf8c25727e34ee9fb0a0134f03660ba731e74a527523c51f9e7e33abbac22ce3b541951111d2280995bc6a78233e8f6bb2d5c2be993f38d60e393d7d704726b0632a700d0730d6b6e79f0b3db762ab032cd3910eb4cd01ef477ad0971a2be785556b72b623f143571841af352e3346abe0d3d26bf74dec428d7e47743052d3b6b40513dbbe5bf276edd05c407f000f28717d5268cbcd110fe1c0acebf99627e1fcf47cfb330882d991253c1d07b080798b5d62b36b8ca802270a76ff46336f56ac3ce5d590d38f1aa9b05930c67b0a6d10af1c2b7c2e6da747c96cdc0a6a15b3bd68225082ad75748077a9a27fab7637ecc7dd3399b06b063cd32a32fed47683666cfd766df2bdc661564aed7c9f7563008a9b6ed6093387d936c8613fa226c7112cc9a1ce4808bd7e5dacdc4dfd597e2ee20f05411ca640741cca823a18037312bfec9641628a9332398075b012ab313c8f2923dbe250bdb47826bc4f7a04f7469515fc46854f22b06ac31a747404292f8e5f433304c2e98f5fd9c3dcdd5cb05d29259f714e60f26b7b5590c4aa488d3e79501f8906f20a828390b6552844500e252cd58db2765c0b4ce332a5ef4b77375b0de5cd3bf233bcdae55922f44642aaa50cb40c1533166c6decc32f082ca2e9a0e63867c06fb4fd28e077cd79df624d5afc6a24d5590723c23190626147d79285fb939e2de09f662d61974e546f71e7ff87379e5d3ef7f1106f1cb0609b07d65c87e9506acf698a9f216fff642206080c4ac2f04e450f2e0cf8830e9b8c1d247f661a69ec9d22395adf349d7260ca567b2c91ed223541f0b23a35459f164210d382eb1b904af05153ff98cddbba6abd5201a768ba82015dc7b73a225b1136ee80e79b101ba4dd90e4067dec9157c96ac4af71155b0e5895f9c80d025c391f961fe7bedeaa147f2ba8f8c5d7eb5aabb7be8667405fcde9a98dc14818f03b6123af23d1a28fa1bdd6ebe3fd6e8d7490d2ba0121d700830a755c10139c79a027268d1103f1f857c084a3e21d15f2bee0b80d7ca4846a374d9559696f87dc9250ef9fb3b83735e53ad7c0ae3b369a4334cc0f712eac20f771c4923a7947deddeadf5ab2f2b4366f65f2680fb5402fb73734cc3218ccdf756929d3dff7db09d142b52427b6e16de59cc88ae902ed145f498556cff8b7df512da9d2fd5ed003ba5d9233bec652583872151ae53909cc227cbf0e49e0ddd956ac469c417c28433ebae548c0d7a09c326b381628f6ec59222253a832a5d328d9232b4dc0546b361f86ab79d9e08dcbab8275608c021505df4bcf72b63911594d56a8ac1ea8d8731c972ad0e25259910d7251d04a10b21df771f6399b7a66e1a262289a06586172a6a42f31fd3426a9ea126a5f2fece0f929fd504c2c924252eac34bea44b6c75e8ffd5a181cf5ab8674c9c1260fce87cc2ca0760c75317abd81e087bb03541a72118a9fc9f53e6a9e64a45ca9fb5d6d9e11789fec0ecf07f74ccbd3ef2b2ecd7cc2a0d81af4a9d92c9472921a5b9d61ba7c1e9da18e4c8c3a65195f0a2b5b6434fbf1cf70ea6e16a87eb74b0b6a3bb33f75924d196b5d13914029828427a599a4c3f8d936e79a5b9d32d13b67fc40d05a4946b7200bb125e5ab607830993792787656a1c9c29c82705b027e0a725dc6dc0065f1c80bb712c30d9c34bf95d1a13b57e02f425dc1c95c499ebaa844ec7492ddd9f93c884b0cdb926b4a090a7c6bc354e602ddd4bb961bbf43562f07e2e9c93c1168cea3129f3502801c225c22491a08b00d47fafb3c66c2166c34a01c9211fa37bbd07f6d5579601e47826e18bec33d404fa9ee17c12c7b58dc6ba861d18f12f43490ebcc4efda8ea006cbd87c70db54805a0eff0b76fb7d17fb60c31118c5d8aae54cf7914106a29cc0b79d37a040b5bae5169c57261754cea0d3551e5b779b80130af969f1e1a33497574b21a812a44ed000c2f8382f74281823977c550dc08b51b4fb479d1066cb50b6fd74ab19cfe6aeed6fd1f0b8273fb5133864be1b1fbad71c28a6be3adf4d56b695251812992a9b08e6e1f4b3522a729e8af9dc3b806fe79332b9b2ff8903afc146d2fb35dc312ba1438e74f46da71730fe6c59df5b88e3583a7d47f3eea8116837329094fd79b32bf30de3ab777e0983471382865c822b3711c5489bd7ac28aed889fbea925089e32d8fe62fbc1ee91932026b6353389db2454f9638e93e2d2c419d48833422631d51276391003393059ae70f10b158422433253a22303bbb46cc39f9179a792cb5a6b0f88da3b5fcbca01afa6a471681382e47304420cf7ed515fd407420981f67f1a34f3c276ed44d2e2402c09ba20ebcf1416d04ecb21acb0f6e49801b423b9c518d11e43a87710a8c181b6c03aaff92b53278424d17e16bca7bb37e3716c97efd922ea9ae9004fa71c91d71376bc151da1ff6f64c7a6decf824461cc913de6038ec8de013408273cf4c7790a14e32e7b3a2e82bfbf0b1aaa926f3be4a77250d216283f71bce503645a5f297f41afa6f9c203ebd6fc278669d5ac8008951a80854a78ae1868130777622b7d98926190e93fa490ce35dae90e0ef37b9c48115e86ba60b8b6d4b2fac5bde300a9ac10c954744778b92c35855292b889a1185d7f2d7fa925b89f386bd10ed599c925881228afe46fa721cdbdd488c4ecf6f41b563b5400ee5d2e68a04f32eef6fb86aa7dc2ce07ddddc2e39acca9fff5640f6b10ec7683cea1ce812dedd2733212a008e332d9393b481fa3e0f412d58d127e8c09ceadc4acc10edeb378a25f24ffe4b21c2e7ef74d1de46e84f1b1adbc2c0076c8349134e6a1f659e05694e3206a81ac8d9a8d5fdf4ac63f67fe87a6647774f3ca1b8a45a106ab104ea0f6841127921934db3df9c62457284e65c5db78cc19023e05190d390e7e26102607a96487070e4dbc206a713e43643774a7157940ab5c75c9c08eeb7b4fa8dadfc39cf9242a8d95066b399f9347fb467deeb732e834eed00a32af0ee0a9c469f69abb2e41d3dbce9b720966908b2a15e470cd8ebed1c3baeb1712d02185b360ee0b3f0a1070cf3fab24c79f724ff13cca23bb124911b87f8038f717d106f33d394d9b0b1af831ae533028a6c25d72fde18d73fce9b56b635e3262036697db7de2a3b98a0e7a821eee31a216a9c8fc20035ca9912e71db31265362b9b3fb29417731eda7765cfc45dc4b7173b1c3a30ad73b3ce4e49e3b61a66b9ba377b1e6d839803e669f176e2f2d431e6a7274c1cce65c3e67929429f91dfe2884bf34a6cf6af7aceeff783e1fdff4787200b55cf5927a7975f5c4ed01dc850e6ba5467aa12c4c102f8e23d9c7bfe8533eaa866a437d3f0f8190a67b5fab3e9aab5c884b5f90cd18268487dbe8920e2e85fb18203e4fa31ac3b36c645119041021ceb38291880fee56212072acfa9fb7d1060c7eb16fd186cb4221df55fa0bed7e64354ab6eabd3454be59eb1ce3c7a1b044169c55dff1c74c1368775f2dfc55e1460ac953fcc7174d2271c7940332a219253455bff6b780a07e29c0cd62ff200f3512794b62e2439517d8ef9e0f3e31408c9795f5eb673751b6d16de8cc501a234232f180ed5a7d4f94fd717e4adfa6e3b31ba2dafb1f1d40d51b213ccce1ffef7951384a7f45812e5c54a05878154b36792db9988108b3c8ff763062b104eb2a685a95a38a759ae3f7a242779f2c544931e4be7938c2a0879471fdf551f58959e9bac50b39f1502713a9db469d94f4cf0274d6a1256c45d44f96b5d0f1af473d0411285635e907a1cab1aa208173755e6532eb07489d892f017d963c6d897b3310aed75e850ccabae5cfc6e5c123ab70b65f7bb8a5a1e01c999d39e54f92c6926a087092e09b10192fef3702c12752f66c7020bdc4ca45d62ee62cb2bb1602c39ee89533cb25b1a1214d697be22a8ea25f265f436f1df49cb6d0487fd7064612478fd4df3386624259e87fb118e506ec80c520d31e514767050050cfa0bcd31d7b9e99958ea4a91bcb673a1f6e6ef8a9b865813ba718e6bfa02795d6abdacf0f31926f20da7eb02a15fbbc1cbe32889cee0b656ceeb75a8f723313e8e33adfcc0b18bce7f967393faf02911b4860600bdebb87bb676868f2cb3da2f944b629b403a93431a8c25b355c7da685d56a2147e25116bac0bf5f0d66b7c386a59fef1a94efe4074358cd0752eb354624c0c825b98af2449d849e5b51512f62146bdef7f901bf1c85cdd874946575dbe36e18c1aa9a36b0360b6ec37594404006e14921a9ff11a8bdb32076f69183274262f708d01d9a050541f103d300a35377cfa8f2e7a9ed49f09372b2f691ed3c3778b69a28e3e5a4d10ad275bac1479dbd7ed65ce74a192daa25ae69d8cc9453f242d60841c14e804d1f5527359c249d0e9e7e3dbc21a"}, &(0x7f0000000280)=0x1008) [ 255.534242][T12597] binder: 12596:12597 ioctl c0306201 20000140 returned -14 [ 255.557753][T12600] binder: 12598:12600 ioctl c0306201 20000140 returned -14 16:13:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0163404000deffffffffffff66bd12fabd109106000000000000b06e6cc6e9dfc04f86577346dc6abecf3b0800c0cd3a896356fb8ea3e8312a60e537c6"], 0xfffffffffffffda1, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r6 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=r3, @ANYBLOB="03630840", @ANYRES64=r4, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r5, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r6, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") pread64(r0, &(0x7f0000000000)=""/19, 0x13, 0x0) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="89504b470000"], 0xfffffffffffffda1, 0x0, 0x0}) [ 255.592077][T12600] binder: 12598:12600 ioctl c0306201 20000140 returned -14 [ 255.702853][T12605] binder: 12604:12605 ioctl c0306201 20000140 returned -14 [ 255.721774][T12608] binder: 12607:12608 unknown command 1196118153 [ 255.728390][T12608] binder: 12607:12608 ioctl c0306201 20000140 returned -22 16:13:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x30) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000080)={0x0, {0x3, 0x1}}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0163404000deffffffffffff66bd12fabd109106000000000000b06e6cc6e9dfc04f86577346dc6abecf3b0800c0cd3a896356fb8ea3e8312a60e537c6"], 0xfffffffffffffda1, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r4 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=r3, @ANYBLOB="03630840", @ANYRES64, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r4, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r5, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:10 executing program 1: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x105000, 0x0) fcntl$dupfd(r0, 0x406, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400000, 0x0) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0xffffffffffffffda, 0x6, {0x7, 0x1e, 0x3, 0x48, 0x80, 0x43ca, 0xc48}}, 0x50) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e96240400000000000000000fb1c0000000000076c79d40dd641b651002228764ded10fac9b5aef62db7bb6cbd10a542a4f7b44ed7d73a4e69ff0b2aaa40ec30"], 0xfffffffffffffda1, 0x0, 0x0}) [ 255.885766][T12613] binder: 12612:12613 ioctl c0306201 20000140 returned -14 [ 255.901803][T12615] binder: 12614:12615 ioctl c0306201 20000140 returned -14 [ 255.914684][T12616] binder: 12614:12616 ioctl c0306201 20000140 returned -14 16:13:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0163404000deffffffffffff66bd12fabd109106000000000000b06e6cc6e9dfc04f86577346dc6abecf3b0800c0cd3a896356fb8ea3e8312a60e537c6"], 0xfffffffffffffda1, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r4 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=r3, @ANYBLOB="03630840", @ANYRES64, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r4, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r5, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0163404000deffffffffffff66bd12fabd109106000000000000b06e6cc6e9dfc04f86577346dc6abecf3b0800c0cd3a896356fb8ea3e8312a60e537c6"], 0xfffffffffffffda1, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r4 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=r3, @ANYBLOB="03630840", @ANYRES64, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r4, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r5, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) [ 256.027865][T12621] binder: 12618:12621 unknown command 1077961449 [ 256.034762][T12621] binder: 12618:12621 ioctl c0306201 20000140 returned -22 [ 256.046450][T12620] binder: 12619:12620 ioctl c0306201 20000140 returned -14 16:13:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0163404000000cef000000000007000000000000faddd05e208300002ad000008c6ecdd323"], 0xfffffffffffffda1, 0x0, 0x0}) [ 256.191619][T12628] binder: 12627:12628 ioctl c0306201 20000140 returned -14 [ 256.194466][T12626] binder: 12625:12626 ioctl c0306201 20000140 returned -14 16:13:10 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'caif0\x00'}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000000)={0x613, 0xb2e2, [0x7, 0x9, 0x4, 0x80000001, 0x1f], 0x7f}) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80000, 0x82) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000000c0)={0x5, 0x81d4, 0x1, 0x8, 0x9, 0x7, 0x2, 0x6, 0x10001, 0x5, 0x0, 0x5}) [ 256.356645][T12633] IPVS: Error connecting to the multicast addr [ 256.368154][T12633] binder: 12632:12633 ioctl c0306201 20000140 returned -14 [ 256.376379][T12633] binder: 12632:12633 ioctl 5434 20000000 returned -22 [ 256.386899][T12633] IPVS: Error connecting to the multicast addr [ 256.396853][T12635] binder: 12632:12635 ioctl 5434 20000000 returned -22 16:13:12 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1a0, 0x1) r1 = accept4$tipc(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x800) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x1, 0x3, 0x2}}, 0x2e) modify_ldt$read_default(0x2, &(0x7f0000000100)=""/66, 0x42) r2 = socket(0x10, 0x3, 0x0) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x1, 0x0, 0x1, {0xa, 0x4e21, 0xffffffff, @loopback, 0x2}}}, 0x32) write(r2, &(0x7f0000000380)="26000000130047f1eb14c1f8000022ff001000e3130000000100000000000000060003003a4b", 0x26) 16:13:12 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000040)=0x100, 0x4) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080)=0x5, 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x20, 0x100, 0x2}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r2, 0x7fff, 0x2, [0x100000000, 0xc8a5]}, 0xc) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000001c0)=0x1, 0x4) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000200)={'ipddp0\x00'}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0xa, 0x0, [], [{0x33ece980, 0x960, 0x55, 0x5, 0x5884, 0x4}, {0x8, 0x4, 0x8, 0x6, 0x0, 0x6fa}], [[], [], [], [], [], [], [], [], [], []]}) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000580)={0x2, [0x0, 0x0]}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x800, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x100000000}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000080) io_setup(0x6, &(0x7f0000000700)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000780)={'bridge_slave_0\x00', &(0x7f0000000740)=@ethtool_rxfh_indir={0x39, 0x5, [0x3, 0x9df, 0x81, 0x3f8c61a3, 0x7]}}) r4 = syz_open_dev$cec(&(0x7f00000007c0)='/dev/cec#\x00', 0x0, 0x2) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}}, 0x0, 0x0, 0x0, "c9fe93ec6c29358934aea6a0cf044e019cef76b9df2a97bab31492e5e19f6c3b3202996cac664a16f14298e4961cc3f94fbff13631147e90abe59a98d575695e63f283e192b399ee6579b2eb7521a16f"}, 0xd8) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000900)={0x2, 0x0, @ioapic={0x10000, 0x101, 0x7, 0xffffffffffffff81, 0x0, [{0x9, 0x7, 0x1f, [], 0x4}, {0x6, 0x2f0f9e14, 0x7, [], 0x2}, {0x3, 0x3, 0xfffffffffffffbff, [], 0x5}, {0x80000001, 0xd85, 0xc38b, [], 0xfffffffffffffff9}, {0x6, 0xc4, 0x1, [], 0xe45}, {0x2, 0x100, 0x7fff, [], 0x9}, {0x2, 0x6, 0x5, [], 0x7ff}, {0x81, 0x1000, 0x6, [], 0x1}, {0x0, 0x431d, 0x0, [], 0x6}, {0x1, 0x0, 0x3, [], 0xf083}, {0x7d135d07, 0x5, 0x8000, [], 0x4}, {0x6, 0x1ff}, {0x3f, 0x5, 0x1, [], 0x4}, {0x20, 0xe36d, 0xc6f, [], 0x4}, {0x2aa4, 0xbbba, 0x7, [], 0x1ff}, {0xffffffffffffff76, 0x7, 0x0, [], 0x6}, {0x8, 0x0, 0x2, [], 0x9}, {0x1f, 0x0, 0x800, [], 0x2}, {0x5, 0x6, 0x5, [], 0xef}, {0x4, 0x5, 0x5, [], 0x100}, {0x6, 0x7fff, 0xfff, [], 0x4}, {0x2, 0x7fff, 0x8000, [], 0x1ff}, {0xfffffffffffffe00, 0x5, 0xf5, [], 0xbd3}, {0x401, 0x2, 0x0, [], 0x9}]}}) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000a00)={0x3f, {{0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}, 0x1}}}, 0x88) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000ac0), 0x4) prctl$PR_SVE_SET_VL(0x32, 0x3a9ca) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/mISDNtimer\x00', 0x1, 0x0) getsockopt$netlink(r4, 0x10e, 0xb, &(0x7f0000000b40)=""/144, &(0x7f0000000c00)=0x90) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000c40)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000c80)=0x14) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000cc0)={0x77359400}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000d00)={r6, 0x6}, 0x8) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffc000/0x4000)=nil) 16:13:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0163404000deffffffffffff66bd12fabd109106000000000000b06e6cc6e9dfc04f86577346dc6abecf3b0800c0cd3a896356fb8ea3e8312a60e537c6"], 0xfffffffffffffda1, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r4 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r3, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r4, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r5, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x8, 0x8}) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x3e7, 0x0, &(0x7f0000000300)=[@increfs={0x40046304, 0x2}], 0xfffffffffffffda1, 0x0, 0x0}) [ 258.459215][T12641] binder: 12640:12641 ioctl c0306201 20000140 returned -14 [ 258.493295][T12642] binder: 12639:12642 unknown command 0 [ 258.499045][T12642] binder: 12639:12642 ioctl c0306201 20000140 returned -22 [ 258.515697][T12641] binder_alloc_mmap_handler: 18 callbacks suppressed [ 258.515735][T12641] binder_alloc: binder_alloc_mmap_handler: 12640 20ffd000-20fff000 already mapped failed -16 16:13:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01634040000000000000000000000000000000003ae29efc26097bde620d6b262471f11293605bd9b861e145182351af00656fffe2d52215aac4f6f8a67e94b124a9c9c05ad922d6442693c118e5fa378797137750700734f3ad63b6427e275c3348c6fc3aeebcc764bb8422ebc8b66197aec762604f5828ac"], 0xfffffffffffffda1, 0x0, 0x0}) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/128}) 16:13:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") pselect6(0x40, &(0x7f0000000000)={0x1ff, 0xe0, 0x8000, 0x500000000000000, 0x7, 0x9, 0x7, 0x40000}, &(0x7f0000000040)={0x5, 0x40, 0x2, 0x6, 0x1, 0x3c, 0x7, 0x6a}, &(0x7f00000000c0)={0x1, 0x8001, 0x8, 0x2, 0x100000000, 0x8000, 0xac1d, 0x6}, &(0x7f0000000100)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000140)={0xa97}, 0x8}) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000) [ 258.585767][T12646] binder_alloc: binder_alloc_mmap_handler: 12640 20ffc000-20fff000 already mapped failed -16 16:13:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r4 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r3, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r4, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r5, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) [ 258.731568][T12652] binder: 12649:12652 ioctl c0306201 20000140 returned -14 16:13:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64\x00', &(0x7f0000000140)='^vboxnet0em0,}\x00', 0xf, 0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x36, 0x1ff, 0x112b, 0x2, 0x7f}, &(0x7f0000000240)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000280)={0x4, 0x20000000000000, 0x4, 0x1, 0x1fc0b68, 0x2, 0x3, 0x240000, r4}, 0x20) openat$ion(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ion\x00', 0x1, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000001c0)={0x3f, @rand_addr=0x6fa, 0x4e21, 0x1, 'lblc\x00', 0x9, 0x8, 0x3}, 0x2c) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 16:13:12 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10040, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0xd06, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100000000}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x5, 0x6, 0x2, 0x4, 0x6]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004000) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01634040000004000000ff000000000000000000"], 0xfffffffffffffda1, 0x0, 0x0}) [ 258.873012][T12658] binder_alloc: binder_alloc_mmap_handler: 12657 20ffd000-20fff000 already mapped failed -16 [ 258.912938][T12658] binder_alloc: binder_alloc_mmap_handler: 12657 20ffc000-20fff000 already mapped failed -16 16:13:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) [ 259.055648][T12664] binder: 12663:12664 ioctl c0306201 20000140 returned -14 [ 259.089730][T12667] binder_alloc: binder_alloc_mmap_handler: 12665 20ffd000-20fff000 already mapped failed -16 16:13:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="016340400000000000000000108bb1cea75e000000000000000f28baf971"], 0xfffffffffffffda1, 0x0, 0x0}) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7ff, 0xc0040) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000080)=""/99) sync_file_range(r1, 0x8, 0x4, 0x6) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x10) [ 259.166906][T12670] binder_alloc: binder_alloc_mmap_handler: 12665 20ffc000-20fff000 already mapped failed -16 16:13:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") syz_emit_ethernet(0x2, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0], 0x0) r1 = socket$nl_xfrm(0x11, 0x3, 0x6) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x12004}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getrule={0x14, 0x22, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2004c0c5}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8955, &(0x7f0000000000)={'\x02\x00\x81\x00\x7f\x00\x1e\x00 \x00\x8c\xa7\xcc\x99\x175'}) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000200)={0x2}) [ 259.286892][T12673] IPVS: ftp: loaded support on port[0] = 21 [ 259.303232][T12674] binder: 12672:12674 ioctl c0306201 20000140 returned -14 [ 259.411043][T12680] binder_alloc: binder_alloc_mmap_handler: 12679 20ffd000-20fff000 already mapped failed -16 [ 259.442980][T12680] binder_alloc: binder_alloc_mmap_handler: 12679 20ffc000-20fff000 already mapped failed -16 [ 259.615005][T12673] chnl_net:caif_netlink_parms(): no params data found [ 259.710794][T12673] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.718398][T12673] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.727566][T12673] device bridge_slave_0 entered promiscuous mode [ 259.742609][T12673] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.749942][T12673] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.759281][T12673] device bridge_slave_1 entered promiscuous mode [ 259.797607][T12673] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 259.810151][T12673] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 259.846679][T12673] team0: Port device team_slave_0 added [ 259.856228][T12673] team0: Port device team_slave_1 added [ 260.046892][T12673] device hsr_slave_0 entered promiscuous mode [ 260.282901][T12673] device hsr_slave_1 entered promiscuous mode [ 260.474662][T12673] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.482162][T12673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.489936][T12673] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.497393][T12673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.585092][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.594590][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.623422][T12673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.646750][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.655445][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.686151][T12673] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.722618][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.732458][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.742241][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.749612][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.758669][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.768198][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.777322][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.784713][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.793292][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 260.803273][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.838870][T12673] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 260.849586][T12673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.893419][T12673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.922627][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 260.932514][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.942210][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.953312][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.963065][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.972454][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.982362][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.991637][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.022682][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.032387][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 16:13:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r2 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r1, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r2, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r3, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r0}, {r0, 0x8090}, {r0, 0x8}, {r0, 0x80}, {r1, 0x40}, {r1, 0x9000}, {r0, 0x2200}], 0x7, 0x40) r2 = syz_open_dev$binder(0x0, 0x0, 0x800) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x101) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x3, 0x4) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f00000000c0)={0x3f, 0x5, 0x8001, 0x1, 0xb, 0x0, 0x1, 0x3, 0xc7, 0x3f, 0x400, 0x6}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000100)=0xfff) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000180)={0x3, r3}) 16:13:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000100)=0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'nr0\x00', 0x410}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000140)=""/176) 16:13:15 executing program 4: truncate(&(0x7f0000000000)='./file0\x00', 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x7) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x80) truncate(&(0x7f00000000c0)='./file0\x00', 0x6) prctl$PR_SET_ENDIAN(0x14, 0x2) truncate(&(0x7f0000000100)='./file0\x00', 0x9) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000140)=0x5) mkdir(&(0x7f0000000180)='./file0\x00', 0xc) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = accept4(r0, 0x0, &(0x7f0000000200), 0x80000) getsockname(r0, &(0x7f0000000240)=@in={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x80) connect$rxrpc(r0, &(0x7f0000000300)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x5d, @rand_addr="13527b5d13eb540b19f26f33d25e10d6", 0x2a}}, 0x24) getxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@known='trusted.syz\x00', &(0x7f00000003c0)=""/21, 0x15) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000400)={0x0, @speck128}) r3 = perf_event_open$cgroup(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x7, 0x1, 0xfffffffffffffff7, 0x0, 0x4, 0x2000, 0x1, 0x1f, 0x5, 0x9, 0x6dd, 0x8001, 0xffff, 0xc000000000000000, 0xed5, 0x1, 0x4, 0xffff, 0x1, 0x1000, 0x1000, 0x7, 0x2, 0x40, 0xb4, 0x5f7, 0x5842, 0x0, 0x3, 0x5, 0xbe95, 0x0, 0x40, 0x9, 0x4, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x3}, 0x801, 0x6, 0x7, 0x6, 0x100, 0x101, 0x40}, r0, 0x0, r0, 0x0) readahead(r3, 0x0, 0x9b6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000540)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r4 = semget(0x1, 0x0, 0x8) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000580)=[0x3, 0x2, 0x1ff, 0x4]) fchdir(r0) open(&(0x7f00000005c0)='./file0\x00', 0x200000, 0x88) r5 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)="8e478b9f0beec137f5470bf6e48a226141afdcda6277907eac02e06c5dcd9c673bbef6e8647ab4e2341486612621b9a9114d9a56e0b70b7f5ff73a25aa9cf97776119bde5629231968a563f9f7cd42922dc93f539cb1f284973b1efebf5e01e2cc5c20cba8d3bc9c983e89b023f3fd7bb4316f62180d3956aa733550bf99b932a555f3999aafbfec0fe0ddbfd878fbdd7bbe038b07965da84271eeb68926bd031d7a0c3acb3607db6dab5a96b6d5c2e5a9", 0xb1, 0xfffffffffffffff8) keyctl$update(0x2, r5, &(0x7f0000000740)="140d2d909efc3753bfdb5531bd27f8467b6418f7caccbf9121861323b1d503e7f7b33772e55c3b0dc778bcef2e30f9f2636cad554487ee944f14ca55e340fdafd7bcfc785b1880bb1251217be886a41f8c5044df276f09310cf3972cee8a358f0bd4c2cedc823366c3518d4f635252de97b32d32232dfd1501648b498009ed0e4920d30eaad628e1882087fb682c6ca56eedca2f514279274127b91a9816d2209a9772c9831398842b4e0546141b638a858537035c19e55df021d9b2fbfd6feafab735112ce9adb0cf443a0605c1a3ce4d8d406509579435770ca01a67e4be1bb2a061a2d5ba58a5b98929d9723a0a6bfaa28888b618f0bed62b9896", 0xfc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000840)={0x0, 0x8}, &(0x7f0000000880)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000008c0)={r6, 0x3}, &(0x7f0000000900)=0x8) r7 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$link(0x8, r5, r7) 16:13:15 executing program 3: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="1aa1c863d20154f663a26496ac7d643e9d10857e47e9496871982b94990bbf8f390bfd1bce4253845c96e24e8f1e1020cb662a3d1747baad6307e2c8ced744c4a008ed9b915cd36fdc5fb30a4a5f1652eafc87c9f56dea7b69f0c49de5e19c3e4acb616c8ca980b54de3bda3786d39f3424fd870c9", 0x75, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$negate(0xd, r0, 0x0, r1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x2, &(0x7f0000000000)=0x101, 0x2, 0x0) 16:13:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x0, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x2000000000000}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x408d1}, 0x10) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x3, 0x2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000000)={0x0, @aes128, 0x0, "90f3dab4fcbb8ce8"}) 16:13:15 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x8, @mcast2}}, 0x5c) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"]}}, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xfffffffffffffff7, 0x100) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x80000000, @loopback, 0x5}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @multicast2}], 0x4c) 16:13:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r2 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r1, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r2, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r3, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x8, 0x1}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000010000/0x18000)=nil, 0x0, 0x0, 0x46, 0x0, 0x0) [ 261.711722][T12713] binder: 12711:12713 ioctl c0306201 20000140 returned -14 [ 261.746128][T12713] binder: 12711:12713 ioctl 800c6613 20000000 returned -22 16:13:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400000000ff, 0xa}) r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r2 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r1, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r2, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r3, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:15 executing program 3: r0 = socket(0x848000000015, 0x805, 0x0) sendto(r0, &(0x7f0000000080)="16efffdcf21dae4fe22dad71a41c780d119bffa86ea3db878a00468d9e44f68ba3bf86d16184e53c105650cdc6fb715481678fbb1f1f234275377767997bacd5a7158fc0b6ee11f31e1ac7e8481229f93ccab75b2b82c6581dc7c2563e2547dc8e4a556e475592f37be4713ad7d6d59d421c8902ccbc2b781ff28525ed8399310469dcb5bde692a05f6a737ee9b0b0bf3271ea8c9d3a0245de3ee2d56d9a1677d14a97b0fc2f85736402db4f13f9586e4646e7", 0xb3, 0x0, &(0x7f0000000140)=@in6={0xa, 0x4e20, 0x822, @local, 0x7fff}, 0x80) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="a93b0066c4050f603e2d7431676a1f20"}, 0x1c) 16:13:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x101, &(0x7f0000000000)=0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x40) r3 = creat(&(0x7f0000000780)='./file0\x00', 0x10e) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/qat_adf_ctl\x00', 0x8080, 0x0) io_submit(r1, 0x5, &(0x7f0000000700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000080)="ec53212b1cdb00b1b0ff337191bca654b48a5d4dd5f44e79420f08fff57799c76d2507591bcdf681a7df529a38b1a2da10662ee6edd6694f44268a679bc4e30309267e490ab8f3b0b26f9529e3ac0dc8783020ed2919c807d71e9bfa3d466b10b29142e75af582655cd8b5375355919ea4aa1198d2de9ef9fb1e3da9572917615b3c0649fd", 0x85, 0x1000, 0x0, 0x1, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f0000000200)="fe432c651fa7f228fb45451a0c3e6e074810e26318226ff686dc547ffa59f4f2e7a3cf656a7598a5a044e7998c4b04923c9fd56b59f54493eb07cc6b4750c2915d5b4502800ea3760b52eed231fdf7161c1d154e75595f25bfc9d330dea017caff70cdc0a5242746357df5b40be1c7996eeccc3d75dfaa1a94c39261f22f5c4a70b6f4e5824380ad089dd0872f491c8d1913a405d0120b4b6aee89d2b86bc03835d1f7f63db2004e44f1c635f7a6d0cf4cde1078721674ba99ac81a2f981d97787f0a1c45ac6c95dc4a3f7fed506286a08a49ce9a842a7a6b4746180d5b03d8463f3c4210f51832355b109b268381fcd513955fe3f8610", 0xf7, 0xecb, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x800, r0, &(0x7f0000000380)="2b79e49719caa90ec261539bf4be129fcd8f19a8164aab8298e168503cf06e8047224531f6cc71a978947c2a2e1b2f11a485d803d8fc0c8bbff5b7683d4c17318716b0e066c113899be034b180ba14fe4afcd6832159e2def9a3083e8df5ec0ef124fd5583d3b55869865fa08d7723", 0x6f, 0x2, 0x0, 0x2, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000480)="b6ed60fa79d5871169f82aa3dd4a7de391d32b6a1ff177e6f6d942600985652dfd74c1908efafae50889d86cfe8968317fcd2379919979a6b558c3a3b94776fa0e718d948adeb1c5fc3aa42027d7c72a35d0cc2e0ea5ba64d7ce49b0fd471d766fa6fe9295729bed7943f6ba3e2e29d432c213b282aef23f563a24f0d901ca1e8e", 0x81, 0x6, 0x0, 0x0, r4}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xf, 0x3, r0, &(0x7f00000005c0)="75621069b86c665f3b8f4396a7bda208610759a4a81fa3b8c9caf762631f457aa736375ef3fdfd307499bb735b9a96fa23179cf1f5d16432ca17f8110a2ff404a5c6db255ac178678dee9172b5091accdbbec462eb23f7e90e909ef0ed1ce1dcac2acea9b3272934f89b719defa10bd808a960d4fc59ad90482e2d46fa44d717088522f0ed2a4252f98e61e40cacb22cd5c14a19c9c2c34272d748bf1889055adb7c1d5d971c86346f75181e157a2a8415bef4439c6035a61a27c176b933eb2a40aa13386b1cc6f0cae65b0388ef9d8f86b7a98184f868c042c98cc2", 0xdc, 0xdf5c, 0x0, 0x1, 0xffffffffffffff9c}]) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) [ 262.038780][T12734] RDS: rds_bind could not find a transport for a93b:66:c405:f60:3e2d:7431:676a:1f20, load rds_tcp or rds_rdma? [ 262.068398][T12735] RDS: rds_bind could not find a transport for a93b:66:c405:f60:3e2d:7431:676a:1f20, load rds_tcp or rds_rdma? 16:13:16 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000040)={0x7, @raw_data="505a16f14747ffeecd0358f947fb7e5e990f5121cf5a1d58d5d05282a252a7063f16feffac55ab819efa1ecb6a20d49baa9fac90eb1c2d1eb26ba61dac62e9bc2a6cf8808bc35c21774773960ac371af9d0d6756fdb8086a5e6a9e6ae2a09f7b32e47e1e7fed45450ecd29e76c367182143312e5b9159eca455a69b5b7f86d9ea99bd4f984821d8fc15d21660016fba8b6e0f5a1579bc2275d51e50677e670451c1a5c167a6132d1830dec5c1e70bd0f611d236b76f9675879a3a2fbbbfb50d2cfa9fa65d37861fc"}) [ 262.115109][T12730] binder: 12729:12730 ioctl c0306201 20000140 returned -14 16:13:16 executing program 3: r0 = socket(0x2, 0x803, 0x42) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)={0x2, 0xc1, "8e8504848e5877e47c4a146119146f213486285c0a5b1c971e3deb7a9a1578eb97c576717fb3dafae340528d44ee0e2d28f7e07f7e57463f6dd08814963c33c87ea27ea839f1d001e08e00d436fd43f72a8661627205f80a6be36f1588aaf75eee592a785dbbf81d093ff61de095b9979241ce30ca29163a25abaea915113543c2745840d1fcf3e6995972bd25f9a3bcf35af389f27fccd3dadcc44ce2d2026b6fa801abc30ec9d7fabb7276e1bccfd228501489a81ce724a9e71a17d786cb787e"}) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x4}) [ 262.257300][T12741] binder_alloc: binder_alloc_mmap_handler: 12740 20ffd000-20fff000 already mapped failed -16 [ 262.326698][T12744] binder_alloc: binder_alloc_mmap_handler: 12740 20ffc000-20fff000 already mapped failed -16 [ 262.505166][T12750] IPVS: ftp: loaded support on port[0] = 21 [ 262.743838][T12750] chnl_net:caif_netlink_parms(): no params data found [ 262.817964][T12750] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.826353][T12750] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.835468][T12750] device bridge_slave_0 entered promiscuous mode [ 262.848744][T12750] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.856299][T12750] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.865538][T12750] device bridge_slave_1 entered promiscuous mode [ 262.900714][T12750] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 262.914069][T12750] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 262.958534][T12750] team0: Port device team_slave_0 added [ 262.968596][T12750] team0: Port device team_slave_1 added [ 263.088546][T12750] device hsr_slave_0 entered promiscuous mode [ 263.342759][T12750] device hsr_slave_1 entered promiscuous mode [ 263.518602][T12750] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.526062][T12750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.533953][T12750] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.541297][T12750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.636009][T12750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.660535][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.672765][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.684617][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.699406][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 263.722134][T12750] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.747985][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.758041][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.767368][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.774733][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.824599][T12750] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 263.835367][T12750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.852416][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.862022][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.871290][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.878728][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.888938][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.898966][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.909178][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.919214][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.928930][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.939030][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.948828][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.958086][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.967806][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.977094][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.988004][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.997251][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.050490][T12750] 8021q: adding VLAN 0 to HW filter on device batadv0 16:13:18 executing program 4: unshare(0x400) r0 = socket$kcm(0x10, 0x8000000000002, 0x0) shutdown(r0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'nr0\x00', 0x2}, 0x18) 16:13:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xd) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000680)={0x1, 0x19}, 0x8) r2 = geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)=0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02040000010005000000000002000200", @ANYRES32=r1, @ANYBLOB="02000400", @ANYRES32=r2, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="040006000000000008000100", @ANYRES32=r4, @ANYBLOB="19000600", @ANYRES32=r5, @ANYBLOB="10000300000000002000000000000000"], 0x4c, 0x3) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000800)='/proc/capi/capi20ncci\x00', 0x210800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x47, 0x200, 0x3, 0x5, 0x0}, &(0x7f0000000840)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000900)={r8, 0x7e, "56004f09acc4d72382a6346ba76c7bceb031ddbf92385fc69e2dbead7c70e835928253321be5ec7cc402acbb298dc31259cfe7459cce55b315b42f827e1bb28064fa9a57536aa4badd281223542fd1ca3989a19f92e18d455ffff711ca1e8297cce8786ed5da9afdba47817f56929f3e45b10a439ef1b26257435165e545"}, &(0x7f0000000880)=0x86) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f0000000100)={0x6, {0x3, 0x101, 0x6, 0x10000}, {0x9, 0x1, 0x100000000, 0x80000001}, {0xb692, 0x40}}) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1104}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r9, 0x400, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0xc000) r10 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0163414000000000000000000000120000000000"], 0xfffffffffffffda1, 0x0, 0x0}) sysinfo(&(0x7f0000000080)=""/109) 16:13:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10100) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080), 0x4) 16:13:18 executing program 3: r0 = socket$inet(0x2, 0x5, 0x2) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0x1) 16:13:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) [ 264.344675][T12759] binder_alloc: binder_alloc_mmap_handler: 12758 20ffd000-20fff000 already mapped failed -16 [ 264.413590][T12759] binder_alloc: binder_alloc_mmap_handler: 12758 20ffc000-20fff000 already mapped failed -16 [ 264.436427][T12761] binder: 12760:12761 unknown command 1078027009 [ 264.443125][T12761] binder: 12760:12761 ioctl c0306201 20000140 returned -22 16:13:18 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x200) r1 = dup2(r0, r0) getpeername$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000080)=0x1c) readahead(r0, 0xf14, 0xc2b8) 16:13:18 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00'}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x1406, 0x40) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000200)=0x2) r2 = dup2(r0, r0) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f00000000c0)) r3 = fcntl$dupfd(r0, 0x0, r0) write$P9_RXATTRWALK(r3, &(0x7f0000000040)={0x406}, 0xfdef) 16:13:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000ac80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000029000000030000004bc3000000000000"], 0x18}}], 0x1, 0x0) ioctl(r0, 0x7, &(0x7f0000000000)="0c031b97f4c981de10ddf794aaa4aeb3701a81f1eeff585c8d") connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:13:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x60002) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000080)=""/5) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:18 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, 0x0, &(0x7f0000000000)) [ 264.773291][T12791] binder: 12790:12791 ioctl c0306201 20000140 returned -14 16:13:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000080)=[0x80], 0x1, 0xfffffffffffffffd, 0x1f, 0x80000001, 0x4, 0x4, {0xfbe, 0xffff, 0xffffffff, 0x9, 0x800, 0x6, 0x20, 0x200, 0x2, 0xfffffffffffffffc, 0xffffffffffffff7f, 0x4, 0x1, 0x7fffffff, "c4842468096f99aa0681e6a41bc101d539c70bd77d85082eafbd06872ca2296f"}}) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="082db7bb121d98f179baacf2ede2951d", 0x10) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) [ 264.921450][T12797] binder_alloc: binder_alloc_mmap_handler: 12796 20ffd000-20fff000 already mapped failed -16 16:13:19 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in, 0x0, 0x7, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@loopback}}, 0xe8) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x2) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0xfffffffffffffffe, @loopback, 0x8}, 0xfffffffffffffed2) 16:13:19 executing program 4: timer_create(0x7, 0x0, &(0x7f0000000180)) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x2) [ 265.023722][T12804] binder_alloc: binder_alloc_mmap_handler: 12796 20ffc000-20fff000 already mapped failed -16 16:13:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'team0\x00'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0163404000000000000011000000000000000000"], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1ff, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc4c85513, &(0x7f0000000280)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000100)=ANY=[@ANYBLOB="400000000c000000060000000100000006000000f3ef6e7bc667f6a8398b9a23f7d972533a94f6d212d451cfce54b4086b5d505dd976d67d7574e5ba880842507965efcfedfb4715af8b0ba9d2c5cd136dc6c1c081758d1a2b2c183181aecdd9c0623effae53d969257174c9ca34a7f733bd9b889771ac27abcdf930eeab7cac03b48da9dbf36328abeddb9ca9062a913a1d8a092ce2ee5764255e66207f62858dafa5f63a1512fae9b3cd7d2f40aee7f456c9ffeacb4db28ae706485c54"]) 16:13:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="b7000000d800000007000000962785c29546c04db02775a300000095ce449a69"], &(0x7f0000000140)='GPL\x00', 0x1, 0xc3, &(0x7f0000000240)=""/195}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f00000000c0)=0x5, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040)=r1, 0x4) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup2(r2, r1) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0xe3) 16:13:19 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffe1a}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@bridge_newneigh={0x1c, 0x1c, 0x3}, 0x1c}}, 0x0) r2 = dup(r1) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) [ 265.413667][T12821] binder_alloc: binder_alloc_mmap_handler: 12818 20ffd000-20fff000 already mapped failed -16 16:13:19 executing program 1: mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/60) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 265.493723][T12831] binder_alloc: binder_alloc_mmap_handler: 12818 20ffc000-20fff000 already mapped failed -16 16:13:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x28c000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0x8, 0x0, 0x1, 0x3}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000080)={0x0, r2, 0x10001, 0x81}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x61) 16:13:19 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101801) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000000c0)={0x2, 0x6, 0x7}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)={0x9cf8}) 16:13:19 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x150) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x400, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$unix(0x1, 0x1, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 16:13:19 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000380)) r2 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r1, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r2, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r3, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) [ 265.747850][T12839] binder: 12837:12839 ioctl c0306201 20000140 returned -14 16:13:19 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2800, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$sock_ifreq(r0, 0x8925, &(0x7f0000000140)={'veth1_to\x7fb\x00', @ifru_hwaddr=@local}) [ 265.820497][T12851] binder_alloc: binder_alloc_mmap_handler: 12850 20ffd000-20fff000 already mapped failed -16 [ 265.850770][T12851] binder_alloc: binder_alloc_mmap_handler: 12850 20ffc000-20fff000 already mapped failed -16 16:13:20 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x1ff, 0xe538, 0xfffffffffffffffd, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}) semop(0x0, 0x0, 0x58) 16:13:20 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000380)) r2 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r1, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r2, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r3, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xfffffffffffffda1, 0x0, 0x0}) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3, 0x10}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={r3, 0xe8, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x100000001, @empty, 0xf69}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x4, @loopback, 0x4d}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x9, @local, 0x5}, @in6={0xa, 0x4e22, 0xa0, @rand_addr="39e63566d8359526a60faccf4a514390", 0x8}, @in6={0xa, 0x4e20, 0x4, @loopback, 0x20}]}, &(0x7f0000000100)=0x10) 16:13:20 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200000, 0x0) tee(r0, r1, 0x6, 0xffffffffffffffff) [ 266.074248][T12863] binder_alloc: binder_alloc_mmap_handler: 12858 20ffd000-20fff000 already mapped failed -16 16:13:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x80001000008912, &(0x7f00000000c0)="30c7b046290000000000000000000000db78971d9230d34b45fa93a396de0888") r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-monitor\x00', 0x400000, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f00000003c0), &(0x7f0000000400)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) getrandom(&(0x7f0000000000)=""/62, 0xffffffffffffff13, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r3}}, 0x48) [ 266.137473][T12867] binder_alloc: binder_alloc_mmap_handler: 12858 20ffc000-20fff000 already mapped failed -16 [ 266.171042][T12870] binder: 12868:12870 unknown command -862388224 [ 266.177744][T12870] binder: 12868:12870 ioctl c0306201 20000140 returned -22 16:13:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x759a}], 0x30}], 0x1, 0x0) lookup_dcookie(0x80, &(0x7f00000001c0)=""/185, 0xb9) write$binfmt_elf32(r0, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x6, 0x0, 0x1, 0x800, 0x2, 0x7, 0xe9a, 0x37e, 0x38, 0x296, 0x4, 0x10000, 0x20, 0x2, 0x1, 0xffffffffffff1d3c, 0x101}, [{0x60000000, 0x3ff, 0x6, 0x7f, 0x1, 0x1, 0x0, 0x1}, {0x6474e551, 0x4, 0x0, 0x8, 0x6cc0000000000000, 0x800000000, 0xffffffffffffff56, 0xff}], "6414addea3df7b3ec109c213773f38678da9648e01bf0269274535a566ee5c81f909e4d305adf27f75b80a726ed5fd9f611ab4c11652cae280d1eb5246b63d0a3c32b1164f9579c3003b4b434f136fc9f4fae6496ea9ff56d25286f16dc415952c71390d8a1fcf55f4f43d66198a0190a0705827341ed6b0aa195439ac355b5786841ddb069df31bc6d91b1163364454d2070832ff89ed3dff0509589127fc49d3d4035d178fa31bff963fec7afcd2353d04adffec42150d0b27e4556865da3b2c0999145ad4", [[], []]}, 0x33e) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) r2 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x2, 0x1) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000002c0)={0x9, 0x100000000, 0xcd0, 0x0, 0x9}) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000480)) r3 = accept$inet(0xffffffffffffff9c, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000400)='trusted.overlay.upper\x00', &(0x7f0000000440)={0x0, 0xfb, 0x15, 0x2, 0xec, "18542ffe948dea576653283e2e74a4ed"}, 0x15, 0x2) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0xf}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3, 0x0, 0x3b9ac9ff}}], 0x1, 0x0, &(0x7f0000008bc0)) 16:13:20 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200000, 0x0) tee(r0, r1, 0x6, 0xffffffffffffffff) 16:13:20 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000380)) r2 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r1, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r2, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r3, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 266.493765][T12891] binder: 12890:12891 ioctl c0306201 20000140 returned -14 16:13:20 executing program 2: r0 = semget$private(0x0, 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) semop(r0, &(0x7f0000000140)=[{0x0, 0xffffffffffffffff}], 0x1) listen(r1, 0x7) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x400, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001300)) ioctl$NBD_SET_SOCK(r1, 0xab00, r1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"/4127], &(0x7f0000001240)=0x1008) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001280)={r2, 0x100000001}, &(0x7f00000012c0)=0x8) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = msgget(0x3, 0x20) ioctl$KDDISABIO(r1, 0x4b37) msgctl$IPC_RMID(r3, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000013c0)) accept4$inet6(r1, 0x0, &(0x7f0000000040), 0x80000) 16:13:20 executing program 4: mkdir(&(0x7f0000001680)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x4a400295f) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000003c0)={0xffffffffffffff9c}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000400)={0x0, 0x3, 0x1ff, 0x5, 0x0, 0x2}, &(0x7f0000000440)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000480)={r2, 0x433d, 0x1, 0x29b}, &(0x7f00000004c0)=0x10) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000180)='./file1\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x2) 16:13:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup(r1) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000040)) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000900)=""/4096) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="016340400000000032bc0000000013000000151e"], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) [ 266.845139][T12906] binder: 12905:12906 ioctl c0306201 20000140 returned -14 16:13:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000000)={0x1, 0x1, [0x800, 0x8, 0x6, 0x5, 0xffffffff80000000, 0x1, 0x8, 0x8001]}) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rt_cache\x00') preadv(r1, &(0x7f00000017c0), 0x340, 0x0) 16:13:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x2280) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f00000002c0)) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000100)=r2) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2063404000000000000000000000007a2b79e1646af0e60f95de76e4c700000000002ad53a527d17a2ad102a838d49ec6a54f0afa7641c21ae0488c53f6ca8a0ac2da96c783bed57695618e3346016cef05be19f875af1fad9861023ef98e366432145dfeb033ac17fb9795b4b3301fe9765ad315347b4f4f768824baf236219754977feec8d460d9de084a9aa7674aa491f6ab00de6685a7b21d3633e188b732418e27ded3a21982defdc96"], 0xfffffffffffffda1, 0x0, 0x0}) [ 267.076789][T12920] binder: 12918:12920 unknown command 1077961504 [ 267.083513][T12920] binder: 12918:12920 ioctl c0306201 20000140 returned -22 16:13:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000340)="11dca5055e09cfec7be070e78cef42b568a6a0bb908d5076fbb8487a6e5e70f7dac6f342c61b71d8af606bcd977f541895a260a17b3f5b46b1a0349a60e4cbccf7fe221465bd6a44c48c83a8d8865de13c25e336e87c3d66efaf460ae204ad12faa1ef91f6505846b0db27c02c32b5c0c6a7adc5091a61b53e36d830d21585c5e53a43023504d9826a4858f0cb6d64eaad4dfdc31cbebe963061cab93c") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x2, 0x0) read$eventfd(r2, &(0x7f00000001c0), 0x8) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x125202, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x2, 0x8, 0x208, 0x101, 0x7, 0x3, 0x7, 0x49, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000100)={r4, 0x6}, &(0x7f0000000040)=0x8) 16:13:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020000000000000000537a27c28f49191d6bcefa5df10bbf69fc880cead0e3994a7d0658e"], 0x24, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x37) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)) 16:13:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) [ 267.278063][T12928] binder: 12927:12928 ioctl c0306201 20000140 returned -14 [ 267.370726][T12934] binder: 12927:12934 ioctl c0306201 20000140 returned -14 16:13:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000080)={0xffffffffffffffff, 0xf9, 0x1}) 16:13:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x6000) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xfffffffffffffffe, 0x440000) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000000c0)=""/33) shmdt(r1) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e}, [@RTA_TTL_PROPAGATE={0x8, 0xf}]}, 0x24}}, 0x0) 16:13:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020000000000000000537a27c28f49191d6bcefa5df10bbf69fc880cead0e3994a7d0658e"], 0x24, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x37) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)) [ 267.604552][T12945] binder: 12944:12945 ioctl c0306201 20000140 returned -14 [ 267.673888][T12955] binder: 12944:12955 ioctl c0306201 20000140 returned -14 16:13:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:21 executing program 1: clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffff9c, 0xc0585609, &(0x7f00000001c0)={0x6, 0x7, 0x4, 0x20044000, {r0, r1/1000+10000}, {0x5, 0xb, 0x8, 0x5, 0x5, 0x9, "01e75c28"}, 0x8, 0x3, @fd=0xffffffffffffff9c, 0x4}) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000240)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000300)) syz_open_dev$binder(&(0x7f00000004c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='rdma.current\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000500)={0x1, 0x5, 0x5, 0x1000, 0x18, 0xd77, 0x8000000000000, 0x401, 0x7, 0xf6b, 0x0, 0x400}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0x1, 0x8) r5 = gettid() ptrace$getsig(0x4202, r5, 0xffffffffffff7176, &(0x7f0000000080)) renameat(r4, &(0x7f0000000280)='./file0\x00', r4, &(0x7f00000002c0)='./file0\x00') r6 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="016b4040000000400000000000000000006e39a307c2f958af1a4303000000b642a4e4098319ffbb41bb114edfa954a92c9e7c690000000000000000000049864d96661777e41575d006b5dee4a5bf16382cc06c61070386948dbf480b93964ecfff1b9c7fb63f7c0b5db6a57368101adb33a4dac88b9dc0c842819a9a6381b1e205409bd472952b80438f28eb6c93c80e6b61bc48d32281bc024679d17a0504842c19b770f6096d8a56c89f5834277effcad3d49847c900e9ff1f3be603c052ee108bfc5586e9b696146a6a4ec1af504009788ec0e87370d214865619b34700314e699d2c918a"], 0xfffffffffffffda1, 0x0, 0x0}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000100)) 16:13:21 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x2003fd, 0x0) accept4(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000080)=0x80, 0x80000) r2 = socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000180)=0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0xc24, 0x91, 0x1, 0x21, r0, 0x1, [], r1, r0, 0x1, 0x2}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, 0x0}, 0x1) accept(r0, 0x0, &(0x7f0000000140)) 16:13:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1b, 0x4, 0x100000000, &(0x7f0000000040)={0xffffffffffffffff}) bind$rds(r1, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x5a) [ 267.956533][T12961] binder: 12960:12961 unknown command 1077963521 [ 267.963163][T12961] binder: 12960:12961 ioctl c0306201 20000140 returned -22 16:13:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:22 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) sync_file_range(r0, 0x3, 0xfffffffffffffffc, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6gre0\x00', r2}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x94f}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000580)={0x12b8, 0x4, 0x8, 0x2, 0x0, 0x4, 0x7fffffff, 0xa5, r3}, &(0x7f00000005c0)=0x20) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000000c0)={0x4, 0x82cf, 0x7}) lgetxattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=@random={'osx.', '@securityppp0]posix_acl_access\x00'}, &(0x7f0000000680)=""/37, 0x25) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000006c0)={r4, 0x7fffffff, 0x8, [0x80, 0x227, 0x6, 0x5, 0x3, 0x9, 0x800, 0x3]}, &(0x7f0000000700)=0x18) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60093a0600083a00fe8000000000000000000006f60000bbff0200070000000000000000000000010000000000089078"], 0x0) 16:13:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 16:13:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @broadcast}, &(0x7f0000000100)=0xc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000340)={"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"}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000200)=""/226) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x0, 0x6, 0x4, 0x20000, {0x77359400}, {0x4, 0x1, 0x9, 0x8000, 0xce3, 0xa4c4, "2f4770ca"}, 0xe4f, 0x1, @userptr=0x7fe00000, 0x4}) 16:13:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") shmget(0x1, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmget(0x0, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) r1 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000000)={0x8, 0x4e, 0x8e17}) 16:13:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) 16:13:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r4 = accept$alg(r0, 0x0, 0x0) r5 = dup(r4) write$UHID_DESTROY(r5, &(0x7f0000000200), 0xffffff77) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000280)=""/24, 0x18}], 0x1}}], 0x1, 0x0, 0x0) 16:13:22 executing program 3: r0 = socket(0x40000000015, 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r2 = add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="9b980548755e225166591aeecb2f1275e1521f6f1bd23a42112a85622db1473079701b5ea4981cb0d557029f5d288bce30920d9ae9f82468c3bcf43671685d48b1da4385bae301d64a752b23088b4523de52e1117e44f2740f5fbeebf7a4e104a69ef78219bf8022e8b781e3c487038d673b52b65d85f280d9c279cf247a3b9213ef9c03d3ebeede721ecbbc2be65331a347219f7daa7c8776c39e7f612530ee7a9390ad5807a1a279cf6c931761581e7c4ab89d92c3044c31510e849249b69eb7a4986d8b2030501d50e33ab9ab5965cfbe9eedac2b9806c724cf76c1336eed9dc930a4625dca5af7e5daa13c9c1732bb2970b6276f26c7", 0xf8, 0xfffffffffffffffb) request_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='vmnet1[ppp1\xf8\x00', r2) getsockopt(r0, 0x114, 0x2711, &(0x7f0000af0fe7)=""/13, &(0x7f0000000000)=0xfcfe) 16:13:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:22 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 16:13:22 executing program 3: r0 = socket(0x40000000001e, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000080)) prctl$PR_GET_DUMPABLE(0x3) [ 268.753446][T13020] binder: 13019:13020 ioctl c0306201 20000140 returned -14 [ 268.792602][T13025] binder: 13019:13025 ioctl c0306201 20000140 returned -14 16:13:23 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 16:13:23 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x10000, 0x200) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x48}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000180)={r3, @in={{0x2, 0x4e20, @multicast1}}}, 0x84) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="126340400005000000192ddb000000001572e1001c"], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:23 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x200, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x4100) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000040)=0xffffffffffffddb8, &(0x7f00000000c0)=0x4) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, [0x0, 0x0, 0x0, 0x3f]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f00000001c0)={0xffff, 0x0, 0x8, 0x7, 0x3}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r4, 0x0) add_key$user(0x0, 0x0, &(0x7f0000001040)="d8b98318b88de5636ad1a6da820065294787d16a63d50420019952e8f06a18a3c04f37e30b2fb760f6590a86fbb61b8e5863fc4b5cf2ab412922d63418b4a752b7a852508eac7f32899568ee242c8cb615d79341c68e97208da02d2f8b0f1b3c77de0442e0c3c3bcde1bfd8cc90b5e13db38ef64ed7156ae2989168cca0a533ce721f2daebc035835f32513c3147bbe6ca6d920e59753727a0f0b5e99528983590783f7aab76e996793f415a7b13e7be1ba7926245db63453ff642bc6a2844966df1f9e22db7b39e1901e2308153b4e7d7858450d23c4f0034488eb955003054f5", 0xe1, 0xfffffffffffffffe) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000100)={'yam0\x00', {0x2, 0x4e24, @multicast1}}) [ 269.095595][T13045] binder: 13043:13045 unknown command 1077961490 [ 269.102182][T13045] binder: 13043:13045 ioctl c0306201 20000140 returned -22 16:13:23 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 16:13:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) [ 269.438794][T13065] binder_alloc_mmap_handler: 30 callbacks suppressed [ 269.438836][T13065] binder_alloc: binder_alloc_mmap_handler: 13064 20ffd000-20fff000 already mapped failed -16 16:13:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x200, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x9}) 16:13:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e20, @rand_addr=0x50}, {0x2, 0x4e23, @multicast1}, 0x78, 0x0, 0x0, 0x0, 0xea33, &(0x7f0000000000)='veth1_to_hsr\x00', 0x0, 0x4, 0x6}) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:23 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) [ 269.523807][T13070] binder_alloc: binder_alloc_mmap_handler: 13064 20ffc000-20fff000 already mapped failed -16 [ 269.633623][T13073] binder: 13071:13073 ioctl c0306201 20000140 returned -14 16:13:23 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 16:13:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:23 executing program 2: gettid() rt_sigprocmask(0x0, &(0x7f0000000080)={0xfffffffffffffffe}, 0x0, 0x8) r0 = socket$inet6(0xa, 0x4000400000000001, 0x0) ioctl(r0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000200)={0x19}) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000140)={0x48cf, 0x400000000006, 0x5}, 0xc) r2 = socket$inet(0x10, 0x3, 0x8) sendmsg(0xffffffffffffffff, 0x0, 0x0) r3 = open(0x0, 0x0, 0x0) prctl$PR_GET_SECCOMP(0x15) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000000)={0xfffffffffffffffe, 0x1, 0x3ff}, 0xfe6f) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x2c62cc8b69778406) r4 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$void(r3, 0xc0045878) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0), 0x4) r5 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r5, 0x10099ba) sendfile(r4, r5, 0x0, 0x1000000000000fe) connect$unix(r4, &(0x7f0000000240)=@file={0x0, './bus\x00'}, 0x6e) 16:13:23 executing program 3: unshare(0x8000400) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x51, 0x101000) fcntl$getown(r0, 0x9) 16:13:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") inotify_init1(0x80800) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0xc0, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000180)={0x3, "05ab87cd41a24b3e5865dcc203d2e8130495331adab421530b9631779e7cae62", 0x4, 0x20, 0x8, 0x10000, 0x2, 0x2, 0x5, 0xe1}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x302, 0x0, 0x0}) 16:13:23 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) [ 269.913620][T13086] binder_alloc: binder_alloc_mmap_handler: 13085 20ffd000-20fff000 already mapped failed -16 [ 269.979043][T13090] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 269.999364][T13094] binder_alloc: binder_alloc_mmap_handler: 13085 20ffc000-20fff000 already mapped failed -16 16:13:24 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 16:13:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) [ 270.123168][T13098] binder: 13097:13098 unknown command 65535 [ 270.129266][T13098] binder: 13097:13098 ioctl c0306201 20000140 returned -22 16:13:24 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$void(r0, 0xc0045c78) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff810040010000000058000b4824ca945f64009400050028845a01000000000000008000f0fffeffe809000000fff5dd000000100001000a0c1000000000000004fcff", 0x58}], 0x1) 16:13:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb0, 0x24000) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x2, 0x0, [0x2, 0x0, 0x200, 0x101, 0x67, 0x8, 0x0, 0x54b8]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 270.322510][T13107] binder_alloc: binder_alloc_mmap_handler: 13105 20ffd000-20fff000 already mapped failed -16 [ 270.374554][T13111] binder_alloc: binder_alloc_mmap_handler: 13105 20ffc000-20fff000 already mapped failed -16 16:13:24 executing program 2: gettid() rt_sigprocmask(0x0, &(0x7f0000000080)={0xfffffffffffffffe}, 0x0, 0x8) r0 = socket$inet6(0xa, 0x4000400000000001, 0x0) ioctl(r0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000200)={0x19}) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000140)={0x48cf, 0x400000000006, 0x5}, 0xc) r2 = socket$inet(0x10, 0x3, 0x8) sendmsg(0xffffffffffffffff, 0x0, 0x0) r3 = open(0x0, 0x0, 0x0) prctl$PR_GET_SECCOMP(0x15) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000000)={0xfffffffffffffffe, 0x1, 0x3ff}, 0xfe6f) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x2c62cc8b69778406) r4 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$void(r3, 0xc0045878) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0), 0x4) r5 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r5, 0x10099ba) sendfile(r4, r5, 0x0, 0x1000000000000fe) connect$unix(r4, &(0x7f0000000240)=@file={0x0, './bus\x00'}, 0x6e) 16:13:24 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) [ 270.446024][T13114] binder: 13113:13114 ioctl c0306201 20000140 returned -14 16:13:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:24 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r0, 0x40047452, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) [ 270.542837][T13116] binder: 13113:13116 ioctl c0306201 20000140 returned -14 16:13:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000080)={0x3, 0x1, [0x1, 0x20, 0x800, 0x5, 0xffffffff00000000, 0x3, 0x4, 0x6]}) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0xd, @vbi={0xde7, 0x6, 0x100000000, 0x3372775b, [0x8, 0x3], [0x8001, 0x1], 0x108}}) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) 16:13:24 executing program 3: r0 = socket(0x6, 0x802, 0x81) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x1e1000) ioctl$KDDELIO(r2, 0x4b35, 0x3f) ioctl$VT_RELDISP(r2, 0x5605) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00\x00\x00\x00\x80\x00', &(0x7f0000000100)=@ethtool_cmd={0x10}}) [ 270.721126][T13128] binder_alloc: binder_alloc_mmap_handler: 13127 20ffd000-20fff000 already mapped failed -16 [ 270.754807][T13130] binder_alloc: binder_alloc_mmap_handler: 13129 20ffd000-20fff000 already mapped failed -16 [ 270.835537][T13135] binder_alloc: binder_alloc_mmap_handler: 13129 20ffc000-20fff000 already mapped failed -16 16:13:24 executing program 5: alarm(0xffff) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x2, 0x0, 0x3002, 0x9, 0x96, 0x7f, 0x8, 0x1}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0x1000, 0x1, {0x6, 0x10001}, 0x4, 0x8}}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000180)={0x8995, 0x7fff, 0x2, 0x7e, 0x651, 0x200}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000001c0)={0x8, 0x1, 0x5, 0x9}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000240)={r1, 0x30}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x6}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)={r2, 0x9}, &(0x7f0000000340)=0x8) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) connect$packet(r0, &(0x7f00000004c0)={0x11, 0xee048e8623f3964d, r3, 0x1, 0x3, 0x6, @broadcast}, 0x14) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000500)={0x4003, 0x7fff, 0xc5, 0x8}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000780)={&(0x7f0000000540), 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x160, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x47}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x2}}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x690d59bbb52c3fbd}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffffff9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x48044}, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000007c0)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000800)={@ipv4={[], [], @empty}, 0x26, r3}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000840)={0x2}) syz_usb_ep_write(r0, 0x8, 0x55, &(0x7f0000000880)="fff51a9fcdf22452274083ba6e529bde4c09139e852a0ba0494557b8f8e2826332b247503c4e306b6278558d4ea348cf2f10dc9c4c0f419505a0adb6afd19ae493dd35e8c5e651e9f7c09f07cfdd00e5e0d80bda98") getsockopt$inet6_dccp_buf(r0, 0x21, 0xc2, &(0x7f0000000900)=""/4096, &(0x7f0000001900)=0x1000) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000001940)="37e53a64403f707e0566c5d456bd10848fc49353787d5e73937111114d8556") r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001980)='/dev/rtc0\x00', 0x2000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001a00)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000001b00)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001b40)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000001c40)=0xe8) getresgid(&(0x7f0000001c80), &(0x7f0000001cc0), &(0x7f0000001d00)=0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000019c0)='system.posix_acl_default\x00', &(0x7f0000001d40)={{}, {0x1, 0x1}, [{0x2, 0x1, r6}, {0x2, 0x3, r7}], {0x4, 0x2}, [{0x8, 0x4, r8}], {0x10, 0x4}, {0x20, 0x1}}, 0x3c, 0x1) write$apparmor_current(r0, &(0x7f0000001d80)=@hat={'changehat ', 0x2, 0x5e, ['eth1\x00', '\x00', '\x00', '+wlan1&%\x00', '/dev/sequencer\x00']}, 0x3c) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r5, 0x111, 0x4, 0x0, 0x4) exit(0x9) getsockname(r0, &(0x7f0000001dc0)=@caif=@rfm, &(0x7f0000001e40)=0x80) 16:13:25 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 16:13:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{}, {0x80000001, 0x0, 0x6}]}) 16:13:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$int_out(r1, 0x5462, &(0x7f0000000000)) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x0) socket$inet6(0xa, 0x2, 0x8000057) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @ipv4={[0xb000000], [], @local}}, 0x1c) [ 271.125486][T13146] binder_alloc: binder_alloc_mmap_handler: 13143 20ffd000-20fff000 already mapped failed -16 16:13:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) [ 271.249399][T13156] binder: 13152:13156 ioctl 5462 20000000 returned -22 16:13:25 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) [ 271.290703][T13156] binder: 13152:13156 ioctl c0306201 20000140 returned -14 [ 271.322973][T13156] binder: 13152:13156 ioctl 5462 20000000 returned -22 16:13:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x8001}) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getpgrp(0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) inotify_init1(0x0) syz_genetlink_get_family_id$nbd(0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 16:13:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") getrlimit(0x5d3299a3d951c674, 0x0) 16:13:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x80) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000080)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) [ 271.725735][T13177] binder: 13173:13177 ioctl c0306201 20000140 returned -14 [ 271.876182][T13183] IPVS: ftp: loaded support on port[0] = 21 [ 271.973660][T13183] chnl_net:caif_netlink_parms(): no params data found [ 272.018449][T13183] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.025828][T13183] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.035461][T13183] device bridge_slave_0 entered promiscuous mode [ 272.044466][T13183] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.051697][T13183] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.060888][T13183] device bridge_slave_1 entered promiscuous mode [ 272.085741][T13183] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 272.096933][T13183] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 272.121618][T13183] team0: Port device team_slave_0 added [ 272.129968][T13183] team0: Port device team_slave_1 added [ 272.205590][T13183] device hsr_slave_0 entered promiscuous mode [ 272.263212][T13183] device hsr_slave_1 entered promiscuous mode [ 272.325773][T13183] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.333051][T13183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.340618][T13183] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.348029][T13183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.404258][T13183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.428890][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.441359][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.450091][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.459386][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 272.475641][T13183] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.488825][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.497944][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.505334][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.525368][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.534469][ T2880] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.541699][ T2880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.562373][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.574281][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.594076][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.603347][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.618661][T13183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.630550][T13183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.639787][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.669955][T13183] 8021q: adding VLAN 0 to HW filter on device batadv0 16:13:27 executing program 5: add_key$user(&(0x7f0000000480)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) setresgid(0x0, 0xee00, 0x0) 16:13:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x2000004e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x326, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) shutdown(r0, 0x400000000000001) 16:13:27 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xffffff80) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) 16:13:27 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 16:13:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x400000, 0x0) 16:13:27 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) [ 273.713378][T13197] binder: 13192:13197 ioctl c0306201 20000140 returned -14 [ 273.739507][T13204] binder: 13192:13204 ioctl c0306201 20000140 returned -14 16:13:27 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/11, 0xffffff06) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0) 16:13:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca505810bcfec7be0cfe50b033e247e757dcaac6ded89b77e95e3b1428f16fd4df0569868bd258bbabc92f72abdd883b20fa764a6db74dbf517a10b40c60c94dc01f5f317194dfd973eadc17927395fd0481a4f166ecf2ed49395c83151232de8f9e6db0fc01a6ed67fc52524cd36298282c160c5ad64d9cd4bc4457f400a0a1618abca2305755413f64b3082484cf216eb26049355397595ac2da79d16efd2c3dec1ba3a98c47eb65053e04d5b3dad2c") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0x0, 0x2) r3 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="0d0000002700000000d1000000"], 0xd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8d8f217f78d2f97c, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r3}], 0xffffffffffffff88, 0x0, 0x0}) 16:13:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:28 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) [ 274.023340][T13219] binder: 13218:13219 unknown command 0 [ 274.029246][T13219] binder: 13218:13219 ioctl c0306201 20000280 returned -22 16:13:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:28 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/11, 0xffffff06) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0) 16:13:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x4000000800) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010c7d610f00"/20], 0x0, 0x0, 0x0}) 16:13:28 executing program 3: write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f00000003c0)='-bdevlo\x00', 0x1) ftruncate(r2, 0x321) sendfile(r1, r2, 0x0, 0x2000005) [ 274.267216][T13233] binder: 13231:13233 unknown command 1635585025 [ 274.274121][T13233] binder: 13231:13233 ioctl c0306201 20000140 returned -22 [ 274.405657][T13233] binder: 13231:13233 unknown command 1635585025 [ 274.412395][T13233] binder: 13231:13233 ioctl c0306201 20000140 returned -22 16:13:28 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xffffff80) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) 16:13:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 16:13:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:28 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x3, &(0x7f0000000000), 0x4) 16:13:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000100)={0x7, &(0x7f0000000900)=""/4096, &(0x7f0000000440)=[{0x77, 0x58, 0x7, &(0x7f0000000080)=""/88}, {0x5, 0x52, 0x40, &(0x7f0000000180)=""/82}, {0x0, 0x41, 0x3f, &(0x7f0000000200)=""/65}, {0xb1eb, 0x1000, 0x7942, &(0x7f0000001900)=""/4096}, {0x3d3, 0x1000, 0x4, &(0x7f0000002900)=""/4096}, {0x8, 0xf6, 0x8, &(0x7f0000000340)=""/246}, {0x7, 0x52, 0x2, &(0x7f0000000280)=""/82}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:28 executing program 5: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() pselect6(0x5e, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x30) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfe}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 274.588894][T13248] binder_alloc_mmap_handler: 12 callbacks suppressed [ 274.588934][T13248] binder_alloc: binder_alloc_mmap_handler: 13247 20ffd000-20fff000 already mapped failed -16 [ 274.656145][T13260] binder: 13259:13260 ioctl c0306201 20000140 returned -14 [ 274.694797][T13264] ptrace attach of "/root/syz-executor.5"[13263] was attempted by "/root/syz-executor.5"[13264] 16:13:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 16:13:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = memfd_create(&(0x7f0000000000)='/dy\xbdv/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d56", 0x14) lsetxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f00000000c0)='y\x00', 0x2, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 274.695460][T13253] binder_alloc: binder_alloc_mmap_handler: 13247 20ffc000-20fff000 already mapped failed -16 16:13:28 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$inet(0xffffffffffffff9c, &(0x7f0000008180)={0x0, 0x0, 0x0}, 0x0) 16:13:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:28 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="161911dca505686b5f96ae88541333b8f3a5dcbdc82bc1b809895e") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x1, 0x2) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000180)) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x4000) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0163404000000013184eaa89c6968f4406b85d09090000000000000085173845831d06adcd9c986a1b604c4cdfab01b57fc88dc7891b1fe78b06744ffe9935d169553c943f4ff88355da99eadd2ccb3eec6b87ed5395736d2675f60384ac36f4cabd3455804870cc396637b9b2f734ebd70000"], 0x0, 0x0, 0x0}) 16:13:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) [ 274.934261][T13277] binder_alloc: binder_alloc_mmap_handler: 13276 20ffd000-20fff000 already mapped failed -16 [ 274.982726][T13277] binder_alloc: binder_alloc_mmap_handler: 13276 20ffc000-20fff000 already mapped failed -16 16:13:29 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xffffff80) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) 16:13:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 16:13:29 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x30b, 0x400000) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000080)="f3ecf1617489b42e5eaceb6d7d29f1fda3dc5a269c9fc0110d5d2afda306e15f4719b1a0856131b9e6033dace0ed74d678b6d399ae51115a5836e4f82a9fb18d5321dc6e9e1d56b59ea7acfe75c67708c3256470d40b7e3e", 0x58, 0x479, &(0x7f0000000180)={r1, r2+30000000}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0x0, 0x802) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x0, 0xb, 0x0, 0xfffffffffffffffe}, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) r1 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:13:29 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10}], 0x10}, 0x4000044) 16:13:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) [ 275.567667][T13299] binder: 13297:13299 ioctl c0306201 20000140 returned -14 16:13:29 executing program 5: connect$netlink(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @ipv4={[0xb000000], [], @local}}, 0x1c) 16:13:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 16:13:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x82800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000080)={0x4d89d98a, 0x2, 0x986, 'queue1\x00', 0x2}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000001c0)={0x1, 0x1f}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01634000000000001500"/20], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 16:13:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) [ 275.848659][T13319] binder: 13318:13319 unknown command 4219649 [ 275.855092][T13319] binder: 13318:13319 ioctl c0306201 20000140 returned -22 16:13:30 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xffffff80) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) 16:13:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:30 executing program 3: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = memfd_create(&(0x7f0000000000)='/dy\xbdv/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:13:30 executing program 5: r0 = socket$inet(0x2, 0x100080001, 0x84) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000100)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 16:13:30 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffebb, 0x4000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80020}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x48, r2, 0x102, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xb2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpu.stat\x00', 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="ff039aa17403eed7e08f93dd86dd60df80610074dc5f0bfe8000000000c1cf22741a260400200008fab9730000890600000000000800000004000050599e7c97a995ec61fb0c6310288fc173e13ab1294d8888d7d6fa737802b696e78081aeb38e2e9984de9ed0c89de0cceb7eb2a643893f6aef0999f9b19412ae0c02e610812413c2601ff0cbf79a14363104da07818dac72576b888340840bc7ac2b5d119276b58f39d1dd104bdf88a16ae395169283408cd12685c5e5eaeca633fefff84e1fa76a8f2f920f210000000000000000"], 0xd0) [ 276.467653][T13340] binder: 13335:13340 ioctl c0306201 20000140 returned -14 [ 276.485243][T13343] binder_alloc: binder_alloc_mmap_handler: 13342 20ffc000-20fff000 already mapped failed -16 16:13:30 executing program 5: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffee1, 0x0, 0x0) 16:13:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) listen(r0, 0x9) 16:13:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:30 executing program 3: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffee1, 0x0, 0x0) 16:13:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) [ 276.751963][T13361] binder: 13360:13361 ioctl c0306201 20000140 returned -14 16:13:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000040)="11dca8b75e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x200000000140000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYPTR]]], 0x0, 0x0, 0x0}) [ 276.923256][T13372] binder_alloc: binder_alloc_mmap_handler: 13369 20ffc000-20fff000 already mapped failed -16 [ 276.957001][T13374] binder: 13370:13374 unknown command 536871488 [ 276.963517][T13374] binder: 13370:13374 ioctl c0306201 20000280 returned -22 [ 277.025472][T13377] binder: 13370:13377 unknown command 536871488 [ 277.032079][T13377] binder: 13370:13377 ioctl c0306201 20000280 returned -22 16:13:31 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) 16:13:31 executing program 4: clone(0x202102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) symlink(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='./file1\x00') mknod(&(0x7f0000000280)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/11, 0xb) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) sched_yield() 16:13:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 277.369825][T13383] binder: 13382:13383 ioctl c0306201 20000140 returned -14 16:13:31 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) [ 277.412511][T13388] binder_alloc: binder_alloc_mmap_handler: 13380 20ffc000-20fff000 already mapped failed -16 [ 277.424593][T13390] binder: 13382:13390 ioctl c0306201 20000140 returned -14 16:13:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000380)) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:31 executing program 5: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9c76) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', 0x0, 0x0, 0x0) fallocate(r0, 0x0, 0x6, 0xe0c1) 16:13:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) fcntl$setstatus(r0, 0x4, 0x40000) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x7) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x12202, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000280)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x30}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x811, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3d4f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 16:13:31 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) 16:13:31 executing program 3: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffee1, 0x0, 0x0) [ 277.690550][T13405] binder: 13404:13405 ioctl c0306201 20000140 returned -14 [ 277.691140][T13402] binder_alloc: binder_alloc_mmap_handler: 13401 20ffd000-20fff000 already mapped failed -16 16:13:31 executing program 4: creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) 16:13:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@broadcast, @empty, @empty}, 0xc) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0x0, 0x0, 0x0}) [ 277.835172][T13414] binder_alloc: binder_alloc_mmap_handler: 13401 20ffc000-20fff000 already mapped failed -16 16:13:32 executing program 2: write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffff80) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) 16:13:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000)=0x8ec, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000001c0)={'veth0_to_hsr\x00', {0x2, 0x4e24, @loopback}}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @multicast2, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @local}, 0x10) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10, 0xffffffffffffffda, 0x4}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) write$P9_RRENAME(r1, &(0x7f0000000200)={0x7, 0x15, 0x2}, 0x7) 16:13:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='status\x00') readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000380)=""/175, 0xaf}], 0x1) readv(r0, &(0x7f0000000580), 0x46) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) [ 278.229740][T13436] binder_alloc: binder_alloc_mmap_handler: 13433 20ffd000-20fff000 already mapped failed -16 16:13:32 executing program 2: write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffff80) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) [ 278.283392][T13439] binder: 13438:13439 ioctl c0306201 20000140 returned -14 16:13:32 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2, &(0x7f0000000140), 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="b7", 0x1}], 0x1}, 0x0) 16:13:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1}, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) stat(0x0, &(0x7f0000000400)) r1 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:13:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:32 executing program 3: syz_open_dev$admmidi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40186417, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x800000000105082) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x10200000e) 16:13:32 executing program 2: write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffff80) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) 16:13:32 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$inet(0xffffffffffffff9c, &(0x7f0000008180)={0x0, 0x0, 0x0}, 0x8000) [ 278.716564][T13463] binder: 13461:13463 ioctl c0306201 20000140 returned -14 [ 278.729085][T13465] binder: 13461:13465 ioctl c0306201 20000140 returned -14 16:13:32 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x88000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xc8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={r1, 0x1}, &(0x7f00000001c0)=0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0x0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="016340400000000000000029c000000000000000"], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:32 executing program 2: pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffff80) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) 16:13:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000080)=[{r1}], 0x1, 0xb7) close(r1) r2 = accept(r1, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0x1000, "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"}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000001380)={r3, 0x1000, "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"}, 0x0) r4 = accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x80800) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000100)={0x5, 0x1, 0xfffffffffffffbff, 0x100, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000180)={r5, 0xc5, "d437748a5f350ae10096e47c3571b36a7a07806e309128338d83705b13b7cef5739d41b41892f5db3fab7305cc8f1d83b1019c789710859f2f9e89a434d4a68528710f9edd70fe5024cb629c18d6cf21262c2bfc26b102f9e865b8f6bd9c6350dd590b1ab6da0c4145092494ec28276fbc79cfcc4958fb43bb40de0518d7e3bc1873910b9b01eb74bc1cf8058c364fdc43bb2ef2dd8a730908f6cd2a11d7bf70ff99631a5e14a19e3cd9358e1c151cc9a471995f02b866301f64b1e52d6a2ff5e2ae7a18a2"}, 0x0) 16:13:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:33 executing program 3: clone(0x200, 0x0, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x1042, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) [ 279.302830][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 279.309333][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:13:33 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='stack\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x2000000000000084) 16:13:33 executing program 2: pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffff80) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) 16:13:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000080)=0x7ff) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) 16:13:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03630840", @ANYRES64, @ANYBLOB="03630840", @ANYRES64=r2, @ANYBLOB="10630840000000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040bab26f48bcdf383330ec0ebc722f2559e291ffffff000000000000000000"], @ANYBLOB="3b0000000000000000000000000000002000000000000000852a646600000000", @ANYRES32, @ANYBLOB="0000000000000000000000008561646600000000010000000000000000000000000000003000000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="001000000000000003630840", @ANYRES64=r4, @ANYBLOB="0563044002000000"], 0x5d, 0x0, &(0x7f0000000280)="36c61f161bc9accd2ec825d64ad0ff704d7eb64597455ad13b9c59f3fa54005a1f52bdacc1c100565bf1316a866f75635d82c1a33e6139181bc327754c2d56826d2dc8e33648991082b496bd6b727108503162bcc029f32e2fcad03cae"}) 16:13:33 executing program 3: r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) open$dir(0x0, 0x0, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) getrandom(&(0x7f0000000100)=""/249, 0xf9, 0x2) 16:13:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x81785501, 0x0) [ 279.781442][T13514] QAT: Invalid ioctl 16:13:33 executing program 2: pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffff80) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) 16:13:33 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0]}}, 0x80, 0x0}, 0x0) [ 279.804322][T13516] binder_alloc_mmap_handler: 4 callbacks suppressed [ 279.804362][T13516] binder_alloc: binder_alloc_mmap_handler: 13515 20ffd000-20fff000 already mapped failed -16 [ 279.827170][T13526] QAT: Invalid ioctl 16:13:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0xda9, 0xffffffffffff9f0f, 0x7, 0x2, 0xffffffff, 0x8, 0x3, 0x6}, &(0x7f0000000080)={0x800, 0x0, 0x20, 0x10000, 0x1, 0x4, 0x8, 0x5}, &(0x7f00000000c0)={0x84, 0x0, 0x10000, 0x5, 0x6, 0x3, 0xd7, 0x400}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180)={0x7f}, 0x8}) [ 279.954621][T13535] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 16:13:34 executing program 5: unshare(0x20020000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000480)='devpts\x00vh\xd2p!s\n@ha.\xc1\x88\x05\x89\x1d\b\xb3Xd\x92Y\x1b\x8c\xc0\xd0\xf4\x952\x8c!JC\xd1]Ul\xa2\x80\x19\x88 \xd4b\x0f\x87\x89P\xb4M\xf7]w\xa9\xb6\xc3}\x16\f\x87ueg$\xd9,\x8c\x9b\xbb*\xfe\x95\xb8\xa1\x9aVA\xb73w\xdf/\xa9\xc5\x8e\xe1\xef\xc5\x8d\x168\xba\"\x83\x8b\xe2\xf7*\xfa\xd20a\x94\xc7yiF\a\v\x14\xd2\xc1z\x94\x9d\x9d\a*\xab\xea\xd9Ee\xac\xa28p\xa2\xa1\x9a;\xb4o\xa0\xf1\xd7&[2\xf2\x82\xbc\xc2tu\xfb\xf5\xb1Y\xd6\xa9\x1b\xbec\xdeA\x8d\x94W)\x93,\xac\x02\x86\xd1\r\x00\xefZ\xf3Y\x84\xdbF\xf2u\xa1\x8b_\x9fe\xfe[q\xb1\\\xcen\bC \x81', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') 16:13:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 16:13:34 executing program 3: ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x800000000105082) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x10200000e) 16:13:34 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffff80) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) [ 280.149479][T13545] binder: 13544:13545 ioctl c0306201 20000140 returned -14 16:13:34 executing program 4: clone(0x20001000000202, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) symlink(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='./file1\x00') r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) open$dir(&(0x7f0000000000)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) r2 = getpid() rt_sigqueueinfo(r2, 0x26, &(0x7f00000001c0)) [ 280.258428][T13558] binder: 13544:13558 ioctl c0306201 20000140 returned -14 [ 280.289839][T13556] binder_alloc: binder_alloc_mmap_handler: 13554 20ffd000-20fff000 already mapped failed -16 16:13:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0163404000000000007295aff600000000000000"], 0xfffffffffffffda1, 0x0, 0x0}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4000000, 0x101001) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000080)={0x0, 0x8001}, 0x2) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f00000000c0)={0x6, {0x4f9, 0x4, 0x7f, 0x6}}) 16:13:34 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffff80) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) 16:13:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x2c) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) 16:13:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20000000) [ 280.554897][T13575] binder: 13573:13575 ioctl c0306201 20000140 returned -14 16:13:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080)) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x6) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:34 executing program 3: ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x800000000105082) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x10200000e) 16:13:34 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffff80) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) 16:13:34 executing program 4: clone(0x20001000000202, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) symlink(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='./file1\x00') r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) open$dir(&(0x7f0000000000)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) r2 = getpid() rt_sigqueueinfo(r2, 0x26, &(0x7f00000001c0)) 16:13:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80000, 0x0) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000200)) write$evdev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x7, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @rand_addr=0xa2fc}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, @in6={0xa, 0x4e20, 0x2, @empty, 0x9}], 0x78) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) mkdir(&(0x7f0000000100)='./file0\x00', 0x20) listen(r1, 0x9) [ 280.897149][T13603] binder: 13598:13603 ioctl c0306201 20000140 returned -14 16:13:35 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) [ 280.968448][T13610] binder: 13598:13610 ioctl c0306201 20000140 returned -14 16:13:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = dup(r1) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'nr0\x00', 0x200}) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000)=0x10000, 0x4) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000080)="479d957b69c9e38b9ab337df64dd2c2718cbea0ffee4326fd64adbd9474c6210ed2cd24a", 0x24}], 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:35 executing program 4: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0xfdf2) setsockopt$inet6_buf(r1, 0x29, 0x22, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) [ 281.174237][T13621] binder: 13620:13621 ioctl 400454d9 20000100 returned -22 [ 281.223787][T13621] binder: 13620:13621 ioctl c0306201 20000140 returned -14 16:13:35 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) 16:13:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$unix(r1, 0x0, 0x0, 0x80020003ffc, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) accept4(r0, 0x0, 0x0, 0x0) [ 281.264754][T13629] binder: 13620:13629 ioctl c0306201 20000140 returned -14 [ 281.265631][T13627] binder: 13620:13627 ioctl 400454d9 20000100 returned -22 16:13:35 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$inet(0xffffffffffffff9c, 0x0, 0x0) 16:13:35 executing program 4: clone(0x800083102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x3102001ff3, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x3f553e5) fchown(r1, 0x0, 0x0) 16:13:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) write(r1, &(0x7f0000000000)="56c6f5956174483c9a2ad647052056023f7b12964efc6516", 0x18) 16:13:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:35 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) 16:13:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000200)=0x3, &(0x7f0000000240)=0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000900)=@nat={'nat\x00', 0x1b, 0x5, 0x6e8, 0x0, 0x138, 0x3d8, 0x0, 0x138, 0x618, 0x618, 0x618, 0x618, 0x618, 0x5, &(0x7f0000000280), {[{{@ipv6={@dev={0xfe, 0x80, [], 0x25}, @mcast2, [0xff000000, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0xff000000, 0xff, 0xffffffff], 'ifb0\x00', 'nlmon0\x00', {0xff}, {}, 0x6e, 0x8, 0x2, 0x12}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x1b, 0x64bd, 0x8001, 0x8}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv6=@loopback, @ipv6=@mcast1, @icmp_id=0x64, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0xfffffffffffffffc, 0x400, 0x5, 0x8, 0x2}}, @common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x0, 0x81, 0xa21}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0xffffffffffff8001, 0x8}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xa, @ipv6=@remote, @ipv4=@multicast1, @icmp_id=0x66, @port=0x4e21}}}, {{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x11, 0x3, 0x8}}, @common=@inet=@recent1={0x108, 'recent\x00', 0x0, {0x8, 0x100000000, 0x2, 0x1, 'syz1\x00', 0x1, [0xffffff00, 0xffffffff, 0xffffffff]}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv4=@local, @ipv6=@ipv4={[], [], @remote}, @gre_key=0xfffffffffffffffc, @port=0x4e23}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x748) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1801004}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x428, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040801}, 0x811) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:36 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xffffff80) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) 16:13:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='\xb5\xf3Jl\xb9\x9c\x99Zz\x06\x00\x00\x00=\aM\xe3\x04D\xbe\x81\x88\x04\xe5OlK\xe3q\xd3\x1d\x10\xd7y\xa3\xfc\xd6\xb8\xf8\x9c\x89\x88\x8e\xc1S\xd3)g', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 16:13:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x8000057) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @ipv4={[0xb000000], [], @local}}, 0x1c) 16:13:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) [ 282.280998][T13680] binder: 13677:13680 ioctl c0306201 20000140 returned -14 16:13:36 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0xfffffffffffffffe, 0x0, 0xff, 0x0, 0x1, 0xfffffffffffffffe}, &(0x7f0000000080)=0x20) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) io_submit(0x0, 0x1, &(0x7f0000000600)=[0x0]) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000240)={{{@in, @in=@dev}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@loopback, @in6=@empty}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0x40, "1ea6751514a9ec4338e7d8c05dac60c8d832c62b68c2d107284ed939e6581d7c0d74cf93cc95a88234179f73c4e3dd7bf2c5e2c6dd718b9de1527618b9585864"}, 0x0) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@ipv4={[], [], @local}, @in6=@initdev}}, {{@in6}, 0x0, @in6}}, &(0x7f00000008c0)=0xe8) fstat(r0, &(0x7f0000000900)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000400)) getegid() ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000180)={r3, 0x1}) r4 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r4, 0x1000000) sendfile(r2, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 282.394047][T13680] binder: 13677:13680 ioctl c0306201 20000140 returned -14 16:13:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) 16:13:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x980a, 0x80) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) [ 282.574335][T13702] binder: 13701:13702 ioctl c0306201 20000140 returned -14 [ 282.641085][T13709] binder: 13701:13709 ioctl c0306201 20000140 returned -14 16:13:36 executing program 4: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x91) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x108) r2 = dup2(r0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000100), 0x1c) r4 = dup2(r3, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x131f64) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, &(0x7f0000000180)) 16:13:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x40000) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 282.800397][T13714] binder: 13713:13714 ioctl c0306201 20000140 returned -14 16:13:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) dup2(r0, r1) [ 282.930853][T13723] binder: 13713:13723 ioctl c0306201 20000140 returned -14 16:13:37 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xffffff80) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) 16:13:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, 0x0) 16:13:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000100)={r2, r3/1000+30000}, 0x10) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x2) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xfffffe5b, 0x0, &(0x7f0000000300)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 16:13:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) dup2(r0, r1) [ 283.314113][T13746] binder: 13745:13746 unknown command 0 [ 283.319986][T13746] binder: 13745:13746 ioctl c0306201 20000000 returned -22 16:13:37 executing program 4: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 283.427039][T13746] binder: 13745:13746 unknown command 0 [ 283.433070][T13746] binder: 13745:13746 ioctl c0306201 20000000 returned -22 16:13:37 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0xfffffffffffffffe, 0x0, 0xff, 0x0, 0x1, 0xfffffffffffffffe}, &(0x7f0000000080)=0x20) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) io_submit(0x0, 0x1, &(0x7f0000000600)=[0x0]) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000240)={{{@in, @in=@dev}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@loopback, @in6=@empty}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0x40, "1ea6751514a9ec4338e7d8c05dac60c8d832c62b68c2d107284ed939e6581d7c0d74cf93cc95a88234179f73c4e3dd7bf2c5e2c6dd718b9de1527618b9585864"}, 0x0) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@ipv4={[], [], @local}, @in6=@initdev}}, {{@in6}, 0x0, @in6}}, &(0x7f00000008c0)=0xe8) fstat(r0, &(0x7f0000000900)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000400)) getegid() ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000180)={r3, 0x1}) r4 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r4, 0x1000000) sendfile(r2, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:13:37 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = memfd_create(&(0x7f0000000000)='/dy\xbdv/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f00000000c0)='y\x00', 0x2, 0x0) 16:13:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) dup2(r0, r1) 16:13:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x20001000000049, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) getsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, &(0x7f0000000200)) 16:13:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x204c80) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:37 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) close(0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, 0x0, 0x0) 16:13:38 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xffffff80) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x6) 16:13:38 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x100000000002, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0xfffffffffffffe35, 0x0, 0xb724b9036b30377b}, 0xfffffffffffffffc) 16:13:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:38 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="ff039aa17403eed7e08f93dd86dd60df80610074dc5f0bfe8000000000c1cf22741a260400200008fab9730000890600000000000800000004000050599e7c97a995ec61fb0c6310288fc173e13ab1294d8888d7d6fa737802b696e78081aeb38e2e9984de9ed0c89de0cceb7eb2a643893f6aef0999f9b19412ae0c02e610812413c2601ff0cbf79a14363104da07818dac72576b888340840bc7ac2b5d119276b58f39d1dd104bdf88a16ae395169283408cd12685c5e5eaeca633fefff84e1fa76a8f2f920f21000000000000000000"], 0xd1) 16:13:38 executing program 4: creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = memfd_create(&(0x7f0000000000)='/dy\xbdv/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) [ 284.150135][T13801] binder: 13800:13801 ioctl c0306201 20000140 returned -14 [ 284.206324][T13806] binder: 13800:13806 ioctl c0306201 20000140 returned -14 16:13:38 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0xfffffffffffffffe, 0x0, 0xff, 0x0, 0x1, 0xfffffffffffffffe}, &(0x7f0000000080)=0x20) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) io_submit(0x0, 0x1, &(0x7f0000000600)=[0x0]) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000240)={{{@in, @in=@dev}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@loopback, @in6=@empty}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0x40, "1ea6751514a9ec4338e7d8c05dac60c8d832c62b68c2d107284ed939e6581d7c0d74cf93cc95a88234179f73c4e3dd7bf2c5e2c6dd718b9de1527618b9585864"}, 0x0) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@ipv4={[], [], @local}, @in6=@initdev}}, {{@in6}, 0x0, @in6}}, &(0x7f00000008c0)=0xe8) fstat(r0, &(0x7f0000000900)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000400)) getegid() ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000180)={r3, 0x1}) r4 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r4, 0x1000000) sendfile(r2, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:13:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:38 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000016c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) 16:13:38 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0xfffffffffffffffe, 0x0, 0xff, 0x0, 0x1, 0xfffffffffffffffe}, &(0x7f0000000080)=0x20) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) io_submit(0x0, 0x1, &(0x7f0000000600)=[0x0]) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000240)={{{@in, @in=@dev}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0x41, "1ea6751514a9ec4338e7d8c05dac60c8d832c62b68c2d107284ed939e6581d7c0d74cf93cc95a88234179f73c4e3dd7bf2c5e2c6dd718b9de1527618b9585864de"}, 0x0) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@ipv4={[], [], @local}, @in6=@initdev}}, {{@in6}, 0x0, @in6}}, &(0x7f00000008c0)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000900)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000400)) getegid() ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000180)={r3, 0x1}) r4 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r4, 0x1000000) sendfile(r2, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 284.589304][T13817] binder: 13815:13817 ioctl c0306201 20000140 returned -14 16:13:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x801, 0x0, 0x0, {{@in, @in6=@mcast1}, {@in, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in=@empty, @in=@initdev}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0x296) [ 284.640610][T13825] binder: 13815:13825 ioctl c0306201 20000140 returned -14 16:13:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x5, 0x400000) r2 = geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) sendmsg$nl_netfilter(r1, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2090000}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)={0x380, 0x2, 0x4, 0x4, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x7}, [@generic="93acd7e3989cfde502412965be11a9386ece30722424ab083da76c00b1a6416b01b4e6b14b6f1c4689263840028c46c0dd3494679d588259206c00a1c113db9c5aca8ff6975b503bd0fc936382ec5b5aee5698849b16a7d9a09ed737050d958b8a5f8706343d2f93ed9954adaaf73d2b3d0a3c4c9dcf5266503662c750b92e3bc5ad7a15bedfb91c771a84afe7023ba133d3eac8912c3f3ec22b74554bf55a2347025008ebe9ff82d7a4b2e0b819ceac7e2ce59ee8b64365bdc614062348bf1d3ac83dfb71886ec293ed2f010c9e9125bc7914534e53839f2f29", @nested={0x1c4, 0x0, [@typed={0x8, 0x86, @u32=0x3}, @typed={0x14, 0x5c, @ipv6=@empty}, @generic="0cbead61225b9e6e284e20242a42fbe3", @generic="bac924b325feff7304c6bb154ffa2453571747a8fba880bb640ea116216f8747d73ade", @generic="8a01aec437f93ce327b18600235527b569b4c608f70d9c11bd07c96089873bbce728a54554e898989d4f298c41dab54ed425319fdfcf33f001999ff88115b5aa6c5dbcfd4114fe038558c51177bfa3b1c1ac9a183f179de82edb902ab36c4150beedbf31eb399a65aaa73663307720175d6fbb50a8b7366fce33cb5ffa3f904d75f606f95bcab62fa9eea346a8c3df1b708563aa4c8023596f35a8f7420845cd160c2d3b86c6b18e5be5c1370a3c76fa21def1b1e20ef78b37a280aebe6c37f3bc97c3813e76f5fff759d344d41755eb433b25767ec29cbff991c819f6144b019d2c6b106e04a73cbef7d3883b260c51c10f71a6", @typed={0x8, 0x24, @uid=r2}, @generic="9c647d7c0783f72f139f589b656c4d5394ac6bc05fa6041f24767992ae4ab0e72fbe94eb61fd866c3efe108e6357fe200666cdc24db1ede2f2f54126e245213a35a4e84aeb689e5b3ed0a59ebe8987d5dc3719c0636af919c41dc14d5b2c1bb4f7b2bdd1288603a8124c5250421e479388bb432c"]}, @typed={0x8, 0x21, @ipv4=@remote}, @typed={0x4, 0x89}, @nested={0x14, 0xc, [@typed={0x8, 0x53, @uid=r3}, @typed={0x8, 0x68, @u32=0x40}]}, @generic="6b97beee0e986e787c9a0c23742cddf7bbfb187d13b2574248bf3ddfd687368d3aa164d7deeecc2d77afff2a64b5d34b22dbbfc63b7b8b68a1c17cea34e9a1b035c87a8ea338e58dbab78d18fbdffce202d014ee6e6df59a33fd7c5a11410e8d1bfe152d6d449aa4d5aa2e79cd53785e0f1422856bb203d64979a7f84559bee40af5ad9563ad594fc7f96691c17d7c2329dd8892e63f7f6ad6b8c66afd8ebd1ae3b891af8278e4c94569c9"]}, 0x380}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0163404000000000000000000000000000000000e2666e1649f42104d190ac70928d5b4cfdcb213c2a04"], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:39 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xffffff80) vmsplice(r0, 0x0, 0x0, 0x6) 16:13:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x820000, 0x0}, 0x2c) bpf$OBJ_GET_PROG(0x7, &(0x7f00000027c0)={&(0x7f0000002780)='./file0\x00', 0x0, 0x8}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x181) recvmsg(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000001480)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/113, 0x71}, {0x0}, {&(0x7f0000001400)=""/76, 0x4c}], 0x5, &(0x7f0000001500)=""/172, 0xac}, 0x0) 16:13:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x10000, 0x100) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xc1a672bbe2f20e53, 0x0, 0x0}) 16:13:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) [ 285.116683][T13848] binder: 13847:13848 ioctl c0306201 20000080 returned -14 16:13:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x120, 0x0, &(0x7f0000000440)=[@clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x2}, @decrefs={0x40046307, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/237, 0xed, 0x0, 0x11}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000000)={0x0, 0x18, 0x40}}}, @request_death={0x400c630e, 0x1}, @register_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/4096, 0x1000, 0x0, 0x3f}, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}}, @exit_looper, @decrefs={0x40046307, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/49, 0x31, 0x1, 0x32}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0x14, 0x0, &(0x7f0000000580)="f551f9eb06ebdd1be21c00bda0c956eea44bbd46"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="438a7671"], 0xfffffffffffffda1, 0x0, 0x0}) [ 285.245902][T13855] binder: 13854:13855 unknown command 0 [ 285.251760][T13855] binder: 13854:13855 ioctl c0306201 20000140 returned -22 [ 285.290928][T13858] binder: 13857:13858 ioctl c0306201 20000140 returned -14 16:13:39 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0xfffffffffffffffe, 0x0, 0xff, 0x0, 0x1, 0xfffffffffffffffe}, &(0x7f0000000080)=0x20) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) io_submit(0x0, 0x1, &(0x7f0000000600)=[0x0]) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000240)={{{@in, @in=@dev}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@loopback, @in6=@empty}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0x40, "1ea6751514a9ec4338e7d8c05dac60c8d832c62b68c2d107284ed939e6581d7c0d74cf93cc95a88234179f73c4e3dd7bf2c5e2c6dd718b9de1527618b9585864"}, 0x0) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@ipv4={[], [], @local}, @in6=@initdev}}, {{@in6}, 0x0, @in6}}, &(0x7f00000008c0)=0xe8) fstat(r0, &(0x7f0000000900)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000400)) getegid() ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000180)={r3, 0x1}) r4 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r4, 0x1000000) sendfile(r2, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:13:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000080)={0x29, 0x4, 0x0, {0x5, 0xffffe00000000000, 0x1, 0x0, [0x0]}}, 0x29) 16:13:39 executing program 4: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) creat(&(0x7f0000000180)='./file1\x00', 0x1) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000001ac0)=""/11, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) execve(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, 0x0) [ 285.549460][T13867] binder: 13865:13867 unknown command 0 [ 285.555324][T13867] binder: 13865:13867 ioctl c0306201 20000140 returned -22 [ 285.575103][T13868] binder: 13866:13868 ioctl c0306201 20000140 returned -14 16:13:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x280, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000200)={0x1, 0x0, {0x6, 0x401, 0x1, 0x52a}}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x3, 0x8}) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64=r2, @ANYPTR, @ANYRESDEC=r3, @ANYRESOCT=r2, @ANYRES16=r2], @ANYPTR64, @ANYRES64=r2, @ANYRES32=r0, @ANYRESHEX=r1, @ANYRESHEX=r3]], 0x0, 0x0, 0x0}) 16:13:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) [ 285.837063][T13886] binder: 13883:13886 unknown command 0 [ 285.842954][T13886] binder: 13883:13886 ioctl c0306201 20000140 returned -22 16:13:40 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xffffff80) vmsplice(r0, 0x0, 0x0, 0x6) 16:13:40 executing program 4: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x9541a455) r1 = dup(r0) ioctl$TIOCMGET(r1, 0x5415, 0x0) getpgrp(0xffffffffffffffff) 16:13:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000100)={r2, 0x9, 0x4}, 0x8) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xffffffffffffff2f, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) [ 286.176943][T13907] binder: 13904:13907 unknown command 0 [ 286.182973][T13907] binder: 13904:13907 ioctl c0306201 20000140 returned -22 [ 286.259711][T13914] binder: 13913:13914 ioctl c0306201 20000140 returned -14 [ 286.301498][T13915] binder: 13913:13915 ioctl c0306201 20000140 returned -14 16:13:40 executing program 3: 16:13:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="f1705dc10b648bcda015a2ce1338c626261850d9402afddfd532d4487af9eaa5676fd7a4be8097f58f164907b89075a9500ff34795e771ad7394676d6e8e334c566b1b184b4ec2554d801f9dbad18973d495f300b032c1642c9ec335e369f09128800f39f514a72286c0521321848910eced160384d3c78b7ba50dec237df4b80088b01bf512239f7b65baa08901981566a62e14e5775d0e2f752517116afd") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0163404000040000"], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:40 executing program 3: [ 286.479851][T13922] binder: 13921:13922 ioctl c0306201 20000140 returned -14 [ 286.503719][T13924] binder: 13923:13924 unknown command 0 [ 286.509614][T13924] binder: 13923:13924 ioctl c0306201 20000140 returned -22 [ 286.533552][T13926] binder: 13921:13926 ioctl c0306201 20000140 returned -14 16:13:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={@mcast2, 0x36, r2}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c\x00\x00\x00\x00'], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) [ 286.806558][T13933] binder: 13932:13933 unknown command 25344 [ 286.812840][T13933] binder: 13932:13933 ioctl c0306201 20000140 returned -22 [ 286.836815][T13935] binder: 13934:13935 unknown command 0 [ 286.842686][T13935] binder: 13934:13935 ioctl c0306201 20000140 returned -22 16:13:41 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xffffff80) vmsplice(r0, 0x0, 0x0, 0x6) 16:13:43 executing program 4: 16:13:43 executing program 3: 16:13:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x410480, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000004c0)={0x9, 0xfffffffffffffffe}) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000440)=""/127) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0xb7, @empty, 0x4e23, 0x1, 'rr\x00', 0x31, 0x1f, 0x77}, {@multicast2, 0x4e22, 0x3, 0x0, 0x7}}, 0x44) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0163404000000d79ae3700"/20], 0xfffffffffffffda1, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f0000000280)={0x2, &(0x7f0000000180)=""/187, &(0x7f0000000240)=[{0x80, 0x9, 0x1ff, &(0x7f0000000100)=""/9}, {0xffff, 0xec, 0x0, &(0x7f0000000340)=""/236}]}) 16:13:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:43 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xffffff80) vmsplice(r0, &(0x7f0000000000), 0x0, 0x6) 16:13:43 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$inet(0xffffffffffffff9c, 0x0, 0x8000) 16:13:43 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000180)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) epoll_create1(0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) [ 289.101259][T13959] binder: 13957:13959 unknown command 0 [ 289.107590][T13959] binder: 13957:13959 ioctl c0306201 20000140 returned -22 [ 289.122694][T13958] IPVS: set_ctl: invalid protocol: 183 0.0.0.0:20003 [ 289.133788][T13958] binder: 13956:13958 ioctl c0306201 20000140 returned -14 16:13:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) [ 289.174484][T13958] IPVS: set_ctl: invalid protocol: 183 0.0.0.0:20003 16:13:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:43 executing program 4: 16:13:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:43 executing program 3: [ 289.395151][T13979] binder: 13978:13979 ioctl c0306201 20000140 returned -14 [ 289.433619][T13980] binder: 13978:13980 ioctl c0306201 20000140 returned -14 16:13:43 executing program 4: 16:13:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) openat(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x40) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="030040400000000000000000000007c307000000000000"], 0xfffffffffffffda1, 0x0, 0x0}) ioctl(r1, 0x7fff, &(0x7f0000000180)="7fced42027245cde61203b1510402341b052e2f2761af47720d8729c3f695c088b79b688df68f76d7b9cad383a6ef449165dd549706cfe8bf3fd56c567c0b9816aa7f1055917dc16634419f3aa3c4eeac2e30b76b84538b10ee463f062149d56967c8e505b9be07db8ed9cbd36c4194e0ec5fab527fe7d72a83ece2c0afaf22d2559f39866bca92af7d9e53da3f7d406d6068fc8d11ac7cdf8770630ecb6c8f3a6b6ed3a879e4c15512be07b5121dffef7070e9b185a10f5f384aa2f8935588e1eca34ff694615f274c77e98a0171623377f64474866c65a616f6c14e7008e1510") 16:13:43 executing program 3: [ 289.754210][T13992] binder: 13991:13992 ioctl 7fff 20000180 returned -22 16:13:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:43 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xffffff80) vmsplice(r0, &(0x7f0000000000), 0x0, 0x6) 16:13:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:43 executing program 3: 16:13:43 executing program 4: 16:13:43 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x440, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000001c0)={0x8001, 0x0, 0x6, 0x81, 0x7ff, 0x1}) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000180)=0x4) syz_open_procfs(r2, &(0x7f00000000c0)='smaps\x00') syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0163404000000000000000000000f60000000000"], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:44 executing program 3: 16:13:44 executing program 4: 16:13:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) [ 290.031683][T14006] binder: 14004:14006 ioctl c0306201 20000140 returned -14 16:13:44 executing program 4: 16:13:44 executing program 3: 16:13:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0900000094c37e2f7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x27ff, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x13, r2, 0x0) [ 290.385443][T14029] binder: 14027:14029 ioctl c0306201 20000140 returned -14 16:13:44 executing program 3: 16:13:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:44 executing program 4: 16:13:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x91) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000400)=0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)="6202c06dfa59dc10fafd94ab9e525a20f99e79d451bd2a42c01d6eb05a564a2bf754c9b33ee47869fe82814660a06583d53520d1ccc0096f6d47394d89576405415763a15e815e0f41a46294ae84ddda402ce5b74e21471697498114bb8da9d6591be8df2505b3d9c21acf5c1117b83a7c015eb9a55395c1f3a067108b1bf612ef675bd9edd291555679d6bd21084c41024fca85c59717a1289e1d5f3b3e148f8ba114d59cd1c9d30dd767f94eb03d54110d1e3fb99911328ac4b1ebc8cc743a541ba150aa0e17d1b85e2820ebaac795edad9c994b", 0xd5, 0xfffffffffffffffc) keyctl$reject(0x13, r3, 0x401, 0xfffffffffffffff7, r4) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @bt={0x1, 0x0, 0x8000, 0x6, 0x10001, 0x4, 0x1, 0x3}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40406301}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:44 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xffffff80) vmsplice(r0, &(0x7f0000000000), 0x0, 0x6) 16:13:45 executing program 4: 16:13:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:45 executing program 3: [ 290.963774][T14042] binder: 14034:14042 ioctl c0306201 20000140 returned -14 [ 291.075628][T14042] binder: 14034:14042 ioctl c0306201 20000140 returned -14 16:13:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:45 executing program 4: 16:13:45 executing program 3: 16:13:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14937d7679cb367947b40163404000"/30], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:45 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) [ 291.309577][T14060] binder: 14059:14060 unknown command 1987941140 [ 291.316313][T14060] binder: 14059:14060 ioctl c0306201 20000140 returned -22 16:13:45 executing program 4: 16:13:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) [ 291.441760][T14068] binder: 14059:14068 unknown command 1987941140 [ 291.448036][T14070] binder: 14069:14070 unknown command 0 [ 291.448801][T14068] binder: 14059:14068 ioctl c0306201 20000140 returned -22 [ 291.454546][T14070] binder: 14069:14070 ioctl c0306201 20000140 returned -22 16:13:45 executing program 3: 16:13:45 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xffffff80) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x6) 16:13:45 executing program 4: 16:13:45 executing program 1: 16:13:45 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:45 executing program 3: 16:13:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:45 executing program 1: [ 291.865977][T14081] binder: 14080:14081 unknown command 0 [ 291.871729][T14081] binder: 14080:14081 ioctl c0306201 20000140 returned -22 16:13:45 executing program 4: 16:13:46 executing program 3: 16:13:46 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:46 executing program 1: 16:13:46 executing program 4: [ 292.179985][T14105] binder: 14103:14105 unknown command 0 [ 292.185883][T14105] binder: 14103:14105 ioctl c0306201 20000140 returned -22 16:13:46 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xffffff80) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x6) 16:13:46 executing program 3: 16:13:46 executing program 4: 16:13:46 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:46 executing program 1: 16:13:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:46 executing program 1: 16:13:46 executing program 4: [ 292.786570][T14119] binder: 14117:14119 unknown command 0 [ 292.792383][T14119] binder: 14117:14119 ioctl c0306201 20000140 returned -22 16:13:46 executing program 3: 16:13:46 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:47 executing program 1: 16:13:47 executing program 3: [ 293.019285][T14133] binder: 14132:14133 unknown command 0 [ 293.025364][T14133] binder: 14132:14133 ioctl c0306201 20000140 returned -22 16:13:47 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xffffff80) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x6) 16:13:47 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:47 executing program 4: 16:13:47 executing program 1: 16:13:47 executing program 3: 16:13:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) [ 293.633921][T14146] binder: 14144:14146 unknown command 0 [ 293.639651][T14146] binder: 14144:14146 ioctl c0306201 20000140 returned -22 16:13:47 executing program 4: 16:13:47 executing program 3: 16:13:47 executing program 1: 16:13:47 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:47 executing program 1: 16:13:47 executing program 3: 16:13:47 executing program 4: [ 293.998538][T14163] binder: 14162:14163 unknown command 0 [ 294.004414][T14163] binder: 14162:14163 ioctl c0306201 20000140 returned -22 16:13:48 executing program 3: 16:13:48 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xffffff80) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x0) 16:13:48 executing program 4: 16:13:48 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:48 executing program 1: 16:13:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:48 executing program 1: 16:13:48 executing program 3: 16:13:48 executing program 4: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0xfdf2) setsockopt$inet6_buf(r1, 0x29, 0x22, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0x0) [ 294.640035][T14181] binder: 14180:14181 unknown command 0 [ 294.646025][T14181] binder: 14180:14181 ioctl c0306201 20000140 returned -22 16:13:48 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:48 executing program 4: 16:13:48 executing program 1: 16:13:48 executing program 3: [ 294.898891][T14202] binder: 14201:14202 unknown command 0 [ 294.905140][T14202] binder: 14201:14202 ioctl c0306201 20000140 returned -22 16:13:49 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xffffff80) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x0) 16:13:49 executing program 4: 16:13:49 executing program 1: 16:13:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:49 executing program 3: 16:13:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:49 executing program 4: 16:13:49 executing program 1: 16:13:49 executing program 3: [ 295.535298][T14218] binder: 14215:14218 unknown command 0 [ 295.541143][T14218] binder: 14215:14218 ioctl c0306201 20000140 returned -22 16:13:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:49 executing program 4: [ 295.760755][T14231] binder: 14230:14231 unknown command 0 [ 295.766682][T14231] binder: 14230:14231 ioctl c0306201 20000140 returned -22 16:13:49 executing program 1: 16:13:50 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xffffff80) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x219, 0x0) 16:13:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:50 executing program 4: 16:13:50 executing program 1: 16:13:50 executing program 3: 16:13:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:50 executing program 3: [ 296.416851][T14246] binder: 14242:14246 unknown command 0 [ 296.422909][T14246] binder: 14242:14246 ioctl c0306201 20000140 returned -22 16:13:50 executing program 1: 16:13:50 executing program 4: 16:13:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:50 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x2) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x0, 0x8, 0x2285}}, 0x28) sched_setscheduler(0x0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syncfs(0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f00000003c0)='-bdevlo\x00', 0x1) ftruncate(r2, 0x321) sendfile(r1, r2, 0x0, 0x2000005) dup2(r2, r1) socket$nl_netfilter(0x10, 0x3, 0xc) 16:13:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x800000000105082) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") sendfile(r0, r0, 0x0, 0x10200000e) [ 296.667396][T14261] binder: 14260:14261 unknown command 0 [ 296.673281][T14261] binder: 14260:14261 ioctl c0306201 20000140 returned -22 16:13:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(0xffffffffffffffff, 0x1) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r1, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 16:13:51 executing program 4: 16:13:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:51 executing program 1: 16:13:51 executing program 3: 16:13:51 executing program 2: 16:13:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1}, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0x31, "1ea6751514a9ec4338e7d8c05dac60c8d832c62b68c2d107284ed939e6581d7c0d74cf93cc95a88234179f73c4e3dd7bf2"}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) stat(0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, 0x0) r1 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:13:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:13:51 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getresuid(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@ipv4={[], [], @local}, @in6=@initdev}}, {{@in6}, 0x0, @in6}}, &(0x7f00000008c0)=0xe8) fstat(r0, &(0x7f0000000900)) stat(&(0x7f0000000a80)='./file0\x00', 0x0) r3 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 297.395117][T14283] binder: 14279:14283 unknown command 0 [ 297.401630][T14283] binder: 14279:14283 ioctl c0306201 20000140 returned -22 16:13:51 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') getdents64(r0, &(0x7f0000002380)=""/4096, 0x1000) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x8, [0x1, 0x8, 0x2, 0x5, 0xfffffffffffff8d2, 0x0, 0x0, 0x2]}, 0x14) 16:13:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) [ 297.609678][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 297.609711][ T30] audit: type=1400 audit(1559664831.658:31): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=263A0A7BE070 pid=14290 comm="syz-executor.3" 16:13:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) [ 297.699579][ T30] audit: type=1400 audit(1559664831.698:32): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=263A0A7BE070 pid=14290 comm="syz-executor.3" [ 297.781178][T14302] binder: 14301:14302 unknown command 0 [ 297.787624][T14302] binder: 14301:14302 ioctl c0306201 20000140 returned -22 [ 297.849840][ T30] audit: type=1400 audit(1559664831.898:33): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=263A0A7BE070 pid=14306 comm="syz-executor.3" 16:13:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(0xffffffffffffffff, 0x1) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r1, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 16:13:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x0, 0x0) 16:13:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) [ 298.144429][T14311] binder: 14310:14311 unknown command 0 [ 298.151002][T14311] binder: 14310:14311 ioctl c0306201 20000140 returned -22 16:13:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) [ 298.187724][ T30] audit: type=1400 audit(1559664832.238:34): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=263A0A7BE070 pid=14312 comm="syz-executor.3" 16:13:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) [ 298.324047][ T30] audit: type=1400 audit(1559664832.378:35): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=263A0A7BE070 pid=14320 comm="syz-executor.3" 16:13:52 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'memory', 0xe}]}, 0x200600) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3e7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:13:52 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getresuid(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@ipv4={[], [], @local}, @in6=@initdev}}, {{@in6}, 0x0, @in6}}, &(0x7f00000008c0)=0xe8) fstat(r0, &(0x7f0000000900)) stat(&(0x7f0000000a80)='./file0\x00', 0x0) r3 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:13:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = memfd_create(&(0x7f0000000040)='c', 0x0) ftruncate(r1, 0x0) close(r1) 16:13:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") write$apparmor_exec(0xffffffffffffffff, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) [ 298.464879][T14330] binder: 14329:14330 unknown command 0 [ 298.471440][T14330] binder: 14329:14330 ioctl c0306201 20000140 returned -22 16:13:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") write$apparmor_exec(0xffffffffffffffff, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:13:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) [ 298.821415][T14351] binder: 14348:14351 unknown command 0 [ 298.829169][T14351] binder: 14348:14351 ioctl c0306201 20000140 returned -22 16:13:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(0xffffffffffffffff, 0x1) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r1, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 16:13:53 executing program 1: syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x2) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syncfs(0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f00000003c0)='-bdevlo\x00', 0x1) ftruncate(r1, 0x321) sendfile(r0, r1, 0x0, 0x2000005) dup2(r1, r0) socket$nl_netfilter(0x10, 0x3, 0xc) 16:13:53 executing program 4: syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x2) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f00000003c0)='-bdevlo\x00', 0x1) ftruncate(r2, 0x321) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x2000005) dup2(r2, r1) 16:13:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") write$apparmor_exec(0xffffffffffffffff, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) [ 299.107915][T14359] binder: 14358:14359 unknown command 0 [ 299.113771][T14359] binder: 14358:14359 ioctl c0306201 20000140 returned -22 16:13:53 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:13:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0xff}, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) stat(&(0x7f0000000700)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000008c0)) fstat(0xffffffffffffffff, &(0x7f0000000980)) r1 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:13:53 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getresuid(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@ipv4={[], [], @local}, @in6=@initdev}}, {{@in6}, 0x0, @in6}}, &(0x7f00000008c0)=0xe8) fstat(r0, &(0x7f0000000900)) stat(&(0x7f0000000a80)='./file0\x00', 0x0) r3 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:13:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:53 executing program 4: setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0xff, 0xb, 0x1, 0xfffffffffffffffe}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) stat(0x0, &(0x7f0000000740)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@ipv4={[], [], @local}, @in6=@initdev}}, {{@in6}, 0x0, @in6}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000900)) fstat(0xffffffffffffffff, &(0x7f0000000980)) stat(&(0x7f0000000a80)='./file0\x00', 0x0) r2 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:13:53 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) [ 299.475910][T14384] binder: 14383:14384 unknown command 0 [ 299.482046][T14384] binder: 14383:14384 ioctl c0306201 20000140 returned -22 16:13:53 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:13:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:53 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) [ 299.956792][T14401] binder: 14400:14401 unknown command 0 [ 299.962939][T14401] binder: 14400:14401 ioctl c0306201 20000140 returned -22 16:13:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) [ 300.020546][ T30] audit: type=1400 audit(1559664834.068:36): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=263A0A7BE070 pid=14402 comm="syz-executor.3" 16:13:54 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:13:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0xff}, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) stat(&(0x7f0000000700)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000008c0)) fstat(0xffffffffffffffff, &(0x7f0000000980)) r1 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 300.195595][T14415] binder: 14413:14415 unknown command 0 [ 300.202798][T14415] binder: 14413:14415 ioctl c0306201 20000140 returned -22 [ 300.222546][ T30] audit: type=1400 audit(1559664834.268:37): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=263A0A7BE070 pid=14414 comm="syz-executor.3" 16:13:54 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:13:54 executing program 2: syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x2) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syncfs(0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f00000003c0)='-bdevlo\x00', 0x1) ftruncate(r2, 0x321) sendfile(r1, r2, 0x0, 0x2000005) dup2(r2, r1) socket$nl_netfilter(0x10, 0x3, 0xc) 16:13:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) [ 300.405909][ T30] audit: type=1400 audit(1559664834.458:38): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=263A0A7BE070 pid=14422 comm="syz-executor.3" 16:13:54 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\x00;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddpr\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) close(r1) r2 = socket$kcm(0xa, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[{0x18, 0x1, 0x1, "ec"}], 0x18}, 0x0) recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 16:13:54 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) [ 300.544488][T14430] binder: 14429:14430 unknown command 0 [ 300.551097][T14430] binder: 14429:14430 ioctl c0306201 20000140 returned -22 [ 300.612017][ T30] audit: type=1400 audit(1559664834.658:39): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=263A0A7BE070 pid=14433 comm="syz-executor.3" 16:13:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) [ 300.796800][T14443] binder: 14442:14443 unknown command 0 [ 300.803041][T14443] binder: 14442:14443 ioctl c0306201 20000140 returned -22 16:13:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:54 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:13:54 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0) close(r0) [ 300.900615][ T30] audit: type=1400 audit(1559664834.948:40): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=263A0A7BE070 pid=14447 comm="syz-executor.3" 16:13:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:55 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) [ 301.088668][T14455] binder: 14453:14455 unknown command 0 [ 301.094977][T14455] binder: 14453:14455 ioctl c0306201 20000140 returned -22 16:13:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0xff}, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) stat(&(0x7f0000000700)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000008c0)) fstat(0xffffffffffffffff, &(0x7f0000000980)) r1 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:13:55 executing program 2: process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806) read(r0, &(0x7f0000000000)=""/30, 0x1000001cd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 16:13:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:13:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) [ 301.349527][T14470] binder: 14469:14470 unknown command 0 [ 301.355776][T14470] binder: 14469:14470 ioctl c0306201 20000140 returned -22 16:13:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:13:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory', 0xe}]}, 0x200600) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:13:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) [ 301.615010][T14479] binder: 14478:14479 unknown command 0 [ 301.621616][T14479] binder: 14478:14479 ioctl c0306201 20000140 returned -22 16:13:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:13:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = socket$inet(0x10, 0x3, 0xc) fchmod(r1, 0x0) 16:13:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0xff}, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) stat(&(0x7f0000000700)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000008c0)) fstat(0xffffffffffffffff, &(0x7f0000000980)) r1 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:13:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') getdents(r0, &(0x7f0000000080)=""/92, 0x5c) 16:13:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x80000006}]}, 0x10) dup2(r0, r1) 16:13:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:13:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:13:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) [ 302.747830][T14528] binder: 14527:14528 unknown command 0 [ 302.754137][T14528] binder: 14527:14528 ioctl c0306201 20000140 returned -22 16:13:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x100080001, 0x84) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000100)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='\f', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:13:56 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) 16:13:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:13:57 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@loopback, @in6=@empty}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000480)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) fstat(r1, &(0x7f0000000980)) getresgid(&(0x7f0000000b40), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)) r3 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:13:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:13:57 executing program 4: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4048080) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 16:13:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x100080001, 0x84) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000100)=@in={0x2, 0x4e20, @loopback=0xac14140e}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='\f', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:13:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) [ 303.229275][T14551] binder: 14550:14551 unknown command 0 [ 303.236448][T14551] binder: 14550:14551 ioctl c0306201 20000140 returned -22 16:13:57 executing program 4: creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) 16:13:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x1ff) 16:13:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:57 executing program 4: creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) 16:13:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) [ 303.814646][T14579] binder: 14577:14579 unknown command 0 [ 303.820819][T14579] binder: 14577:14579 ioctl c0306201 20000140 returned -22 16:13:58 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x4000000005, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "ddc4a2880e6a85f2"}}, 0x48}}, 0x0) 16:13:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:13:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') getdents64(r0, &(0x7f0000002380)=""/4096, 0x1000) 16:13:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:58 executing program 2: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) creat(&(0x7f0000000240)='./file0\x00', 0x82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001200)=[{{&(0x7f0000000e80)={0xa, 0x4e22, 0x0, @empty, 0x3f}, 0x1c, 0x0}}], 0x1, 0x4048080) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 16:13:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0b") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:13:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) close(r0) 16:13:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:13:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0b") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:13:58 executing program 1: r0 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000000c0)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 16:13:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xc3, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x0, 0x11634840}], 0xfffffffffffffda1, 0x0, 0x0}) 16:13:58 executing program 2: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000014c0)) msgsnd(0x0, &(0x7f0000000300)={0x2}, 0x8, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}) 16:13:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 16:13:58 executing program 2: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee4e82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed000046", 0xce) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x20}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x4e) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 16:13:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0b") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:13:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000240)="3406bdc9fe7bc3a0a3e3e23fdf769e0534d6b8d858c010ea3b18a8294b6f01ba49a5a4925847d52bfb1094a0f31cc0fc142bf4301d14f0a444e8", 0x3a, 0x4081, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f00000003c0)=""/250, 0xfa, 0x43, 0x0, 0x0) 16:13:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r1, 0x0, 0x2) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000004e00)={0x0, 0x0, &(0x7f0000004dc0)={0x0}}, 0x4000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) [ 305.006450][T14650] binder: 14645:14650 ioctl c0306201 0 returned -14 16:13:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7b") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) [ 305.225759][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 305.225794][ T30] audit: type=1400 audit(1559664839.278:45): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=263A0A7B pid=14662 comm="syz-executor.3" 16:13:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:13:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000480)="0adc81003c1276159bd0706756a59c12cb816783aee21b59a109abe0125c3a28d5f4bdadc5997f87e854a3aaf6ff1b14e4e170dc3a47e861e1ee0555c8bf1d4788088bcb5cd76636e34c126696a463200aa45110a7817f33f8149a5ffe9e6a58a7b6e0010000802aba85d6fefb803269ce5aa86f8c2dae8d3636984c73947b090000001e4efa0d552e326299eaab17aca250dfe9708b05d0398b7a303ee495f38c9b78fdc04197683233f575e44507fef6f74ba286babb0dba7f83fd43ce14f631391321e26c82d408b333f473659027c23a0db4cb59c2ebf72aafee57f922fec9a7553f7a65a951fe77f1b618d9d62b5b6bcef0eff0daad018fd0c6a358766ec61b758deec6f7b3c2694fa059249d0b05aa8b4a9565137c36f1b9325b4b1fc2c506f4525209e7dff5bf5d7f9ef7c389e7a780344ec67b839b3ac9eb9368e1d2ae70eefe3f76") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x480000000001, 0xe039) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x80112, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r5, r5, 0x0, 0x0) write$P9_RWRITE(r4, 0x0, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000100)={0x1, 0x1, 0xd95, 0x20}) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r6, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) recvmsg(r6, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000500)) getgid() ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)=0x2) pwrite64(r1, &(0x7f0000000300)="e89a7c2c74f3efddf836d3c6b742c8483d7735f43bf873054c97693c7fadff08a8c29bef947424b08e5aceb68449edfcac01082280607a2c1bfe6aa16e2e89dbe7978519f3575bdb08919a2b2cc0fac9d028cfd25f96710f72db", 0x5a, 0x0) getresuid(&(0x7f0000000540), &(0x7f0000000600), &(0x7f0000000640)) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000700)=0xc) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) fstat(r3, &(0x7f00000009c0)) geteuid() getgroups(0x6, &(0x7f0000000ac0)=[0xee00, 0x0, 0xffffffffffffffff, 0xee00, 0xee01, 0x0]) 16:13:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 16:13:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7b") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:13:59 executing program 4: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x5, 0x4) 16:13:59 executing program 1: r0 = open$dir(&(0x7f0000000380)='./file0\x00', 0x7e, 0x0) r1 = dup2(r0, r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0xffffffffffffff7d}, 0xfffffc34) [ 305.628478][T14676] binder: 14675:14676 ioctl c0306201 0 returned -14 [ 305.648932][ T30] audit: type=1400 audit(1559664839.698:46): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=263A0A7B pid=14674 comm="syz-executor.3" 16:13:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 16:13:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7b") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) [ 305.854557][T14695] binder: 14694:14695 ioctl c0306201 0 returned -14 [ 305.886123][ T30] audit: type=1400 audit(1559664839.938:47): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=263A0A7B pid=14696 comm="syz-executor.3" 16:14:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:14:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be0") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:14:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 306.116047][ T30] audit: type=1400 audit(1559664840.168:48): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=263A0A7BE0 pid=14703 comm="syz-executor.3" 16:14:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be0") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) [ 306.349813][ T30] audit: type=1400 audit(1559664840.398:49): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=263A0A7BE0 pid=14709 comm="syz-executor.3" 16:14:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:14:00 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) epoll_create1(0x0) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:14:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be0") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:14:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="6d616e676c650050ee0000000000000000181b526bb7957004b38e0000000000000000000000100000080000000006000000a005000058024f9f80a3306e074fd9ab0d8dd0d93c7d71c54c000000000000004000b004000000e8050000e8070000e805000100000033f3c525cca70cd04c87bb1af8499debd3b9c789e348a8f45d236c1cfa097f60777475e33d317d30f85b337e04c3ddcebe3b02000000dd771fcd49a40ba81ab3fc28333f54ce3d5523599897408f5348e9caca56020000003505853216080000000000000080497cce39afdfd6545993b918da07d9000f0000000000bd2538bae0b7e790"], 0x1) 16:14:00 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x8) write$binfmt_elf32(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4600800000000000000000000002000600ca3f8bca0000000038000000000000f7ffffffffffff1f000200000000000000b500000001000000000000000000ff7f000000000500000000a64451334d826631000000310ff3eec1b0000c085355be8847c22e30f56282c62c95723f068fe42d2796cc"], 0x78) close(r0) mlockall(0x6) uselib(&(0x7f00000000c0)='./file0\x00') [ 306.762284][ T30] audit: type=1400 audit(1559664840.808:50): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=263A0A7BE0 pid=14726 comm="syz-executor.3" 16:14:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:14:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 16:14:01 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffa7) read(r0, &(0x7f0000000200)=""/250, 0x23fffab6) 16:14:01 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6578656320263a0a7945b9c703d1fb1a8637fbbeb934d6aa7368c8d2e8cdc54e60f46ef0dad8cf15af05c107d51c1c2a57961ca2ebcbcd1ca02e6a5205b3db3a2baafb4081c83be7f127a1b84b1e72a5a73605d2a706a8df5b33f9c73a93d9f3dfff7990aa9839f4c04c4edbdd8c5a5eb019e8a804f41d42d5833e9fb65dfc1b82440e88a1ebab4187eb95414840ebe8a1ff68703ed7430a3ce66f2f20bda501fdcea893aea4f824ca2194f36a106a511f1b15512209ca316c2aab999ae6135b99b88ecc5e481e"], 0x1) 16:14:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:14:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 16:14:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:14:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x30}, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:14:01 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)={'exec ', '&=\n'}, 0x1bb) 16:14:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@remote, 0x0, 0x0, 0x6c}}, 0x28}, 0x8}, 0x0) 16:14:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:14:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 16:14:01 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c46000000000000000000aab40003003e000039a594349c1f9842d73ad05d41f262aeffffffffffe80000000000000000000020380003"], 0x39) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 307.745077][ T30] audit: type=1400 audit(1559664841.798:51): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name="&=" pid=14773 comm="syz-executor.1" 16:14:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:14:01 executing program 5: r0 = socket$inet(0x2, 0x3, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000ee9ff0), 0x10) 16:14:01 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x100000000002, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$inet(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc) 16:14:02 executing program 2: socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) [ 308.102934][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 308.109456][ C0] protocol 88fb is buggy, dev hsr_slave_1 16:14:02 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) lchown(0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0x103, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ftruncate(r1, 0x7ff) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141446, 0x0) unlink(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x11, r4, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(0x0, &(0x7f00000001c0)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) renameat(r3, 0x0, r3, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000200)='./file0/file1\x00', 0x0) rename(0x0, &(0x7f0000000140)='./file0/file1\x00') 16:14:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:14:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:14:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1}, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000700)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:14:02 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote, 0x3}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)="cf", 0x1}], 0x1}, 0x0) 16:14:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) socket$kcm(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) 16:14:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:14:02 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpu.stat\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r3 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="ff039aa17403eed7e08f93dd86dd60df80610074dc5f0bfe8000000000c1cf22741a260400200008fab9730000890600000000000800000004000050599e7c97a995ec61fb0c6310288fc173e13ab1294d8888d7d6fa737802b696e78081aeb38e2e9984de9ed0c89de0cceb7eb2a643893f6aef0999f9b19412ae0c02e610812413c2601ff0cbf79a14363104da07818dac72576b888340840bc7ac2b5d119276b58f39d1dd104bdf88a16ae395169283408cd12685c5e5eaeca633fefff84e1fa76a8f2f920f21000000000000000000"], 0xd1) 16:14:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x0) 16:14:02 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$inet(0xffffffffffffff9c, 0x0, 0x7ffd) 16:14:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4000007f, 0x6102) 16:14:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x0) 16:14:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x0) 16:14:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:14:03 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$inet(0xffffffffffffff9c, 0x0, 0xfffffffffffffffb) 16:14:03 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x7) r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) preadv(r1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x80, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x4, 0xffffffff}, @mss, @timestamp, @sack_perm, @sack_perm], 0x5) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880)='/dev/hwrng\x00', 0x42100, 0x0) setxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f0000000280)='y\x00', 0x2, 0xffffffffffffffff) request_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000340)={'syz'}, &(0x7f0000000440)=':\x00', 0xfffffffffffffffc) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000240)=0x7, 0xfffffffffffffd8f) getegid() stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000500)) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000380)={'broute\x00', 0x0, 0x0, 0x45, [], 0x0, 0x0, &(0x7f00000001c0)=""/69}, &(0x7f0000000480)=0x78) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) munlockall() 16:14:03 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x2761, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) 16:14:03 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10}], 0x10}, 0x0) 16:14:03 executing program 1: r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000001c0)=r0, 0x4) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local}, 0x80, 0x0}, 0xbb8) 16:14:03 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003a0081aee4050cecdb4cb9040a485e510befccdf7f3e9cf0758ef900e1cf3aebb1cb4c100c0003720000", 0x2e}], 0x1}, 0x0) 16:14:03 executing program 1: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) 16:14:03 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0xfffffffffffffdb4, 0x0, 0x14ec22917807bb55, 0x0, 0x15f}, 0xfffffffffffffffb) 16:14:03 executing program 3: r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000100)="3400000021001f02ff07f4f9002304000a04f511080001000201009fe78f080002808100471e211811671a837aec8366095bdbbf", 0x34) 16:14:03 executing program 5: r0 = socket$kcm(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(r1, 0x0, 0x2761, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) gettid() socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000008c0)={&(0x7f0000000300)=@x25={0x9, @remote={[], 0x3}}, 0x80, &(0x7f00000005c0)}, 0x0) socket$kcm(0x10, 0x3, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)={0x0}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000740)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x80, &(0x7f0000000200), 0x3c8}, 0x80) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$kcm(r4, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='\rmeiory '], 0x8) 16:14:04 executing program 1: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, 0x0) add_key(0x0, &(0x7f00000004c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) pipe(&(0x7f0000000240)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) creat(0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x1f000000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x2, 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x10000, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, 0x0, 0x4) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) munlockall() creat(&(0x7f0000000580)='./bus\x00', 0x0) syncfs(0xffffffffffffffff) syz_open_dev$usbmon(&(0x7f0000000700)='/dev/usbmon#\x00', 0x5, 0x0) [ 309.989541][T14900] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.102439][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 310.108869][ C1] protocol 88fb is buggy, dev hsr_slave_1 16:14:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:14:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @initdev}, {0x2, 0x0, @multicast1}, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xb49}) 16:14:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca500000000ec7be070") r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) 16:14:04 executing program 3: r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000100)="3400000021001f02ff07f4f9002304000a04f511080001000201009fe78f080002808100471e211811671a837aec8366095bdbbf", 0x34) 16:14:04 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$inet(0xffffffffffffff9c, &(0x7f0000008180)={0x0, 0xfffffffffffffc4e, 0x0, 0x12e}, 0x40000) [ 310.360958][T14916] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 16:14:04 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) 16:14:04 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = memfd_create(&(0x7f0000000000)='/dy\xbdv/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) 16:14:04 executing program 1: creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 16:14:04 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$inet(0xffffffffffffff9c, 0x0, 0x40000) 16:14:04 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x80, 0x0}, 0x40084) 16:14:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000005f80)={0x5, 0x2a, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000011c0)=0x2) 16:14:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000005f80)={0x5, 0x2a, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000011c0)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x1) [ 310.846772][T14947] ion_buffer_destroy: buffer still mapped in the kernel 16:14:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:14:05 executing program 2: r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000100)="340000004e001f02ff07f4f9002304000a04f511080001000201009fe78f080002808100471e211811671a837aec8366095bdbbf", 0x34) 16:14:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000380)=""/167, 0xa7}, {0x0}], 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 16:14:05 executing program 5: r0 = msgget$private(0x0, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) msgsnd(r0, &(0x7f00000008c0)={0x0, "ce12f854709b0d785a625dd5159118aa29a3d4fea031a7bea6962e9aae63ff6ede750709993da5de3ec10000515e3da2edf9238412ccff09b060e794efd88fc74053fff029efeec7af0b192fbd65dbe858d9191008fd053acf673bfc36470e910d751788fede5eaa6affde159f9ae104c5c1b1d45f2dcacd02a7c424f3b1f8f0cbc12de57d6c18a4fb0dc28d0bc77cf8d389fb6d22b84f0a0092dec8d044c7"}, 0xa7, 0x800) msgsnd(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000003f848c278dde446ba2fbc28b5aa5caa1573a222ed1b311e809347a964470a1a42c66f2fe7d4f08687c4c7966b8fa53921e093e0e499e1ee4184a63dbba2e0156c847e7f9d7f221cacb9ab23e83daeb6e3228b7dcc88e47f78e77c64c4a5875917a6b1b9f2132429635489c094ddb8a99dd5cfb84185cef62340af3a7bce6f505a0177c75974aa9"], 0x1, 0x800) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000140)=""/10) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000740)=0xff4d) socket(0x1c, 0x5, 0xdd) getsockname$unix(r1, &(0x7f0000000840), &(0x7f0000000880)=0x2e) msgsnd(r0, &(0x7f00000001c0)={0x2000, "470008adaed82f3e254dbf8da59c017db82a5d519fcf65c5d3de72e45fedf1918fe884b5063215474de13bb2dd9ef832f71e1c951f9cbb96c021a3a8ab862453c3d7458e30a31d2b2fd78e129ffd9339a3898aadff0a81525398b6aefc7c28d544174ff77aca9f61c40cd9e31357769b52d84fcf6d4503d99216973d0ebee1de0789e3b0b1c5299497722254ebf427b951a94a023589ed05b669fd1e05600648a3dbcd2ac5605544a95e8e26b7ccab76dd656646e4f4bb6b82b6468c2991a8202c017bf7e36045903cfa76a6705bece4fa506d241e6ce5bde80a51ed43302f5592c8d4ebd911f30f6e2e401b743c56"}, 0xf7, 0x800) msgsnd(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000ba80955e6ab151928e467e600f70000000e804bac549d56282781255e31850eddc1650e6cdbdc6d4ca871677243f52acf468796cec6747503be1bad6e12d2192213cca"], 0x1, 0x800) r2 = socket(0x2, 0x5, 0x0) msgrcv(r0, &(0x7f0000000680)={0x0, ""/113}, 0x79, 0x3, 0x1000) msgrcv(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000000000000005f8e0008dc178b469d43871a97239643fcff80aedecf1c9b76850f691e734b1fed731571693420f2d4027427d34321b4885bbc55ee4862fc7dcc42c3c182bd2b2e77a266dfdde7cf8c802ce1a76ead70cb01182becc7d7958eab1f3bcdcac9f95c696a4dc9123487f118223cf637f058d5f3212aa341981b2c5de52d7a4e1938b1324e0783545884ca99173b17e8cf57ecf2294ac0acbefa7960798092a2223d00966c37fe21f65a00"/192], 0x1, 0x3, 0x1000) connect$unix(r2, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10) msgrcv(r0, &(0x7f00000005c0)={0x0, ""/149}, 0x9d, 0x0, 0x0) 16:14:05 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$inet(0xffffffffffffff9c, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x4004015) 16:14:05 executing program 1: 16:14:05 executing program 1: 16:14:05 executing program 4: 16:14:05 executing program 2: 16:14:05 executing program 1: 16:14:05 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='memory') r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x36fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r3, &(0x7f0000001d40)={&(0x7f0000000740)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001bc0)="01", 0x1}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext={0x8000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r2, &(0x7f0000001c40)={&(0x7f0000001900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001b00)}, 0x2140) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, 0x0) 16:14:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:14:05 executing program 3: 16:14:05 executing program 2: 16:14:05 executing program 1: 16:14:06 executing program 5: 16:14:06 executing program 4: 16:14:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:14:06 executing program 3: 16:14:06 executing program 2: 16:14:06 executing program 1: 16:14:06 executing program 1: 16:14:06 executing program 3: 16:14:06 executing program 2: 16:14:06 executing program 4: 16:14:06 executing program 5: 16:14:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:14:06 executing program 1: 16:14:06 executing program 4: 16:14:06 executing program 3: 16:14:06 executing program 2: 16:14:06 executing program 5: 16:14:06 executing program 1: 16:14:06 executing program 4: 16:14:06 executing program 3: 16:14:07 executing program 2: 16:14:07 executing program 4: 16:14:07 executing program 1: 16:14:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:14:07 executing program 3: 16:14:07 executing program 5: 16:14:07 executing program 4: 16:14:07 executing program 1: 16:14:07 executing program 2: 16:14:07 executing program 5: 16:14:07 executing program 2: 16:14:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) recvmmsg(r0, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 16:14:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="6d616e676c650050ee0000000000000000181b526bb7957004b38e0000000000000000000000100000080000000006000000a005000058024f9f80a3306e074fd9ab0d8dd0d93c7d71c54c000000000000004000b004"], 0x1) 16:14:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:14:07 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) epoll_create1(0x0) write(r0, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={0x0}) 16:14:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:14:08 executing program 5: 16:14:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(0x0, 0x3, 0x8400) shmget$private(0x0, 0x4000, 0x840, &(0x7f0000ff9000/0x4000)=nil) 16:14:08 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x2) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x0, 0x8, 0x2285}}, 0x28) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f00000003c0)='-bdevlo\x00', 0x1) ftruncate(r3, 0x321) sendfile(r2, r3, 0x0, 0x2000005) dup2(r3, r2) 16:14:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@remote}}, 0x28}, 0x8}, 0x0) 16:14:08 executing program 5: creat(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) 16:14:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x100080001, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) 16:14:08 executing program 3: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x4e) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 16:14:08 executing program 1: write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f00000003c0)='-bdevlo\x00', 0x1) ftruncate(r2, 0x321) sendfile(r1, r2, 0x0, 0x2000005) dup2(r2, r1) socket$nl_netfilter(0x10, 0x3, 0xc) 16:14:08 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x75f, 0x0) semget$private(0x0, 0x7, 0x0) 16:14:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab55", 0x2) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0xc) 16:14:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x58, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x6, 0x2, 0x2e}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}, 0x440}, @free_buffer], 0x0, 0x0, 0x0}) [ 315.024238][T15139] binder: BINDER_SET_CONTEXT_MGR already set [ 315.030518][T15139] binder: 15135:15139 ioctl 40046207 0 returned -16 16:14:09 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(0xffffffffffffffff, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r0, 0x1) recvfrom$inet6(r0, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r1, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) dup2(0xffffffffffffffff, r0) 16:14:09 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x2) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x0, 0x8, 0x2285}}, 0x28) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f00000003c0)='-bdevlo\x00', 0x1) ftruncate(r3, 0x321) sendfile(r2, r3, 0x0, 0x2000005) dup2(r3, r2) socket$nl_netfilter(0x10, 0x3, 0xc) 16:14:09 executing program 5: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) 16:14:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab55", 0x2) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0xc) 16:14:09 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000002980)="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", 0xfb}], 0x1}, 0x0) 16:14:09 executing program 1: r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806) read(r0, &(0x7f0000000000)=""/30, 0x1000001cd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 315.253866][T15153] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.2'. 16:14:09 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806) read(r0, &(0x7f0000000000)=""/30, 0x1000001cd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 16:14:09 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) stat(&(0x7f0000000700)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@ipv4={[], [], @local}, @in6=@initdev}}, {{@in6}, 0x0, @in6}}, &(0x7f00000008c0)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000980)) r2 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:14:09 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(0xffffffffffffffff, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r0, 0x1) recvfrom$inet6(r0, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r1, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) dup2(0xffffffffffffffff, r0) 16:14:09 executing program 3: syz_open_dev$vcsn(0x0, 0x0, 0x2) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f00000003c0)='-bdevlo\x00', 0x1) ftruncate(r2, 0x321) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x2000005) dup2(r2, r1) 16:14:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) 16:14:09 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 16:14:09 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(0xffffffffffffffff, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r0, 0x1) recvfrom$inet6(r0, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r1, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) dup2(0xffffffffffffffff, r0) 16:14:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e630c4000000000"], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x400c630e}], 0x0, 0x0, 0x0}) 16:14:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done={0x40046304}], 0x0, 0x0, 0x0}) 16:14:10 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000240)) sendmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 16:14:10 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0xfffffffffffffffe, 0x0, 0xff, 0x0, 0x1, 0xfffffffffffffffe}, &(0x7f0000000080)=0x20) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) io_submit(0x0, 0x1, &(0x7f0000000600)=[0x0]) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0x41, "1ea6751514a9ec4338e7d8c05dac60c8d832c62b68c2d107284ed939e6581d7c0d74cf93cc95a88234179f73c4e3dd7bf2c5e2c6dd718b9de1527618b9585864de"}, 0x0) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@ipv4={[], [], @local}, @in6=@initdev}}, {{@in6}, 0x0, @in6}}, &(0x7f00000008c0)=0xe8) fstat(r0, &(0x7f0000000900)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000400)) getegid() ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000180)={r3, 0x1}) r4 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r4, 0x1000000) sendfile(r2, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:14:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:14:10 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) sendmsg(r0, &(0x7f00000029c0)={&(0x7f0000001500)=@pppoe={0x18, 0x0, {0x0, @dev, 'veth0_to_hsr\x00'}}, 0x80, 0x0}, 0x0) [ 316.345830][T15166] vivid-004: kernel_thread() failed 16:14:10 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) stat(&(0x7f0000000700)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@ipv4={[], [], @local}, @in6=@initdev}}, {{@in6}, 0x0, @in6}}, &(0x7f00000008c0)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000980)) r2 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:14:10 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) stat(0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 316.384544][T15211] binder: 15210:15211 unknown command 0 [ 316.390337][T15211] binder: 15210:15211 ioctl c0306201 200003c0 returned -22 16:14:10 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0xfffffffffffffffe, 0x0, 0xff, 0x0, 0x1, 0xfffffffffffffffe}, &(0x7f0000000080)=0x20) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) io_submit(0x0, 0x1, &(0x7f0000000600)=[0x0]) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@ipv4={[], [], @local}, @in6=@initdev}}, {{@in6}, 0x0, @in6}}, &(0x7f00000008c0)=0xe8) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000180)={0x0, 0x1}) r3 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:14:10 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1}}, {{@in=@local}, 0x0, @in=@remote}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) write(r0, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={0x0}) 16:14:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:14:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 16:14:11 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0xfffffffffffffffe, 0x0, 0xff, 0xb, 0x1, 0xfffffffffffffffe}, &(0x7f0000000080)=0x20) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) io_submit(0x0, 0x1, &(0x7f0000000600)=[0x0]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000340)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@loopback, @in6=@empty}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0x41, "1ea6751514a9ec4338e7d8c05dac60c8d832c62b68c2d107284ed939e6581d7c0d74cf93cc95a88234179f73c4e3dd7bf2c5e2c6dd718b9de1527618b9585864de"}, 0x0) fstat(r0, &(0x7f0000000900)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000a40)) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000400)) getegid() ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000180)={0x0, 0x1}) r2 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:14:11 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x4000000000000001, 0x0) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={0x0}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:14:11 executing program 3: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) 16:14:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be0") r1 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'bond0\x00', 0x81}) 16:14:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 16:14:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 16:14:11 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000180)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) epoll_create1(0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:14:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:14:12 executing program 5: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000140), 0x10) setsockopt(r1, 0x65, 0x1, &(0x7f0000000700)="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", 0x258) close(r1) fcntl$getownex(r0, 0x10, 0x0) unshare(0x40000000) preadv(r1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000240)={0x0, 0x0}) 16:14:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') [ 318.332156][T15276] IPVS: ftp: loaded support on port[0] = 21 16:14:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 16:14:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='status\x00') readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000380)=""/175, 0xaf}], 0x1) readv(r0, &(0x7f0000000580), 0x46) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0x2000, 0x9, 0x0, 0x0, 0x0, [{0x6, 0x1ae00, 0x14000000000000}, {0x80000, 0xef, 0x5, [], 0x7}, {0x1f, 0x0, 0x4, [], 0x9}, {0x10001, 0x100000000, 0xa10000000000, [], 0x3f}, {0x5, 0x9, 0x3, [], 0x7}, {0x5, 0x2, 0x100000000000000, [], 0x81}, {0x5, 0x4, 0x7, [], 0x2}, {0x2, 0x5, 0xeb8, [], 0xfffffffffffffeff}, {0x8, 0x4, 0x80000000, [], 0x8}, {0x64, 0x9, 0x2}, {0x10000, 0x0, 0x4d, [], 0xffffffffffffff7f}, {0x100000001, 0x7f, 0x4, [], 0x100000000}, {0x2c9, 0xe7c5, 0x1ff, [], 0x6}, {0x445d, 0x5, 0x1, [], 0x10000}, {0x80000001, 0x0, 0x7fff, [], 0x7}, {0x9, 0xfffffffffffffff9, 0x203d, [], 0x101}, {0x0, 0x1, 0x9}, {0x6, 0x100000000, 0x0, [], 0x5}, {0x102, 0xffffffff, 0x4, [], 0x9}, {0x1, 0xffff, 0x5, [], 0x3c}, {0x4, 0x3, 0x7, [], 0x2}, {0x3, 0x5, 0x4e9963e, [], 0x1000}, {0x10000000000, 0x2, 0x1, [], 0x8}, {0x5, 0x81}]}}) 16:14:12 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0xfffffffffffffffe, 0x0, 0xff, 0xb, 0x1, 0xfffffffffffffffe}, &(0x7f0000000080)=0x20) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) io_submit(0x0, 0x1, &(0x7f0000000600)=[0x0]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000340)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@loopback, @in6=@empty}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0x41, "1ea6751514a9ec4338e7d8c05dac60c8d832c62b68c2d107284ed939e6581d7c0d74cf93cc95a88234179f73c4e3dd7bf2c5e2c6dd718b9de1527618b9585864de"}, 0x0) fstat(r0, &(0x7f0000000900)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000a40)) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000400)) getegid() ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000180)={0x0, 0x1}) r2 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 319.111924][T15287] IPVS: ftp: loaded support on port[0] = 21 16:14:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000500)={r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3}) 16:14:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:14:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 16:14:13 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\xcb\x00\x00\x00Y\xcd\xc5,\xfa\x97\xfe\xc8\vj\xbf`\xa8\x96[\xbbF\x01\x96vU\xee\f\xb8J\x1f\x86\a3\xb1:\x9bL\xb4\xe9O\xe3.5\xf9\xab^\xae\x80\x85\x02\x97\x8e\xde\x8f\xb7#77=\xca3\xc0z\xb6o\x98\xf1be(\xa0\xe3%AK&\x88\xcf\xdf\x1d`\xde\f\xae\xfc\x82L\x96\xaeG9\x9cP\xc4\xc7\xac\xdeo\xa4\x99\x99S\x9e\x01m\xf0\xac\xe9\x15\xa7_i~\x05\x00\x00\x00\x00\x00\x00\x00\x00:\x13\x00\x00\x00\x00') getdents64(r0, &(0x7f0000002380)=""/4096, 0x1000) [ 319.430353][T15314] irq bypass consumer (token 0000000088341bd4) registration fails: -16 16:14:13 executing program 5: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000140), 0x10) setsockopt(r1, 0x65, 0x1, &(0x7f0000000700)="3b3561ac00814a4548c78d250bdd795fd74ffc69a3565b45f64e53148f3f1ba2f9ef4cd9bc9accca5a9e66aa66083c540e1c390ef3733d2d4aa8d18ac54b2a11459a84cd69778e626bf2180598cf27123f9e627bf4e0467e04f91dd4c9824be1fec0ce58dd168688e6c45a2d8381f4c9a4dfa0fdbb9c9f9e0ffe482aabc46830685fd52c4413cd4d9929999530dec36e01bfcd34099fbe33339b575ff07af0ec8c1a3c4470c103362070b6230923b6a576f83bd964cdafeaeec9e341d82f90054773b4bb1886feeab2b03ec217b9c7e1caba03da6c718f16cbf30431abe8bb25295fb02cdf4fe3a04f89cf9cc5152d48d92b3f8c9e53beb90474488822da8c6ff25760c06fa435f9d0854024945f872c2d61c78c2db8a5d40e8acbd8c00e008aa50d36c09ac673fb47850a7bf8c3394a2e8112c10c10b5c9a7ee6d364ca52a1e1422e433bb020f2e74eb600033d1af7f5e2bd98ba21417e6daa73284c958ac353dc9add51e9b3ce7558cd3f47417d148444ac3a4012a393f87f3edfe83a68f9c5c80fa3e3605150e199f0443b908f11934f96745dcdf9079b275908bdfa7f470c6583c2f17d00f865afa83a0161d65624de63dfa09e359e1eb0000000100000000b8726651fba34a330eb4d117571008a9634576a1d3e245355788c524a072e1dd361370769a3250291fbb1c0015bbe190d93320e4cf2bfe640f9082a4a33524291403c723ff866b37e651eb32b16803511b5e4ca7afa48ff5dba1559deb21413bee6d818b648d60e299d9ef9e39846d771f4eb6e2fbefac6290fc2cbb1af648451675a870b77b956db74420005e9393520c971741bb4529", 0x258) close(r1) fcntl$getownex(r0, 0x10, 0x0) unshare(0x40000000) preadv(r1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000240)={0x0, 0x0}) 16:14:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 16:14:13 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0xfffffffffffffffe, 0x0, 0x0, 0xb, 0x1, 0xfffffffffffffffe}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) io_submit(0x0, 0x0, &(0x7f0000000600)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getresuid(&(0x7f0000000640), 0x0, &(0x7f00000006c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) stat(&(0x7f0000000700)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@ipv4={[], [], @local}, @in6=@initdev}}, {{@in6}, 0x0, @in6}}, &(0x7f00000008c0)=0xe8) fstat(r0, 0x0) fstat(r1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a00), 0x0) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000400)) getegid() ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000180)={r4, 0x1}) r5 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r5, 0x1000000) sendfile(r3, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:14:13 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = memfd_create(&(0x7f0000000000)='/dy\xbdv/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) accept(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) sendto$unix(0xffffffffffffffff, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) 16:14:13 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)={'exec ', '&:\n'}, 0x1bb) 16:14:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 16:14:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = memfd_create(&(0x7f0000000000)='/dy\xbdv/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 16:14:14 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@loopback, @in6=@empty}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000008c0)) fstat(0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) r1 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 16:14:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 16:14:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:14:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001600250500020000000000000800000200000000000000005f5686141e7bf6e0ab84fa0eb2e618de25496f5811a9c26144a2dadbc150d8a65d8f51d92b89fb6903e32ea370337c699919d50366633bff49fdf485ab49394d9f216602c1de288e70aa1f957d989984416af2dee49d7cec66b3514a977ecae5b5da75fcb50ef4c12dcb372646172e65057e01efcec22dbe109fbcc957ba51c040a8c6a227db1a"], 0x1}}, 0x0) 16:14:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 16:14:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5056a11bdb67bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 16:14:14 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000200000000000000010000060400000001000000000000000000889099e10be1444e42537d7382032f16a43c4dfd964a24ac2b7cf6a7e15497a31581000000b639345b596846ec1382296d5128539a27e3a1ee7f67f259929216d8dfbe79e21d"], 0x0, 0x74}, 0x20) 16:14:14 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 16:14:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) exit_group(0x0) 16:14:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000000)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$int_in(r1, 0x5421, &(0x7f00000001c0)=0xc) read$FUSE(r1, 0x0, 0x0) 16:14:15 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) ioctl(r0, 0x80001000008912, &(0x7f0000000340)="1172173b660bcfe47bf070") r1 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r1, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r2 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x100000000a, &(0x7f0000000240)=0x800000001, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r2, &(0x7f00000000c0)="dd", 0x1, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000100)=""/200, 0x463) 16:14:15 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 16:14:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000400)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) 16:14:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:14:15 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 16:14:15 executing program 3: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = creat(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) 16:14:15 executing program 5: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x151) execve(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1) r2 = dup2(r0, r1) open$dir(&(0x7f0000000100)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) 16:14:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfe75) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x20000000000003}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f0000000140), 0x14) close(r0) 16:14:15 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 16:14:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=[@timestamping={{0x14}}], 0x18}, 0x0) 16:14:15 executing program 3: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = creat(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) [ 321.704179][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 321.710569][ C1] protocol 88fb is buggy, dev hsr_slave_1 16:14:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000480)="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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x480000000001, 0xe039) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x80112, r3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r5, r5, 0x0, 0x0) write$P9_RWRITE(r4, 0x0, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000100)={0x1, 0x1, 0xd95, 0x20}) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r6, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) recvmsg(r6, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000500)) getgid() ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) pwrite64(r1, &(0x7f0000000300)="e89a7c2c74f3efddf836d3c6b742c8483d7735f43bf873054c97693c7fadff08a8c29bef947424b08e5aceb68449edfcac01082280607a2c1bfe6aa16e2e89dbe7978519f3575bdb08919a2b2cc0fac9d028cfd25f96710f72dbd47797f1a730d9a5706106881f5e19c31be8ba6bbf243efa1338c8214ba9dfedf9ca93abf903fd98bd377c218ca57642cfc98e4cd0a1ca6a25af92c77edf4f2fec8c332e1f3f235ca662c029e9fabc71ff4d9eef0f1f5f8973a1", 0xb4, 0x0) getresuid(&(0x7f0000000540), &(0x7f0000000600), &(0x7f0000000640)) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000700)=0xc) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) fstat(r3, &(0x7f00000009c0)) geteuid() getgroups(0x6, &(0x7f0000000ac0)=[0xee00, 0x0, 0xffffffffffffffff, 0xee00, 0xee01, 0x0]) 16:14:15 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={0x12, 0x1, 0x0, 0x39, 0x68, 0x9e, 0x20, 0x7d1, 0x3c05, 0xe414, 0x0, 0x0, 0x0, 0x1, [{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x9, 0x4, 0xd7, 0x0, 0x0, 0xee, 0xee, 0x41}]}]}, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000e00)={0x54, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000040)={0x267, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000d80)={0x54, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000002840)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002b00)={0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002a80)={0x40, 0x9, 0x3, "af057b"}, 0x0}) syz_usb_control_io(r0, &(0x7f0000000540)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000a40)={0x54, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000d00)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)={0x54, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 16:14:15 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 16:14:16 executing program 5: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x108) r2 = dup2(r0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000100), 0x1c) r4 = dup2(r3, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x131f64) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, &(0x7f0000000180)) 16:14:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x3}, 0x1c) listen(r0, 0xfffffffffffffff9) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000000040)=""/31, 0x1f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) dup2(r0, r1) 16:14:16 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 16:14:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000140), 0x10) [ 322.312334][ T17] usb 2-1: new high-speed USB device number 2 using dummy_hcd 16:14:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x0, 0x0, 0x382) 16:14:16 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') [ 322.562242][ T17] usb 2-1: Using ep0 maxpacket: 32 16:14:16 executing program 3: prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffff900) prctl$PR_GET_TIMERSLACK(0x1e) [ 322.683393][ T17] usb 2-1: config 0 has an invalid interface number: 215 but max is 0 [ 322.691740][ T17] usb 2-1: config 0 has no interface number 0 [ 322.698210][ T17] usb 2-1: New USB device found, idVendor=07d1, idProduct=3c05, bcdDevice=e4.14 [ 322.707586][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.782630][ T17] usb 2-1: config 0 descriptor?? 16:14:16 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 16:14:17 executing program 5: r0 = creat(&(0x7f00000004c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x3103101ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@rand_addr=0x7ff, @multicast1, 0x1, 0x5, [@rand_addr=0x5, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, 0x24) [ 322.993079][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 322.999943][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 323.014192][ T17] ================================================================== [ 323.022593][ T17] BUG: KMSAN: uninit-value in ax88772_bind+0x93d/0x11e0 [ 323.029559][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 5.1.0+ #1 [ 323.036600][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.047057][ T17] Workqueue: usb_hub_wq hub_event [ 323.052128][ T17] Call Trace: [ 323.055479][ T17] dump_stack+0x191/0x1f0 [ 323.059864][ T17] kmsan_report+0x130/0x2a0 [ 323.064508][ T17] __msan_warning+0x75/0xe0 [ 323.069052][ T17] ax88772_bind+0x93d/0x11e0 [ 323.073696][ T17] ? ax88178_change_mtu+0x650/0x650 [ 323.078937][ T17] usbnet_probe+0x10f5/0x3940 [ 323.083717][ T17] ? usbnet_disconnect+0x660/0x660 [ 323.088988][ T17] usb_probe_interface+0xd66/0x1320 [ 323.094271][ T17] ? usb_register_driver+0x7d0/0x7d0 [ 323.099784][ T17] really_probe+0xdae/0x1d80 [ 323.104812][ T17] driver_probe_device+0x1b3/0x4f0 [ 323.110025][ T17] __device_attach_driver+0x5b8/0x790 [ 323.115552][ T17] bus_for_each_drv+0x28e/0x3b0 [ 323.120453][ T17] ? deferred_probe_work_func+0x400/0x400 [ 323.126315][ T17] __device_attach+0x454/0x730 [ 323.131146][ T17] device_initial_probe+0x4a/0x60 [ 323.136223][ T17] bus_probe_device+0x137/0x390 [ 323.141144][ T17] device_add+0x288d/0x30e0 [ 323.145839][ T17] usb_set_configuration+0x30dc/0x3750 [ 323.151418][ T17] generic_probe+0xe7/0x280 [ 323.156247][ T17] ? usb_choose_configuration+0xae0/0xae0 [ 323.162017][ T17] usb_probe_device+0x14c/0x200 [ 323.166927][ T17] ? usb_register_device_driver+0x470/0x470 [ 323.172853][ T17] really_probe+0xdae/0x1d80 [ 323.177497][ T17] driver_probe_device+0x1b3/0x4f0 [ 323.182657][ T17] __device_attach_driver+0x5b8/0x790 [ 323.188091][ T17] bus_for_each_drv+0x28e/0x3b0 [ 323.192966][ T17] ? deferred_probe_work_func+0x400/0x400 [ 323.198720][ T17] __device_attach+0x454/0x730 [ 323.203532][ T17] device_initial_probe+0x4a/0x60 [ 323.208621][ T17] bus_probe_device+0x137/0x390 [ 323.213623][ T17] device_add+0x288d/0x30e0 [ 323.218209][ T17] usb_new_device+0x23e5/0x2ff0 [ 323.223143][ T17] hub_event+0x48d1/0x7290 [ 323.227683][ T17] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 323.233642][ T17] ? led_work+0x720/0x720 [ 323.238013][ T17] ? led_work+0x720/0x720 [ 323.242383][ T17] process_one_work+0x1572/0x1f00 [ 323.247491][ T17] worker_thread+0x111b/0x2460 [ 323.257729][ T17] kthread+0x4b5/0x4f0 [ 323.261919][ T17] ? process_one_work+0x1f00/0x1f00 [ 323.267166][ T17] ? kthread_blkcg+0xf0/0xf0 [ 323.271822][ T17] ret_from_fork+0x35/0x40 [ 323.276292][ T17] [ 323.278636][ T17] Local variable description: ----buf@ax88772_bind [ 323.285138][ T17] Variable was created at: [ 323.289582][ T17] ax88772_bind+0x5f/0x11e0 [ 323.294124][ T17] usbnet_probe+0x10f5/0x3940 [ 323.298911][ T17] ================================================================== [ 323.306981][ T17] Disabling lock debugging due to kernel taint [ 323.313326][ T17] Kernel panic - not syncing: panic_on_warn set ... [ 323.320051][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Tainted: G B 5.1.0+ #1 [ 323.329023][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.339389][ T17] Workqueue: usb_hub_wq hub_event [ 323.344437][ T17] Call Trace: [ 323.347766][ T17] dump_stack+0x191/0x1f0 [ 323.352139][ T17] panic+0x3ca/0xafe [ 323.356136][ T17] kmsan_report+0x298/0x2a0 [ 323.360700][ T17] __msan_warning+0x75/0xe0 [ 323.365251][ T17] ax88772_bind+0x93d/0x11e0 [ 323.369899][ T17] ? ax88178_change_mtu+0x650/0x650 [ 323.375142][ T17] usbnet_probe+0x10f5/0x3940 [ 323.379931][ T17] ? usbnet_disconnect+0x660/0x660 [ 323.385098][ T17] usb_probe_interface+0xd66/0x1320 [ 323.390364][ T17] ? usb_register_driver+0x7d0/0x7d0 [ 323.395687][ T17] really_probe+0xdae/0x1d80 [ 323.400343][ T17] driver_probe_device+0x1b3/0x4f0 [ 323.405552][ T17] __device_attach_driver+0x5b8/0x790 [ 323.411003][ T17] bus_for_each_drv+0x28e/0x3b0 [ 323.415905][ T17] ? deferred_probe_work_func+0x400/0x400 [ 323.421699][ T17] __device_attach+0x454/0x730 [ 323.426889][ T17] device_initial_probe+0x4a/0x60 [ 323.431967][ T17] bus_probe_device+0x137/0x390 [ 323.436883][ T17] device_add+0x288d/0x30e0 [ 323.441480][ T17] usb_set_configuration+0x30dc/0x3750 [ 323.447066][ T17] generic_probe+0xe7/0x280 [ 323.451624][ T17] ? usb_choose_configuration+0xae0/0xae0 [ 323.457395][ T17] usb_probe_device+0x14c/0x200 [ 323.462299][ T17] ? usb_register_device_driver+0x470/0x470 [ 323.468255][ T17] really_probe+0xdae/0x1d80 [ 323.472913][ T17] driver_probe_device+0x1b3/0x4f0 [ 323.478090][ T17] __device_attach_driver+0x5b8/0x790 [ 323.483526][ T17] bus_for_each_drv+0x28e/0x3b0 [ 323.488418][ T17] ? deferred_probe_work_func+0x400/0x400 [ 323.494189][ T17] __device_attach+0x454/0x730 [ 323.499004][ T17] device_initial_probe+0x4a/0x60 [ 323.504063][ T17] bus_probe_device+0x137/0x390 [ 323.508975][ T17] device_add+0x288d/0x30e0 [ 323.513587][ T17] usb_new_device+0x23e5/0x2ff0 [ 323.518538][ T17] hub_event+0x48d1/0x7290 [ 323.523095][ T17] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 323.529032][ T17] ? led_work+0x720/0x720 [ 323.533700][ T17] ? led_work+0x720/0x720 [ 323.538179][ T17] process_one_work+0x1572/0x1f00 [ 323.543553][ T17] worker_thread+0x111b/0x2460 [ 323.548411][ T17] kthread+0x4b5/0x4f0 [ 323.552524][ T17] ? process_one_work+0x1f00/0x1f00 [ 323.557856][ T17] ? kthread_blkcg+0xf0/0xf0 [ 323.562505][ T17] ret_from_fork+0x35/0x40 [ 323.567989][ T17] Kernel Offset: disabled [ 323.572348][ T17] Rebooting in 86400 seconds..