[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 61.029296] sshd (6139) used greatest stack depth: 53184 bytes left [....] Starting OpenBSD Secure Shell server: sshd[ 61.222791] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 62.052937] random: sshd: uninitialized urandom read (32 bytes read) [ 62.540351] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 64.246268] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.96' (ECDSA) to the list of known hosts. [ 70.149997] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/10 16:20:49 fuzzer started [ 74.803595] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/10 16:20:54 dialing manager at 10.128.0.26:45337 2018/10/10 16:20:54 syscalls: 1 2018/10/10 16:20:54 code coverage: enabled 2018/10/10 16:20:54 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/10 16:20:54 setuid sandbox: enabled 2018/10/10 16:20:54 namespace sandbox: enabled 2018/10/10 16:20:54 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/10 16:20:54 fault injection: enabled 2018/10/10 16:20:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/10 16:20:54 net packed injection: /dev/net/tun can't be opened (open /dev/net/tun: cannot allocate memory) 2018/10/10 16:20:54 net device setup: enabled [ 81.519930] random: crng init done 16:23:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000000)}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1f}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='team0\x00') [ 206.792911] IPVS: ftp: loaded support on port[0] = 21 [ 208.384367] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.390865] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.399619] device bridge_slave_0 entered promiscuous mode [ 208.544713] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.551211] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.559984] device bridge_slave_1 entered promiscuous mode [ 208.703586] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 208.847945] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 209.293024] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 209.443249] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 209.726981] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 209.734236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 16:23:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) ioctl$RTC_ALM_READ(r0, 0x8008700b, &(0x7f0000000280)) [ 210.398593] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 210.407171] team0: Port device team_slave_0 added [ 210.679643] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 210.687972] team0: Port device team_slave_1 added [ 210.693420] IPVS: ftp: loaded support on port[0] = 21 [ 210.917509] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 210.924698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.934059] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.146879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 211.154145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.163428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.453141] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 211.460798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.470300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.679955] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 211.687819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.697063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.745065] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.751564] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.760327] device bridge_slave_0 entered promiscuous mode [ 213.043865] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.050343] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.058962] device bridge_slave_1 entered promiscuous mode [ 213.320692] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 213.532391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 214.192511] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 214.241226] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.247811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.254933] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.261438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.270639] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 214.391909] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 214.676370] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 214.685506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.842252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.915511] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 214.922790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.478650] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 215.487051] team0: Port device team_slave_0 added 16:23:12 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000780)=@abs, 0x21e) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0xe9}, 'syz1\x00', 0x27}) syz_open_dev$sndseq(&(0x7f0000000740)='/dev/snd/seq\x00', 0x0, 0x0) listxattr(&(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f00000005c0)=""/71, 0x47) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4), 0xfffffeb1) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x0, 0x3, &(0x7f0000346fc8), &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000640)) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000100)={"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"}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) [ 215.766475] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 215.774804] team0: Port device team_slave_1 added [ 216.068344] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 216.075625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.084744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.406165] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 216.413390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.422539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.731590] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 216.740035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.749580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.066453] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 217.074244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.083597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.244586] IPVS: ftp: loaded support on port[0] = 21 [ 219.866939] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.873578] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.882171] device bridge_slave_0 entered promiscuous mode [ 220.254327] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.260810] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.269532] device bridge_slave_1 entered promiscuous mode [ 220.435757] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.442328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.449287] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.455870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.464894] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 220.605273] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 220.901438] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 221.462003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.777318] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 222.007629] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 222.281261] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 222.290329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.581376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 222.588555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.513149] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 223.521304] team0: Port device team_slave_0 added [ 223.764713] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 223.773132] team0: Port device team_slave_1 added [ 223.979267] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 223.986510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.995687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 16:23:21 executing program 3: syz_open_procfs(0x0, &(0x7f00000000c0)='net/psched\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000300), 0x0) write(r1, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x447d, 0x0) [ 224.318344] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 224.325636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.334785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.738375] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 224.746114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.755447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.093155] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 225.100770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.110533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.669643] IPVS: ftp: loaded support on port[0] = 21 [ 226.341407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.709674] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 228.946348] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.953036] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.961601] device bridge_slave_0 entered promiscuous mode [ 229.142038] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 229.148463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.156863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.239197] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.245764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.252833] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.259304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.268830] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 229.275562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.309707] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.316368] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.325045] device bridge_slave_1 entered promiscuous mode [ 229.634965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 230.021504] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 230.570228] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.163648] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 231.502409] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 231.845777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 231.852976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.253660] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 232.260781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.396849] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 233.405173] team0: Port device team_slave_0 added [ 233.757484] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 233.766171] team0: Port device team_slave_1 added [ 234.145003] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 234.152336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.161343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 16:23:31 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000180)={'ah\x00'}, &(0x7f0000000300)=0xffffffffffffff07) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000280)={'bridge_slave_0\x00'}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x14) wait4(0x0, &(0x7f0000000000), 0x0, &(0x7f00000004c0)) [ 234.618807] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 234.626000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.635121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.037361] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 235.045179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.054361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.147572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.466769] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 235.474600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.483862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.254167] IPVS: ftp: loaded support on port[0] = 21 [ 236.862585] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 238.655026] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 238.661445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.669725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.175132] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.181729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.188668] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.195210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.203872] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 240.233487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.393706] 8021q: adding VLAN 0 to HW filter on device team0 16:23:37 executing program 0: creat(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@nullb='/dew/nullb0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000180)='dax\x00', 0x0, &(0x7f00000001c0)='threaded\x00') [ 240.635274] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.641945] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.650829] device bridge_slave_0 entered promiscuous mode 16:23:37 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x480000, 0x0) pread64(r0, &(0x7f00000002c0)=""/72, 0xfffffffffffffec9, 0x51) [ 241.170492] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.177114] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.185724] device bridge_slave_1 entered promiscuous mode 16:23:38 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x5bc0, 0x4) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x2, 0x200}) getrlimit(0x69b8bdcd2409731c, &(0x7f0000000080)) getsockopt$inet6_int(r0, 0x29, 0xff, &(0x7f0000000440), &(0x7f0000000400)=0xfffffffffffffffb) [ 241.701134] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 16:23:38 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000300)={0x0}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time={r3}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) [ 242.175912] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 16:23:39 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000300)={0x0}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time={r3}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:23:39 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000300)={0x0}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time={r3}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:23:40 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000300)={0x0}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time={r3}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) [ 243.568152] bond0: Enslaving bond_slave_0 as an active interface with an up link 16:23:40 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000300)) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) [ 243.964985] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 244.371244] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 244.378409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.782165] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 244.789271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.791501] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 245.799922] team0: Port device team_slave_0 added [ 246.014338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.123158] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 246.131347] team0: Port device team_slave_1 added [ 246.429336] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 246.436676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.445475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.824887] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 246.832158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.840926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.123387] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 247.130995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.140432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.357723] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 247.431588] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 247.439452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.448363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.451126] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.457770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.465855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.452894] 8021q: adding VLAN 0 to HW filter on device team0 16:23:46 executing program 1: [ 250.698204] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.704758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.711886] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.718356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.726932] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 250.733701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 253.109691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.892228] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 254.667310] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 254.674089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.682240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 16:23:52 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000780)=@abs, 0x21e) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0xe9}, 'syz1\x00', 0x27}) syz_open_dev$sndseq(&(0x7f0000000740)='/dev/snd/seq\x00', 0x0, 0x0) listxattr(&(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f00000005c0)=""/71, 0x47) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4), 0xfffffeb1) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x0, 0x3, &(0x7f0000346fc8), &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000640)) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000100)={"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"}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) [ 255.466344] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.359882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.894758] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 16:23:56 executing program 3: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000440)="66ba4100ed2e0fc71f67260f21ee66430f73f0dc81a69f0200002b760000656666430fefaa525d0000b921090000b80a000000ba000000000f30b8010000000f01c1d9e90f23f6", 0x47}], 0x1, 0x40, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close(r2) dup3(r0, r3, 0x0) [ 259.127688] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 259.454386] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 259.460642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.468758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.767072] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.665861] ptrace attach of "/root/syz-executor4"[7494] was attempted by "/root/syz-executor4"[7495] 16:24:01 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000180)={'ah\x00'}, &(0x7f0000000300)=0xffffffffffffff07) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000280)={'bridge_slave_0\x00'}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x14) wait4(0x0, &(0x7f0000000000), 0x0, &(0x7f00000004c0)) 16:24:01 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101800, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x210000, 0x0) fanotify_mark(r0, 0x81, 0x30, r1, &(0x7f0000000080)='./file0\x00') ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'ip6tnl0\x00', 0x6}) r2 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x2) getsockopt$inet_dccp_int(r0, 0x21, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000002c0)=""/4096) syz_genetlink_get_family_id$nbd(&(0x7f00000012c0)='nbd\x00') ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001300)={'veth1\x00', {0x2, 0x4e22, @broadcast}}) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000001340)=""/142) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000001400)) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000001480)={0x4, &(0x7f0000001440)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000014c0)={r3, 0x3}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000001500)="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") ioctl$EXT4_IOC_RESIZE_FS(r2, 0x40086610, &(0x7f0000001600)=0x5) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001640), &(0x7f0000001680)=0x4) fallocate(r2, 0x40, 0x200000000000, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/vsock\x00', 0x101000, 0x0) getpeername$packet(r1, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001740)=0x14) connect$can_bcm(r4, &(0x7f0000001780)={0x1d, r5}, 0x10) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f00000017c0)) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000001800)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000001880)={{0x100, 0x2}, 'port1\x00', 0x8b, 0x0, 0x20, 0x6, 0xb3, 0xfffffffffffffff9, 0x40}) ioctl$TIOCSTI(r0, 0x5412, 0x0) r6 = semget$private(0x0, 0x0, 0x308) semctl$GETALL(r6, 0x0, 0xd, &(0x7f0000001940)=""/4096) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000002940)={0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x3, 0x5}) 16:24:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="153f6234488dd25d766070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)="68756765746c04000000000000006167655f69725f5aa2f4657300", 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x10076) fsync(r2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x0, r1}) 16:24:01 executing program 2: socket$netlink(0x10, 0x3, 0x0) select(0x40, &(0x7f0000000080)={0x5, 0xfff, 0x10001, 0x6, 0xfffffffffffffff7, 0x9, 0xd13f}, &(0x7f00000000c0)={0x0, 0x9, 0x1, 0x0, 0x1, 0x8, 0xffffffff, 0x1f}, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x5, 0x0, 0x3}, &(0x7f0000000140)) r0 = socket(0x1000000000000a, 0x80000000005, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) wait4(0x0, &(0x7f0000000100), 0x1000000, &(0x7f0000000500)) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000340)={[0x0, 0x0, 0x0, 0x0, 0x6]}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x3}, 0xc, &(0x7f00000006c0)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x1c}, 0x1c}}, 0x0) 16:24:01 executing program 3: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000440)="66ba4100ed2e0fc71f67260f21ee66430f73f0dc81a69f0200002b760000656666430fefaa525d0000b921090000b80a000000ba000000000f30b8010000000f01c1d9e90f23f6", 0x47}], 0x1, 0x40, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close(r2) dup3(r0, r3, 0x0) 16:24:01 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000300)) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:02 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000240), 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) write$9p(r1, &(0x7f0000000040)="b9", 0x1) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) vmsplice(r1, &(0x7f0000001540)=[{&(0x7f0000001440)='\x00', 0x1}], 0x1, 0x0) 16:24:02 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000300)) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:02 executing program 3: 16:24:02 executing program 2: 16:24:02 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:02 executing program 3: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000380)="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", 0x1bb, 0xfffffffffffffffe) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000580), &(0x7f0000000800)=0x14) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) [ 266.325700] IPVS: ftp: loaded support on port[0] = 21 [ 267.510302] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.516931] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.524849] device bridge_slave_0 entered promiscuous mode [ 267.610565] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.617154] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.625445] device bridge_slave_1 entered promiscuous mode [ 267.711253] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 267.806084] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 268.103983] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 268.194350] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 268.277252] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 268.284367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.365538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 268.372555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.540120] ip (7587) used greatest stack depth: 53056 bytes left [ 268.611047] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 268.618883] team0: Port device team_slave_0 added [ 268.696263] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 268.703994] team0: Port device team_slave_1 added [ 268.781437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.861583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.939654] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 268.947018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.956146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.028405] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 269.035847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.044925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.893250] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.899679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.906687] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.913498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.921265] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 270.042131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.071019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.362875] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 273.651374] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 273.657712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.665741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.955625] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.807793] QAT: Invalid ioctl [ 275.813001] QAT: Invalid ioctl [ 275.818002] QAT: Invalid ioctl [ 275.821516] QAT: Invalid ioctl [ 275.828870] Unknown ioctl -1068978587 [ 275.834242] QAT: Invalid ioctl [ 275.840636] QAT: Invalid ioctl [ 275.845284] QAT: Invalid ioctl [ 275.849333] QAT: Invalid ioctl [ 275.853443] QAT: Invalid ioctl 16:24:12 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) utimensat(r0, 0x0, &(0x7f0000000440)={{0x77359400}}, 0x0) 16:24:12 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x3c}}, 0x0) 16:24:12 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') 16:24:12 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0x40, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0x24f, 0x0, &(0x7f0000001d00)={0x77359400}) 16:24:12 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000180)={'ah\x00'}, &(0x7f0000000300)=0xffffffffffffff07) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000280)={'bridge_slave_0\x00'}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x14) wait4(0x0, &(0x7f0000000000), 0x0, &(0x7f00000004c0)) [ 275.857218] Unknown ioctl -1068978587 [ 275.861393] QAT: Invalid ioctl 16:24:13 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:13 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') 16:24:13 executing program 1: r0 = socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) 16:24:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'nat\x00'}, &(0x7f0000000040)=0x54) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) 16:24:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedsend(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)) mq_timedreceive(r0, &(0x7f0000000100)=""/74, 0x4a, 0x0, &(0x7f0000000040)) 16:24:13 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:13 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x3, &(0x7f0000346fc8), &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 16:24:14 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') 16:24:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000a80)=@in={0x2, 0x4e22, @rand_addr}, 0x80, &(0x7f0000001bc0), 0x0, &(0x7f0000000180)=[{0x10}], 0x24}}], 0x1, 0x0) 16:24:14 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:14 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./control\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x0) 16:24:16 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000180)={'ah\x00'}, &(0x7f0000000300)=0xffffffffffffff07) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000280)={'bridge_slave_0\x00'}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x14) wait4(0x0, &(0x7f0000000000), 0x0, &(0x7f00000004c0)) 16:24:16 executing program 2: open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0) mount(&(0x7f00000001c0)=@loop={'/dev/loop'}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='sockfs\x00', 0x0, &(0x7f0000000380)='\x00') 16:24:16 executing program 1: r0 = epoll_create1(0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r1, &(0x7f00000000c0), 0x4) 16:24:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540), 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='F'], 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) 16:24:16 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) dup2(0xffffffffffffffff, r0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:16 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioperm(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) write$P9_RATTACH(r2, &(0x7f0000000540)={0x14}, 0x14) write$P9_RLERROR(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400"], 0x2) write$9p(r2, &(0x7f0000000400)="d5b8", 0x2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0xfcd5}, &(0x7f0000000280)=0xfffffe0f) [ 279.160834] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 279.167745] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 279.174631] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 279.181425] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 279.188282] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 279.195192] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 279.202032] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 279.208804] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 279.215645] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 279.222484] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 279.229247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 16:24:16 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x42402, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @queue}], 0x30) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/8, 0x8}, {&(0x7f0000000700)=""/214, 0xd6}], 0x2) 16:24:16 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) dup2(0xffffffffffffffff, r0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) [ 279.318152] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 16:24:16 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./control\x00', 0x0, 0x0) 16:24:16 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x100000001, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 16:24:16 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) dup2(0xffffffffffffffff, r0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:16 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x7a, 0x10a000000) 16:24:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioperm(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) write$P9_RATTACH(r2, &(0x7f0000000540)={0x14}, 0x14) write$P9_RLERROR(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400"], 0x2) write$9p(r2, &(0x7f0000000400)="d5b8", 0x2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0xfcd5}, &(0x7f0000000280)=0xfffffe0f) 16:24:19 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, &(0x7f00000000c0)='wfdno') 16:24:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000200)='vboxnet0\x00', 0xfffffffffffffffc) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r0, r0, &(0x7f0000000180)=0x74000000, 0x0) 16:24:19 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r0, 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r0, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:19 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)}, 0x0) 16:24:19 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioperm(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) write$P9_RATTACH(r2, &(0x7f0000000540)={0x14}, 0x14) write$P9_RLERROR(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400"], 0x2) write$9p(r2, &(0x7f0000000400)="d5b8", 0x2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0xfcd5}, &(0x7f0000000280)=0xfffffe0f) [ 282.320623] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 282.352887] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 282.391184] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 282.427375] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 16:24:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioperm(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) write$P9_RATTACH(r2, &(0x7f0000000540)={0x14}, 0x14) write$P9_RLERROR(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400"], 0x2) write$9p(r2, &(0x7f0000000400)="d5b8", 0x2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0xfcd5}, &(0x7f0000000280)=0xfffffe0f) 16:24:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioperm(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) write$P9_RATTACH(r2, &(0x7f0000000540)={0x14}, 0x14) write$P9_RLERROR(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400"], 0x2) write$9p(r2, &(0x7f0000000400)="d5b8", 0x2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0xfcd5}, &(0x7f0000000280)=0xfffffe0f) 16:24:19 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='net/psched\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000300), 0x0) write(r2, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) open(&(0x7f0000000040)='./file0\x00', 0x447d, 0x0) 16:24:19 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r0, 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r0, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 16:24:20 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioperm(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) write$P9_RATTACH(r2, &(0x7f0000000540)={0x14}, 0x14) write$P9_RLERROR(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400"], 0x2) write$9p(r2, &(0x7f0000000400)="d5b8", 0x2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0xfcd5}, &(0x7f0000000280)=0xfffffe0f) 16:24:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r0, 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r0, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioperm(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) write$P9_RATTACH(r2, &(0x7f0000000540)={0x14}, 0x14) write$P9_RLERROR(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400"], 0x2) write$9p(r2, &(0x7f0000000400)="d5b8", 0x2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0xfcd5}, &(0x7f0000000280)=0xfffffe0f) 16:24:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000180)={0xfffffffffffffd4c}, 0xfffffffffffffec6) 16:24:20 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$P9_RRENAME(r2, &(0x7f0000000200)={0x7}, 0x7) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f00000001c0)="bf70726f6373656c696e757800", 0xd, 0x0) dup2(r2, r1) 16:24:20 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioperm(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) write$P9_RATTACH(r2, &(0x7f0000000540)={0x14}, 0x14) write$P9_RLERROR(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400"], 0x2) write$9p(r2, &(0x7f0000000400)="d5b8", 0x2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0xfcd5}, &(0x7f0000000280)=0xfffffe0f) 16:24:20 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioperm(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) write$P9_RATTACH(r2, &(0x7f0000000540)={0x14}, 0x14) write$P9_RLERROR(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400"], 0x2) write$9p(r2, &(0x7f0000000400)="d5b8", 0x2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0xfcd5}, &(0x7f0000000280)=0xfffffe0f) 16:24:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000340)) close(r0) 16:24:20 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioperm(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) write$P9_RATTACH(r2, &(0x7f0000000540)={0x14}, 0x14) write$P9_RLERROR(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400"], 0x2) write$9p(r2, &(0x7f0000000400)="d5b8", 0x2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0xfcd5}, &(0x7f0000000280)=0xfffffe0f) 16:24:21 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7}, 0x7) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000300)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000268, 0x0) 16:24:21 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:21 executing program 4: ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f00000001c0)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='($+}-!\x00') listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) r3 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x74}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) epoll_create1(0x0) 16:24:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x7fffff) 16:24:21 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:21 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') exit(0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000000)={0xf}, 0xf) 16:24:21 executing program 1: clock_gettime(0x0, &(0x7f0000000180)) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x422082, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f0000000340)=0x20) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000700)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140), &(0x7f00000000c0)) 16:24:22 executing program 2: socketpair$unix(0x1, 0x803, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000140), 0x0) 16:24:22 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(0xffffffffffffffff, r0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:22 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7}, 0x7) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000300)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000268, 0x0) [ 285.179184] hrtimer: interrupt took 156792 ns 16:24:22 executing program 4: ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f00000001c0)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='($+}-!\x00') listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) r3 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x74}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) epoll_create1(0x0) 16:24:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000a80)=@in={0x2, 0x4e22, @rand_addr}, 0x80, &(0x7f0000001bc0), 0x0, &(0x7f0000000180)=[{0x10, 0x1}], 0x10}}], 0x1, 0x0) 16:24:22 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(0xffffffffffffffff, r0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:23 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)="68756765746c04000000000000006167655f69725f5aa2f4657300", 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x10076) fsync(r1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0}) 16:24:23 executing program 2: futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0) 16:24:23 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000000400)=""/174) 16:24:23 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(0xffffffffffffffff, r0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:24 executing program 4: ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f00000001c0)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='($+}-!\x00') listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) r3 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x74}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) epoll_create1(0x0) 16:24:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001400)='system.posix_acl_access\x00', &(0x7f0000001c40)=ANY=[@ANYBLOB="040000000000000010000000000000002000000000000000"], 0x1, 0x0) 16:24:25 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, 0xffffffffffffffff) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:25 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000346fc8), &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000800)={0x1, 0x0, [0x0]}) 16:24:25 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)="68756765746c04000000000000006167655f69725f5aa2f4657300", 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x10076) fsync(r1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0}) 16:24:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001400)='system.posix_acl_access\x00', &(0x7f0000001c40)={{}, {}, [{}]}, 0x2c, 0x0) 16:24:25 executing program 4: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffd, 0x7d, 0x0, 0x0, 0x0}, 0x2c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="da21dee3d987aee06c82f53d98ba70496ff22b5462ea7a6d3f2a83e6"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000700)=""/4096}, 0x48) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000140)={0x0, @speck128, 0x0, "e0b49d64cd4eb1b2"}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0xfffffffffffffefc) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) io_setup(0x3, &(0x7f0000000bc0)) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000440)=0x7) readv(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000ac0)) write$P9_RCREATE(r2, &(0x7f0000000080)={0x6c6f25688faa5297}, 0x18) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000001700)={@ipv4={[], [], @local}, @ipv4={[], [], @multicast2}, @ipv4={[], [], @loopback}, 0x8, 0x1, 0x100, 0x100, 0x8001, 0x40000000, r0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000006c0)) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, &(0x7f0000000080), &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, "6e2a30456b886bc2165b41fe6900", 'yam0\x00', 'yam0\x00', 'veth1_t/_bond\x00', @link_local, [], @link_local, [], 0x70, 0xe8, 0x118}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "17d122d4e27ebdf3b9dc569e338e2c551c2fc4a19597ba4c501c8b1f16fb7809c40aee86d9a0ef7981f4af1506f4fe16383d2afb577ed2bb6dd99f024b3f54ba"}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x220) 16:24:26 executing program 1: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) connect$vsock_dgram(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my}, 0x10) [ 289.147625] kernel msg: ebtables bug: please report to author: Wrong nr. of counters requested 16:24:26 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, 0xffffffffffffffff) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) [ 289.245626] kernel msg: ebtables bug: please report to author: Wrong nr. of counters requested 16:24:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) read(r0, &(0x7f0000000400)=""/132, 0x84) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131fc4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000200), 0x4) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 16:24:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0xfffffffffffff1d8}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000400)=""/95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r1}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000300, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x8, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="000000001b5ebebb447030aeb22945e167342939f549033780d617de4264fecab44536c1c80b5b56006fbd2eb634aee28626881d8aff06b55a90850b1f73a54bdd5cf990ab6891e587022b3198f2cd6baa9116967b1b2118abc80430c05e30838d492c39b165b27eedbbf142874d9a1f35bbab5103fbb081b11eedd6e0ef28b42e5b637751"], &(0x7f0000000280)=0x1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef]}}) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x7, 0x2, [0xb4, 0x6af3b431, 0x66db]}, 0xffffffffffffff51) ioctl$LOOP_CLR_FD(r2, 0x4c01) 16:24:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00syz1\x00', 0x200002, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0x29, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) sendto$inet(r1, &(0x7f00000001c0), 0x3a36a8, 0x0, 0x0, 0x300) 16:24:26 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, 0xffffffffffffffff) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0xaaaaaaaaaaaab7d, 0x0, &(0x7f0000000080), 0x111) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)="68bd08dfd7ebd3") ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:24:27 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x90011, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) sync() 16:24:27 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:27 executing program 1: 16:24:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x492492492492620}) 16:24:28 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002300)=""/4096, 0x1000) 16:24:28 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:28 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'team_slave_0\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000000)) 16:24:28 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x90011, r1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) sync() 16:24:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0xfffffffffffff1d8}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000400)=""/95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r1}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000300, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x8, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="000000001b5ebebb447030aeb22945e167342939f549033780d617de4264fecab44536c1c80b5b56006fbd2eb634aee28626881d8aff06b55a90850b1f73a54bdd5cf990ab6891e587022b3198f2cd6baa9116967b1b2118abc80430c05e30838d492c39b165b27eedbbf142874d9a1f35bbab5103fbb081b11eedd6e0ef28b42e5b637751"], &(0x7f0000000280)=0x1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef]}}) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x7, 0x2, [0xb4, 0x6af3b431, 0x66db]}, 0xffffffffffffff51) ioctl$LOOP_CLR_FD(r2, 0x4c01) 16:24:28 executing program 1: r0 = memfd_create(&(0x7f0000000180)="7070703000597b5a1c7d8316368759b15c87f03c9d0b9c51b6e64e9199317b08e236c108662feab21a1eb066f1ad17ce5a8423506f9cbad820317a5ed5b14a9fa6c6555bad0e0932eacbbfd8d048eff81e04e10db82606d7a4db1d29f72d9e8576c9a895c205f29063948be514b8497b783797f717201ef9199332265fe75505777703b996685a76606000e2c449ce8800e90bd1b74e9b7787104bdc827433cb58b6d53bbc0a77e76b81c23ca42d041b80", 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') fchmod(r1, 0xffffffffffffffff) dup2(r1, r0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000240), &(0x7f0000000380), 0x1000) 16:24:28 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000418f50)={{}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000180)={0xffffffffffff8001, 0x0, 'client0\x00', 0x0, "d816bb3094350a97", "38ca9e67565b0b866aa4ed16bf5de2b55997ab53ea5720db8da72b5b6b9084a0"}) 16:24:28 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:29 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x20200000000002) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) 16:24:29 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000), 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=ANY=[@ANYBLOB="2c0000001800010300000000000000000a030000000000000000000008001500060000000800160004000200"], 0x1}}, 0x0) 16:24:29 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) write$sndseq(r0, &(0x7f0000000040), 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:29 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x7, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) 16:24:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000600)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) futex(&(0x7f0000000080)=0x2, 0x0, 0x2, &(0x7f0000000140)={0x0, r1+10000000}, &(0x7f0000000180), 0x0) clock_gettime(0x0, &(0x7f0000000300)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 16:24:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 16:24:29 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) write$sndseq(r0, &(0x7f0000000040), 0x0) ppoll(&(0x7f0000000000), 0x0, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:29 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x189, @local, 0x1}, @in={0x2, 0x0, @broadcast}], 0x2c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x10, &(0x7f0000000840)={&(0x7f0000000700)=""/53, 0x35}}, 0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000440)=@assoc_value, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000240), 0x8) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@profile={'changeprofile ', ':]proc(\x00'}, 0xf) 16:24:30 executing program 5: request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f00000001c0)={'syz'}, &(0x7f0000000200)='nodev\x00', 0xfffffffffffffffc) 16:24:30 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:30 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x189, @local, 0x1}, @in={0x2, 0x0, @broadcast}], 0x2c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x10, &(0x7f0000000840)={&(0x7f0000000700)=""/53, 0x35}}, 0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000440)=@assoc_value, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000240), 0x8) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@profile={'changeprofile ', ':]proc(\x00'}, 0xf) [ 293.432087] binder: 8197:8203 transaction failed 29201/-22, size 0--94489280512 line 2970 [ 293.465010] binder: BINDER_SET_CONTEXT_MGR already set [ 293.470508] binder: 8197:8203 ioctl 40046207 0 returned -16 [ 293.493404] binder_alloc: 8197: binder_alloc_buf, no vma [ 293.499099] binder: 8197:8203 transaction failed 29189/-3, size 0--94489280512 line 2970 16:24:30 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f0000000040)={{0x0, 0x1}, {0x7, 0xe4c}}, &(0x7f0000040000)) timer_delete(0x0) rt_sigtimedwait(&(0x7f00000000c0)={0xffffffffffffffff}, &(0x7f0000ec8ff0), &(0x7f0000685000), 0x8) 16:24:30 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) write$sndseq(r0, &(0x7f0000000040), 0x0) ppoll(&(0x7f0000000000), 0x0, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) [ 293.573117] binder: undelivered TRANSACTION_ERROR: 29201 [ 293.583838] binder: undelivered TRANSACTION_ERROR: 29189 16:24:30 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 294.015797] binder: 8218:8219 transaction failed 29201/-22, size 0--94489280512 line 2970 16:24:31 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f0000000040)={{0x0, 0x1}, {0x7, 0xe4c}}, &(0x7f0000040000)) timer_delete(0x0) rt_sigtimedwait(&(0x7f00000000c0)={0xffffffffffffffff}, &(0x7f0000ec8ff0), &(0x7f0000685000), 0x8) 16:24:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0xfffffffffffff1d8}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000400)=""/95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r1}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000300, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="000000001b5ebebb447030aeb22945e167342939f549033780d617de4264fecab44536c1c80b5b56006fbd2eb634aee28626881d8aff06b55a90850b1f73a54bdd5cf990ab6891e587022b3198f2cd6baa9116967b1b2118abc80430c05e30838d492c39b165b27eedbbf142874d9a1f35bbab5103fbb081b11eedd6e0ef28b42e5b637751"], &(0x7f0000000280)=0x1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef]}}) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x7, 0x2, [0xb4, 0x6af3b431, 0x66db]}, 0xffffffffffffff51) ioctl$LOOP_CLR_FD(r2, 0x4c01) [ 294.074608] binder: undelivered TRANSACTION_ERROR: 29201 16:24:31 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) write$sndseq(r0, &(0x7f0000000040), 0x0) ppoll(&(0x7f0000000000), 0x0, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:31 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) [ 294.226901] binder: BINDER_SET_CONTEXT_MGR already set [ 294.232505] binder: 8223:8225 ioctl 40046207 0 returned -16 16:24:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="28000000000000002900000039000000270202018000000600000000000000000000000000000000"], 0x28}, 0x0) 16:24:32 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[], &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000080)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000380)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402") 16:24:32 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:32 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) write$sndseq(r0, &(0x7f0000000040), 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x17}], 0x2, &(0x7f0000002740)=""/218, 0xfffffffffffffefa}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x0, 0x989680}) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000400), 0xc, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000420005010000000000001200000000006b651e4146220f8d77c7f424a92130f9bb3270"], 0x1}}, 0x0) [ 295.796127] binder: 8255:8258 transaction failed 29201/-22, size 0--94489280512 line 2970 [ 295.872945] binder: undelivered TRANSACTION_ERROR: 29201 16:24:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0xfffffffffffff1d8}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000400)=""/95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r1}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000300, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000480)=ANY=[], &(0x7f0000000280)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef]}}) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x7, 0x2, [0x6af3b431, 0x66db]}, 0xc) ioctl$LOOP_CLR_FD(r2, 0x4c01) 16:24:33 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) [ 296.283464] binder: 8271:8272 transaction failed 29201/-22, size 0--94489280512 line 2970 [ 296.293571] binder: undelivered TRANSACTION_ERROR: 29201 16:24:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0xfffffffffffff1d8}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000400)=""/95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r1}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000300, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="000000001b5ebebb447030aeb22945e167342939f549033780d617de4264fecab44536c1c80b5b56006fbd2eb634aee28626881d8aff06b55a90850b1f73a54bdd5cf990ab6891e587022b3198f2cd6baa9116967b1b2118abc80430c05e30838d492c39b165b27eedbbf142874d9a1f35bbab5103fbb081b11eedd6e0ef28b42e5b637751"], &(0x7f0000000280)=0x1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef]}}) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x7, 0x2, [0xb4, 0x6af3b431, 0x66db]}, 0xffffffffffffff51) ioctl$LOOP_CLR_FD(r2, 0x4c01) 16:24:33 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) write$sndseq(r0, &(0x7f0000000040), 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) 16:24:33 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:33 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:33 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) write$sndseq(r0, &(0x7f0000000040), 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x10}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) [ 296.861362] binder_alloc: 8287: binder_alloc_buf, no vma [ 296.867342] binder: 8287:8289 transaction failed 29189/-3, size 0--94489280512 line 2970 16:24:34 executing program 2: socket$netlink(0x10, 0x3, 0x0) select(0x40, &(0x7f0000000080)={0x5, 0x0, 0x10001, 0x6, 0xfffffffffffffff7, 0x9, 0xd13f}, &(0x7f00000000c0)={0x0, 0x9, 0x1, 0x0, 0x1, 0x8, 0xffffffff, 0x1f}, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x5, 0x0, 0x3}, &(0x7f0000000140)) socket(0x1000000000000a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) [ 296.996128] binder: undelivered TRANSACTION_ERROR: 29189 16:24:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:34 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) write$sndseq(r0, &(0x7f0000000040), 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x84}, 0x8) [ 297.474842] binder_alloc: 8307: binder_alloc_buf, no vma [ 297.480521] binder: 8307:8309 transaction failed 29189/-3, size 0--94489280512 line 2970 16:24:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0xfffffffffffff1d8}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000400)=""/95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r1}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000300, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000480)=ANY=[], &(0x7f0000000280)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef]}}) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x7, 0x2, [0x6af3b431, 0x66db]}, 0xc) ioctl$LOOP_CLR_FD(r2, 0x4c01) 16:24:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:34 executing program 2: socket$netlink(0x10, 0x3, 0x0) select(0x40, &(0x7f0000000080)={0x5, 0x0, 0x10001, 0x6, 0xfffffffffffffff7, 0x9, 0xd13f}, &(0x7f00000000c0)={0x0, 0x9, 0x1, 0x0, 0x1, 0x8, 0xffffffff, 0x1f}, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x5, 0x0, 0x3}, &(0x7f0000000140)) socket(0x1000000000000a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) [ 297.569481] binder: undelivered TRANSACTION_ERROR: 29189 16:24:34 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) 16:24:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:35 executing program 0: r0 = memfd_create(&(0x7f0000000080)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) write$sndseq(r0, &(0x7f0000000040), 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x8) 16:24:35 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) [ 298.106762] binder_alloc: 8339: binder_alloc_buf, no vma [ 298.112676] binder: 8339:8342 transaction failed 29189/-3, size 0--94489280512 line 2970 16:24:35 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000001640)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) read(r1, &(0x7f0000000340)=""/108, 0x6c) [ 298.200690] binder: undelivered TRANSACTION_ERROR: 29189 16:24:35 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f0000001740)=""/247, 0x30987d24707a3644, &(0x7f0000000340)=""/118, 0x2, 0x2}}, 0x39e) 16:24:35 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000380)="585ccb83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2572829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c0100000000000000c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f47725392a368f4d95b827e096900ba47ae05e3c223b24497ff15cf7bb7353a436ef3e363e802a5a7c369080cabc1749d7b7f767c0c4a338b158950de66b00f483ee35019834076ead7ea98e1c34feb5e8bf15ae12bea2f0bbc86db005eb0f140b1e39b9cddc8323b25388868232478d80c4345e67f75f7bdfd964c07da08ec367fea3b8cf4c0d82ac3b5d42db8fb3972fda14d98324695731727fbf9a64f549fb4d4b8169d9417d33a214fb02cb5d029009ea68b724b6ca6e60e3a0a267d9876e2e98419823f6602f40a60f5c9caf688b8a1a21d98d3f96767954e58f11449aff4dd442d5888bcff5b6864ad4cbba4b59107d00000cf95789a4d96b3f468e6e1bb7773f87aeb3c0746412bbfb4181", 0x1c9, 0xfffffffffffffffe) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000680)="02") r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 16:24:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) [ 298.636501] binder: 8355:8361 transaction failed 29189/-22, size 0--94489280512 line 2855 16:24:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/11, 0x238) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) clone(0x20003102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)) [ 298.679431] binder: undelivered TRANSACTION_ERROR: 29189 16:24:35 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:35 executing program 2: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") connect$vsock_dgram(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my}, 0x10) 16:24:36 executing program 1: 16:24:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:36 executing program 5: 16:24:36 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:36 executing program 2: 16:24:36 executing program 1: [ 299.472655] binder: 8387:8391 transaction failed 29189/-22, size 0--94489280512 line 2855 [ 299.537904] binder: undelivered TRANSACTION_ERROR: 29189 16:24:36 executing program 5: 16:24:36 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:36 executing program 1: 16:24:37 executing program 0: 16:24:37 executing program 2: 16:24:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:37 executing program 5: 16:24:37 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:37 executing program 1: [ 300.272374] binder: 8414:8417 transaction failed 29189/-22, size 0--94489280512 line 2855 16:24:37 executing program 2: [ 300.328670] binder: undelivered TRANSACTION_ERROR: 29189 16:24:37 executing program 5: 16:24:37 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:37 executing program 0: 16:24:37 executing program 1: 16:24:37 executing program 2: [ 300.806884] binder: 8429:8432 transaction failed 29189/-22, size 0--94489280512 line 2855 [ 300.869739] binder: undelivered TRANSACTION_ERROR: 29189 16:24:38 executing program 5: 16:24:38 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:38 executing program 0: 16:24:38 executing program 2: 16:24:38 executing program 1: 16:24:38 executing program 5: 16:24:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:38 executing program 0: 16:24:38 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) [ 301.649246] binder: 8451:8453 transaction failed 29189/-22, size 0--94489280512 line 2855 16:24:38 executing program 1: [ 301.713417] binder: undelivered TRANSACTION_ERROR: 29189 16:24:38 executing program 5: 16:24:38 executing program 2: 16:24:39 executing program 0: 16:24:39 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:39 executing program 1: 16:24:39 executing program 5: [ 302.252589] binder: 8468:8469 transaction failed 29189/-22, size 0--94489280512 line 2855 [ 302.294187] binder: undelivered TRANSACTION_ERROR: 29189 16:24:39 executing program 2: 16:24:39 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:39 executing program 0: 16:24:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:39 executing program 1: 16:24:39 executing program 2: 16:24:39 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:40 executing program 5: 16:24:40 executing program 0: 16:24:40 executing program 2: 16:24:40 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:40 executing program 1: 16:24:40 executing program 5: 16:24:40 executing program 2: 16:24:40 executing program 0: [ 303.555695] binder: 8502:8507 transaction failed 29189/-22, size 0--94489280512 line 2855 [ 303.652042] binder: undelivered TRANSACTION_ERROR: 29189 16:24:40 executing program 1: 16:24:40 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:41 executing program 2: 16:24:41 executing program 0: 16:24:41 executing program 5: [ 304.152417] binder: 8521:8522 transaction failed 29189/-22, size 0--94489280512 line 2855 16:24:41 executing program 1: [ 304.213214] binder: undelivered TRANSACTION_ERROR: 29189 16:24:41 executing program 2: 16:24:41 executing program 0: 16:24:41 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:41 executing program 5: 16:24:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:41 executing program 1: [ 304.887158] binder: 8540:8541 transaction failed 29189/-22, size 0--94489280512 line 2855 16:24:41 executing program 0: 16:24:42 executing program 2: [ 304.927451] binder: undelivered TRANSACTION_ERROR: 29189 16:24:42 executing program 4: socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000), 0xff96) 16:24:42 executing program 5: 16:24:42 executing program 0: 16:24:42 executing program 1: 16:24:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:42 executing program 5: 16:24:42 executing program 2: 16:24:42 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000000), 0xff96) [ 305.566272] binder_alloc: 8556: binder_alloc_buf, no vma [ 305.572378] binder: 8556:8558 transaction failed 29189/-3, size 0--94489280512 line 2970 [ 305.616538] binder: undelivered TRANSACTION_ERROR: 29189 16:24:42 executing program 1: 16:24:42 executing program 0: 16:24:42 executing program 2: 16:24:43 executing program 5: 16:24:43 executing program 1: 16:24:43 executing program 4: 16:24:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:43 executing program 5: 16:24:43 executing program 2: [ 306.337349] binder_alloc: 8578: binder_alloc_buf, no vma [ 306.343566] binder: 8578:8579 transaction failed 29189/-3, size 0--94489280512 line 2970 16:24:43 executing program 0: [ 306.425431] binder: undelivered TRANSACTION_ERROR: 29189 16:24:43 executing program 1: 16:24:43 executing program 4: 16:24:43 executing program 5: 16:24:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:43 executing program 2: 16:24:44 executing program 0: [ 306.963088] binder_alloc: 8595: binder_alloc_buf, no vma [ 306.968767] binder: 8595:8597 transaction failed 29189/-3, size 0--94489280512 line 2970 16:24:44 executing program 5: [ 307.023919] binder: undelivered TRANSACTION_ERROR: 29189 16:24:44 executing program 2: 16:24:44 executing program 1: 16:24:44 executing program 4: 16:24:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:44 executing program 0: 16:24:44 executing program 2: [ 307.602791] binder_alloc: 8611: binder_alloc_buf, no vma [ 307.608528] binder: 8611:8612 transaction failed 29189/-3, size 0--94489280512 line 2970 16:24:44 executing program 5: 16:24:44 executing program 1: [ 307.650749] binder: undelivered TRANSACTION_ERROR: 29189 16:24:44 executing program 0: 16:24:44 executing program 4: 16:24:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:45 executing program 2: 16:24:45 executing program 1: 16:24:45 executing program 5: [ 308.193357] binder_alloc: 8624: binder_alloc_buf, no vma [ 308.198943] binder: 8624:8628 transaction failed 29189/-3, size 0--94489280512 line 2970 16:24:45 executing program 0: 16:24:45 executing program 4: [ 308.338999] binder: undelivered TRANSACTION_ERROR: 29189 16:24:45 executing program 5: 16:24:45 executing program 1: 16:24:45 executing program 2: 16:24:45 executing program 0: 16:24:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:45 executing program 4: 16:24:46 executing program 1: [ 308.936946] binder_alloc: 8646: binder_alloc_buf, no vma [ 308.942727] binder: 8646:8647 transaction failed 29189/-3, size 0--94489280512 line 2970 [ 308.984290] binder: undelivered TRANSACTION_ERROR: 29189 16:24:46 executing program 5: 16:24:46 executing program 4: 16:24:46 executing program 2: 16:24:46 executing program 0: 16:24:46 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4d, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:46 executing program 1: 16:24:46 executing program 4: 16:24:46 executing program 5: 16:24:46 executing program 2: 16:24:46 executing program 0: 16:24:46 executing program 1: 16:24:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x45, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:47 executing program 5: 16:24:47 executing program 2: [ 310.088625] binder_alloc: 8675: binder_alloc_buf size -94489280512 failed, no address space [ 310.097517] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) [ 310.106726] binder: 8675:8676 transaction failed 29201/-28, size 0--94489280512 line 2970 16:24:47 executing program 4: [ 310.253130] binder: undelivered TRANSACTION_ERROR: 29201 16:24:47 executing program 1: 16:24:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x45, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:47 executing program 5: 16:24:47 executing program 0: 16:24:47 executing program 4: 16:24:47 executing program 2: [ 310.724130] binder_alloc: 8690: binder_alloc_buf size -94489280512 failed, no address space [ 310.733208] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) [ 310.742298] binder: 8690:8691 transaction failed 29201/-28, size 0--94489280512 line 2970 16:24:47 executing program 5: [ 310.804111] binder: undelivered TRANSACTION_ERROR: 29201 16:24:47 executing program 1: 16:24:48 executing program 0: 16:24:48 executing program 4: 16:24:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x45, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000000)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:48 executing program 2: 16:24:48 executing program 5: 16:24:48 executing program 1: 16:24:48 executing program 0: [ 311.437275] binder_alloc: 8708: binder_alloc_buf size -94489280512 failed, no address space [ 311.446260] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) [ 311.455453] binder: 8708:8709 transaction failed 29201/-28, size 0--94489280512 line 2970 16:24:48 executing program 2: [ 311.526835] binder: undelivered TRANSACTION_ERROR: 29201 16:24:48 executing program 1: 16:24:48 executing program 4: 16:24:48 executing program 5: 16:24:48 executing program 0: 16:24:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x45, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffb64dba083611abbb53", @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x0, 0x0, &(0x7f0000000140)}) 16:24:49 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7}, 0x7) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000300)={0x2, 0x3}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) splice(0xffffffffffffffff, &(0x7f0000000340), 0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0) pipe(&(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000268, 0x0) 16:24:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x200000, 0xc04e27d3b503e3df, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x2) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) 16:24:49 executing program 5: [ 312.184434] binder_alloc: 8728: binder_alloc_buf size -94489280512 failed, no address space [ 312.193265] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) [ 312.202431] binder: 8728:8731 transaction failed 29201/-28, size 0--94489280512 line 2970 [ 312.343628] ================================================================== [ 312.351100] BUG: KMSAN: uninit-value in vmap_page_range_noflush+0x975/0xed0 [ 312.358239] CPU: 0 PID: 8736 Comm: syz-executor1 Not tainted 4.19.0-rc4+ #66 [ 312.365438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.374811] Call Trace: [ 312.377442] dump_stack+0x306/0x460 [ 312.381112] ? vmap_page_range_noflush+0x975/0xed0 [ 312.386100] kmsan_report+0x1a2/0x2e0 [ 312.389951] __msan_warning+0x7c/0xe0 [ 312.393797] vmap_page_range_noflush+0x975/0xed0 [ 312.398633] map_vm_area+0x17d/0x1f0 [ 312.402396] kmsan_vmap+0xf2/0x180 [ 312.405984] vmap+0x3a1/0x510 [ 312.409126] ? ion_heap_map_kernel+0xa33/0xad0 [ 312.413757] ion_heap_map_kernel+0xa33/0xad0 [ 312.418232] ? ion_ioctl+0x690/0x690 [ 312.421985] ion_dma_buf_begin_cpu_access+0x2ba/0x9b0 [ 312.427230] ? ion_dma_buf_release+0x430/0x430 [ 312.431851] dma_buf_ioctl+0x376/0x630 [ 312.435787] ? dma_buf_poll+0x1690/0x1690 [ 312.439981] do_vfs_ioctl+0xcf3/0x2810 16:24:49 executing program 4: [ 312.443924] ? security_file_ioctl+0x92/0x200 [ 312.448471] __se_sys_ioctl+0x1da/0x270 [ 312.452494] __x64_sys_ioctl+0x4a/0x70 [ 312.456422] do_syscall_64+0xbe/0x100 [ 312.460262] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 312.465485] RIP: 0033:0x457579 [ 312.468710] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 312.480632] binder: undelivered TRANSACTION_ERROR: 29201 [ 312.487642] RSP: 002b:00007fbc2d258c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.487670] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 312.487686] RDX: 0000000020000040 RSI: 0000000040086200 RDI: 0000000000000005 [ 312.487702] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 312.487717] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbc2d2596d4 [ 312.487731] R13: 00000000004bedb1 R14: 00000000004ceb30 R15: 00000000ffffffff [ 312.487763] [ 312.487771] Uninit was created at: [ 312.487800] kmsan_internal_poison_shadow+0xc8/0x1d0 [ 312.487824] kmsan_kmalloc+0xa4/0x120 [ 312.487846] __kmalloc+0x14b/0x440 [ 312.487882] kmsan_vmap+0x9b/0x180 [ 312.558747] vmap+0x3a1/0x510 [ 312.561877] ion_heap_map_kernel+0xa33/0xad0 [ 312.566314] ion_dma_buf_begin_cpu_access+0x2ba/0x9b0 [ 312.571539] dma_buf_ioctl+0x376/0x630 [ 312.575486] do_vfs_ioctl+0xcf3/0x2810 [ 312.579507] __se_sys_ioctl+0x1da/0x270 [ 312.583520] __x64_sys_ioctl+0x4a/0x70 [ 312.587437] do_syscall_64+0xbe/0x100 16:24:49 executing program 0: [ 312.591265] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 312.596468] ================================================================== [ 312.603838] Disabling lock debugging due to kernel taint [ 312.609306] Kernel panic - not syncing: panic_on_warn set ... [ 312.609306] [ 312.616703] CPU: 0 PID: 8736 Comm: syz-executor1 Tainted: G B 4.19.0-rc4+ #66 [ 312.625296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.634679] Call Trace: [ 312.637299] dump_stack+0x306/0x460 [ 312.640995] panic+0x54c/0xafa [ 312.644273] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 312.649761] kmsan_report+0x2d3/0x2e0 [ 312.653602] __msan_warning+0x7c/0xe0 [ 312.657443] vmap_page_range_noflush+0x975/0xed0 [ 312.662281] map_vm_area+0x17d/0x1f0 [ 312.666041] kmsan_vmap+0xf2/0x180 [ 312.669629] vmap+0x3a1/0x510 [ 312.672770] ? ion_heap_map_kernel+0xa33/0xad0 [ 312.677404] ion_heap_map_kernel+0xa33/0xad0 [ 312.681867] ? ion_ioctl+0x690/0x690 [ 312.685613] ion_dma_buf_begin_cpu_access+0x2ba/0x9b0 [ 312.690849] ? ion_dma_buf_release+0x430/0x430 16:24:49 executing program 5: [ 312.695461] dma_buf_ioctl+0x376/0x630 [ 312.699391] ? dma_buf_poll+0x1690/0x1690 [ 312.703578] do_vfs_ioctl+0xcf3/0x2810 [ 312.707519] ? security_file_ioctl+0x92/0x200 [ 312.712065] __se_sys_ioctl+0x1da/0x270 [ 312.716101] __x64_sys_ioctl+0x4a/0x70 [ 312.720029] do_syscall_64+0xbe/0x100 [ 312.723876] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 312.729099] RIP: 0033:0x457579 [ 312.732324] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 312.751255] RSP: 002b:00007fbc2d258c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.758996] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 312.766292] RDX: 0000000020000040 RSI: 0000000040086200 RDI: 0000000000000005 [ 312.773587] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 312.780883] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbc2d2596d4 [ 312.788178] R13: 00000000004bedb1 R14: 00000000004ceb30 R15: 00000000ffffffff [ 312.796604] Kernel Offset: disabled [ 312.800243] Rebooting in 86400 seconds..