_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000080)={{0x3, 0x1, 0x5, 0x3, 0x7fff}, 0x1, 0x7ff, 'id0\x00', 'timer0\x00', 0x0, 0x40, 0x3f, 0x7, 0x6}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:13:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x2000) 13:13:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x700]}, 0xb}, 0x7a) [ 326.662016] binder_alloc: binder_alloc_mmap_handler: 13973 20005000-20008000 already mapped failed -16 13:13:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) clone(0x50800000, &(0x7f0000000040)="ae2858e199c85a955d5d47e590f6496711c42e56c0606025b41bb6abe0010d7ccf67ed0c9d69f657364df5484b9378a61069e5d6a613c179f39f7b13181422cd491284159a7b3fc5f1425ecdd00b717b76b2d99afa3e7b030ce3ed50e05dadf733ed59623425c08297e7dee8d1f79a2b11e273c9ec58c8617d29d0a58e2f79cf880b8e135a8e16a6726d8ca216d991ba68adace94ac121451f43b20e70e35a9a3d37110e3f7221e8fbce521282e8164af32abe80b079fd0da93832e65e3b0dd37f760c556913020b573a93", &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="0d7e97e19766426498a35c07806dbdd423d11c2da59d76f65d09a1f1f8d8f9dc88e9296c49ea973941083e87a18497d2c548c2c86326aad817faba6ce3190c1e84e741abf483100c4b50db60279be678d02ee1a7e95d47fb51eb8541052ee18894f12da3c55b723bc42a8f46c000fa016e74ffcc02ad54a37e3214db65292506ee8e7f7cc7669eac10ac7f799c84d5a01c8f4a92608aecd6f68a0a9a6f64e6cc2f0a89375679a8ad1573b7edc7e288d8925136e01cd1f43e7a453740232f8936d691") 13:13:50 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x4028700f) [ 326.733415] binder_alloc: binder_alloc_mmap_handler: 13979 20005000-20008000 already mapped failed -16 13:13:50 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 13:13:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x69, 0x0, [0x40000022]}) 13:13:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x900]}, 0xb}, 0x7a) [ 326.875457] binder_alloc: binder_alloc_mmap_handler: 13994 20005000-20008000 already mapped failed -16 13:13:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:13:50 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x8008700b) 13:13:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x3000) 13:13:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xa00]}, 0xb}, 0x7a) 13:13:50 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x5, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0xfffffffffffffd65}, 0x1, 0x0, 0x0, 0x40000}, 0x20040044) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0xfe8) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000001c0)) 13:13:50 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x80247008) 13:13:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0x0, 0x3) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:13:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x6a, 0x0, [0x40000022]}) 13:13:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x3f00]}, 0xb}, 0x7a) 13:13:50 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:13:50 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x80247009) 13:13:51 executing program 1: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x5, @rand_addr="2e3d34a759bff81817f05644df6e676a", 0x9}, @in6={0xa, 0x4e24, 0x3, @mcast2, 0x6}, @in6={0xa, 0x4e23, 0x6, @empty, 0x6}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={r0, 0x8000, 0x80010000, 0x78, 0xb9, 0x7}, 0x14) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7fffffff, 0x8000) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r0, 0x6}, &(0x7f0000000200)=0x8) clock_getres(0x5, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000240)=""/45, &(0x7f0000000280)=0x2d) 13:13:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x4000]}, 0xb}, 0x7a) 13:13:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x3f00) 13:13:51 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x80287010) 13:13:51 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x400) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:13:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x6b, 0x0, [0x40000022]}) 13:13:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x80fe]}, 0xb}, 0x7a) 13:13:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x35) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:13:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x6c, 0x0, [0x40000022]}) 13:13:51 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0xc0045878) 13:13:51 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0x101) ioctl$int_in(r0, 0x5424, &(0x7f0000000100)=0x1001) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x4520}) 13:13:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xfe80]}, 0xb}, 0x7a) 13:13:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x4000) 13:13:52 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0xc0045878) 13:13:52 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000240)=[{0x5f2, 0x200000000000, 0x4, 0x7ff, @tick=0x400, {0x2, 0x3}, {0x4, 0x6}, @time=@time}, {0x8, 0x8, 0x5, 0xfffffffffffff001, @time, {0xd9e, 0x1000}, {0x0, 0x3}, @ext={0xa7, &(0x7f0000000140)="e20b3bdfb846f0f544bbd2932202e3639672386b8db0930c1a0f61e6b6042f06ac28dddedd8588b08acacc2df971f646e138d2d1412a0b2193357530ef6810da7de1d6f7914ea05beebb0fa2057f4e620373bb3b8c3b9cc0fb59f64a00fb714c7c743c017a1444a91e06097a7f2be66f4799cc2fdca11c81565ce3e13b949e43c17555bdba0ece78374ae35c5dc27c3d3b9ec2c86088ba24f53f454215c5f76fcc5817bd481126"}}, {0x7, 0x2d5, 0x80000001, 0x1, @time={0x0, 0x1c9c380}, {0x1f, 0x2c0a982c}, {0x400000000, 0x4}, @queue={0xfff, {0x2, 0x6}}}, {0x1, 0x0, 0x4, 0xb24, @tick=0x400, {0x5, 0x51f8}, {0x401, 0x8}, @connect={{0x8000, 0x9}, {0x3, 0xfffffffffffffff8}}}, {0x4, 0x3fff80000000, 0x80000001, 0x8, @tick=0x6, {0x6, 0x5}, {0x2, 0x7}, @time}, {0x9, 0x6, 0xffffffff, 0x8, @tick=0x200, {0xff, 0x9}, {0x80000000}, @raw32={[0x3f, 0x3371, 0xffffffffffff03c2]}}, {0x80000001, 0x8, 0x1, 0x100000001, @tick=0x9, {0x5, 0x3f}, {0x2, 0x6}, @note={0xfffffffffffffff9, 0x7, 0x10000, 0x1000, 0x100}}, {0x9, 0x200, 0x0, 0xfff, @tick=0x4000000000000, {0x5, 0x3}, {0x7fffffff, 0x100}, @ext={0x7f, &(0x7f0000000000)="afca7f53d14f859c85b6fadeb0838a12d6f4debc8623542c208063b22b25871c46623a6161ef4011920a30844acb7ad605019e1053ea5365a0e5d6af7502b8688ad843c5ce4c1fe66c3559b34a600a5538a06bf498dfa1b60c6db264def8f18fcc0171812623334a585bef5a0a5ca9894352f5c04f0e5b2f1101f613c6ea89"}}, {0x9, 0x7ff, 0x7, 0x2, @tick=0x1, {0xcf1, 0x7}, {0xffffffffffffffff, 0xc6c6}, @raw8={"89fce86e24e54fd9376f5ee1"}}, {0x0, 0xfff, 0x4, 0x7f, @time={0x0, 0x989680}, {0x8001, 0x3}, {0x2, 0x600}, @quote={{0x179}, 0xffffffffffff773a, &(0x7f0000000200)={0x7, 0xfcaf, 0xfffffffffffffd3e, 0x7, @time={r1, r2+30000000}, {0x7, 0x6}, {0xfffffffffffffffc, 0xd29}, @time=@tick=0xab48}}}], 0x1e0) 13:13:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x100000]}, 0xb}, 0x7a) 13:13:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x6d, 0x0, [0x40000022]}) 13:13:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x1000000]}, 0xb}, 0x7a) 13:13:52 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0xc0189436) [ 328.769021] IPVS: ftp: loaded support on port[0] = 21 [ 328.929303] chnl_net:caif_netlink_parms(): no params data found [ 328.970485] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.977034] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.985952] device bridge_slave_0 entered promiscuous mode [ 328.994119] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.000571] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.009001] device bridge_slave_1 entered promiscuous mode [ 329.033561] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 329.045361] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 329.074067] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 329.086731] team0: Port device team_slave_0 added [ 329.095608] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 329.107324] team0: Port device team_slave_1 added [ 329.116025] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 329.128014] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 329.203847] device hsr_slave_0 entered promiscuous mode [ 329.241037] device hsr_slave_1 entered promiscuous mode [ 329.281157] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 329.288038] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 329.309575] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 329.360271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.378662] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 329.388491] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 329.394771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.402677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.412533] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 329.418612] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.431030] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 329.438101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.446241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.454071] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.460402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.467820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.478880] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 329.486049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.494041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.501801] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.508158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.517406] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 329.524941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.535776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 329.543076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.555172] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 329.568762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.576826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.586485] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 329.593745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.600884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.608530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.624000] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 329.630903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.638515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.649022] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 329.657842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.665575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.679109] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 329.685598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.698606] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 329.708713] 8021q: adding VLAN 0 to HW filter on device batadv0 13:13:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xfffffffffffff000, 0x422801) mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000, 0x12, r1, 0x12) 13:13:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x4800) 13:13:53 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)=ANY=[@ANYBLOB="03004800279c0b642f59930d5060b6d38df3b88c8caca79c61b0a77326840d4c9303678e8e47fbb5d7ce21b5a0287e69d4ed30dfcf15c0f496a9ed5933daff5fdf215e07ec2180803e8f566c"]) syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x2, 0x2) write$FUSE_WRITE(r0, &(0x7f0000000140)={0x18, 0x0, 0x6, {0x3f}}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)={0x0, @aes256, 0x2, "9f0f0ba4cefd5bdf"}) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) modify_ldt$read(0x0, &(0x7f0000000180)=""/72, 0x48) 13:13:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x2000000]}, 0xb}, 0x7a) 13:13:53 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0xc020660b) 13:13:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x6e, 0x0, [0x40000022]}) [ 329.746297] binder: 14123:14124 ioctl ae45 35 returned -22 [ 329.754465] binder_alloc_mmap_handler: 5 callbacks suppressed [ 329.754480] binder_alloc: binder_alloc_mmap_handler: 14123 20005000-20008000 already mapped failed -16 13:13:53 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x2, 0x4) ioctl$RTC_AIE_ON(r0, 0x7001) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x10001}, 0x4) 13:13:53 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) getsockopt$inet6_tcp_int(r0, 0x6, 0x35, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x80000, 0x0) 13:13:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x3000000]}, 0xb}, 0x7a) 13:13:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x4c00) 13:13:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x4000000]}, 0xb}, 0x7a) 13:13:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x6f, 0x0, [0x40000022]}) [ 329.999741] rtc_cmos 00:00: Alarms can be up to one day in the future 13:13:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x810, r1, 0x80000000003) 13:13:53 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x382400, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:13:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x6000) [ 330.061067] rtc_cmos 00:00: Alarms can be up to one day in the future [ 330.081906] device bridge_slave_1 left promiscuous mode [ 330.089713] bridge0: port 2(bridge_slave_1) entered disabled state 13:13:53 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:13:53 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@broadcast, @in=@broadcast}}, {{@in=@remote}}}, &(0x7f0000000340)=0xe8) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0xffffffffffff7fff, 0x1, 0x4, 0x80002000, {0x0, 0x2710}, {0x7, 0x0, 0x200, 0x0, 0x7, 0x2, "bfca5081"}, 0x0, 0x2, @planes=&(0x7f0000000140)={0xfffffffffffffff9, 0x1, @mem_offset=0x9a, 0x6a29af80}, 0x4}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xd0, &(0x7f0000000000)={{0x5f5e0ff, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x6, 0x4c, 0x6, 0x20}) ioctl$RTC_AIE_ON(r0, 0x7001) connect$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, {0xffffffff80000000, 0x61, 0x5, 0x4, 0x80000000, 0x458}, 0x1}, 0xa) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2080, 0x0) [ 330.183334] device bridge_slave_0 left promiscuous mode [ 330.188820] bridge0: port 1(bridge_slave_0) entered disabled state 13:13:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x5000000]}, 0xb}, 0x7a) 13:13:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x6800) 13:13:53 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400000, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000001c0)={0x10000, 0x0, [0x7f96, 0x39, 0xffffffff, 0x3a, 0x10000, 0xfff, 0x3d5e, 0x9d]}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={r1, 0x10001, 0x80000000}, 0x8) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0xfff) 13:13:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000040)={0x0, @reserved}) [ 330.318738] rtc_cmos 00:00: Alarms can be up to one day in the future 13:13:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x70, 0x0, [0x40000022]}) [ 330.417596] binder_alloc: binder_alloc_mmap_handler: 14190 20005000-20008000 already mapped failed -16 13:13:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x6000000]}, 0xb}, 0x7a) 13:13:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x71, 0x0, [0x40000022]}) [ 330.518859] binder_alloc: binder_alloc_mmap_handler: 14190 20000000-20004000 already mapped failed -16 13:13:54 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0x50, &(0x7f00000001c0)}, 0x10) sendto$rxrpc(r0, &(0x7f0000000000)="f64bb4dfeb3088211a30d9800f9af59240f8a573f8235a9e9ee3d463980c5a8fc9cb41ddcf203cadfa0b31a8c0e2dbe7695a03c5ca787db4e34271a90a4aa04a89f963bb69f41dd86f87e31b6b3ec420210208ff44b77182275fde3302ebfbe7e751da3e05540f925877184eb929b18d", 0x70, 0x44040, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @empty, 0x401}}, 0x24) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:13:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x7000000]}, 0xb}, 0x7a) [ 330.603537] binder_alloc: binder_alloc_mmap_handler: 14190 20005000-20008000 already mapped failed -16 13:13:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x72, 0x0, [0x40000022]}) 13:13:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) getsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x33, r0, 0x0) [ 331.024199] device hsr_slave_1 left promiscuous mode [ 331.066724] device hsr_slave_0 left promiscuous mode [ 331.105910] rtc_cmos 00:00: Alarms can be up to one day in the future [ 331.114515] team0 (unregistering): Port device team_slave_1 removed [ 331.127806] team0 (unregistering): Port device team_slave_0 removed [ 331.138803] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 331.185127] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 331.272056] bond0 (unregistering): Released all slaves 13:13:55 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80000000, 0x412840) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x2c) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) 13:13:55 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000000)=0xfff) [ 331.458009] rtc_cmos 00:00: Alarms can be up to one day in the future [ 331.478155] rtc_cmos 00:00: Alarms can be up to one day in the future 13:13:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x6c00) 13:13:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x8000000]}, 0xb}, 0x7a) 13:13:55 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5a) 13:13:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x73, 0x0, [0x40000022]}) 13:13:55 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000000)={0x2, [0x20, 0x6]}) 13:13:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2000000000000001, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:13:55 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x0, 0xff, 0x2, [], &(0x7f0000000000)=0xffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:13:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={0x7}, 0x8) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:13:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x9000000]}, 0xb}, 0x7a) [ 331.589421] rtc_cmos 00:00: Alarms can be up to one day in the future [ 331.611457] binder_alloc: binder_alloc_mmap_handler: 14251 20005000-20008000 already mapped failed -16 [ 331.681684] rtc_cmos 00:00: Alarms can be up to one day in the future 13:13:55 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000680)='/dev/media#\x00', 0x5, 0x19ffe) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0xc9fa, 0x9}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYBLOB="030937009f54d084e76a54616f0356fe81117fa8c6020230422d7cb458ce32e071a13bd8da6029f266988f5d0936fd4a897a28aad414cabc04e211"], 0x3f) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/87, 0x57}, {&(0x7f00000000c0)=""/10, 0xa}], 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000280)={"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"}) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0xfff) 13:13:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x74, 0x0, [0x40000022]}) 13:13:55 executing program 4: ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) [ 331.865192] binder_alloc: binder_alloc_mmap_handler: 14274 20005000-20008000 already mapped failed -16 [ 331.917462] IPVS: ftp: loaded support on port[0] = 21 [ 332.166427] chnl_net:caif_netlink_parms(): no params data found [ 332.248063] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.262240] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.269999] device bridge_slave_0 entered promiscuous mode [ 332.285855] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.292496] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.300179] device bridge_slave_1 entered promiscuous mode [ 332.335710] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 332.353364] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 332.396528] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 332.404101] team0: Port device team_slave_0 added [ 332.411378] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 332.418766] team0: Port device team_slave_1 added [ 332.424212] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 332.431996] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 332.515218] device hsr_slave_0 entered promiscuous mode [ 332.561090] device hsr_slave_1 entered promiscuous mode [ 332.611305] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 332.618303] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 332.655392] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 332.755564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.786581] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 332.803252] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 332.812398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.819391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.837586] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 332.859415] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.869597] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 332.885766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 332.897437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.909547] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.915967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.933771] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 332.949461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.957492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.973748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.987364] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.993785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.003775] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 333.011963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 333.023595] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 333.030986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 333.053357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 333.061967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 333.069848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 333.082748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.094670] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 333.101214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 333.108324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 333.115478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 333.131339] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 333.142380] 8021q: adding VLAN 0 to HW filter on device batadv0 13:13:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x7400) 13:13:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xa000000]}, 0xb}, 0x7a) 13:13:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_dccp_buf(r1, 0x21, 0xf, &(0x7f00000000c0)=""/80, &(0x7f0000000140)=0x50) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x4) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:13:56 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="030004000000000005000000000000000400000003000000020000000000000000080000000000000500000000000200030000000000000000000000000000000000000000000000020200000000000000000000000000000800000000000000ff00000000000000111500000000000000000000000000004000000000000000860200000000000000000000000000007c6e51c60e381ab0a051049971291ae8308cbad780662e65149c8a6932bb9644fdf2d1eebe44c7e77be1326f692fe020f67e3ea0613c8b89fe892a5ad3eace7a1112fb935944f5d232e0686f34fa71ce5a0d5a"]) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000040)={0xbb2, @remote}) 13:13:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x75, 0x0, [0x40000022]}) 13:13:56 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xfff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xb) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000180)={{0x7, 0x80000001}, 'port0\x00', 0x42, 0x0, 0x6, 0x562, 0x7, 0x9, 0xaa71, 0x0, 0x3, 0x5}) 13:13:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000040)={0x6, 0x4, 0x39, "4c6464d9477ba1f45868bf39b1d27f05ea15fa1aef74cdf6c42deacfac9122813a7ab7341688c6fb3ce0de912da42cef32b0a93bc6ced953e6c80a17", 0x31, "e09c046815eea94977b5c50a1b69751b0dd71a31ddedf20df72b8eb0c1cea1c68d0510f93d0862f566af5c28126c6d5ede30ed2a276aeb270232ea3c", 0x8}) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000180)={0x7, 0x8000}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000001c0)=0x4b, 0x4) ptrace$poke(0x5, r2, &(0x7f0000000140), 0x57d) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000003000/0xb000)=nil, 0xb000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 13:13:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x10000000]}, 0xb}, 0x7a) [ 333.233308] binder_alloc: binder_alloc_mmap_handler: 14294 20005000-20008000 already mapped failed -16 [ 333.269296] rtc_cmos 00:00: Alarms can be up to one day in the future 13:13:57 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000140)="1f7f402fd8937ac8dfc04b2a755c867dbb261e35aaecff441d2ac80ac837f710531238eb8a7375a4b0a3a2ce06d3b4b78dd28254472299c5fbc0a1ffa4f57e37bc0d8c21e73934a187b3c3794023723fb51ddd9700e6e7b1f26e5d27559d943adb7b0d2cac53d14f03cc97166f7e8a9a4d72946ba81a01d21d630fa90784c19933cf458fb023a2c901c366fec862fe7d249e38c0edad1da04afe71ffd27cbc6a07cb8cda134ca5eccbab21", 0xab, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$negate(0xd, r1, 0xfffffffffffffffc, r2) 13:13:57 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x24, 0xd, 0x11, 0x3, 0x1, 0x7, 0x4, 0x23, 0x1}) ioctl$RTC_AIE_ON(r0, 0x7001) [ 333.337887] rtc_cmos 00:00: Alarms can be up to one day in the future [ 333.359062] binder_alloc: binder_alloc_mmap_handler: 14311 20005000-20008000 already mapped failed -16 13:13:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x3f000000]}, 0xb}, 0x7a) 13:13:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x74, 0x0, &(0x7f00000002c0)=[@dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x58, 0x10, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}, @fda={0x66646185, 0x0, 0x3, 0x3e}, @fda={0x66646185, 0x0, 0x4, 0x3f}], &(0x7f0000000240)=[0x28, 0x0]}}, @release, @increfs_done={0x40106308, r1, 0x3}, @decrefs={0x40046307, 0x3}], 0x1f, 0x0, &(0x7f0000000340)="61c5b89eaae98d90d280104297a554320342da7de1cc36322afc52f7307207"}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x400e0001, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}, [0x897, 0x100000000, 0x4, 0x1, 0xfffffffffffffffe, 0x2, 0xff, 0x6, 0xa83, 0x80000001, 0x4, 0x5, 0xffffffff7fffffff, 0x1, 0x5]}, &(0x7f0000000140)=0x100) ioctl$KDSETMODE(r2, 0x4b3a, 0x9) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000200)=r3, 0x94) [ 333.543923] binder: 14330:14331 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 333.552625] rtc_cmos 00:00: Alarms can be up to one day in the future 13:13:57 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x1000) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) 13:13:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x7a00) 13:13:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x76, 0x0, [0x40000022]}) [ 333.593424] binder: 14330:14331 got transaction to invalid handle [ 333.600211] binder: 14330:14331 transaction failed 29201/-22, size 88-16 line 2896 [ 333.608493] rtc_cmos 00:00: Alarms can be up to one day in the future 13:13:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x40000000]}, 0xb}, 0x7a) 13:13:57 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0xfffffffffffffffc, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x20, 0x100}, 0x2) [ 333.701182] binder_alloc: binder_alloc_mmap_handler: 14330 20005000-20008000 already mapped failed -16 13:13:57 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="dcea3aae887046f62b254d34185305f7c735521b8a7b5405dcface55556dde606d81770b1c93b32c3c45d666e928e4d8bd52cd9e83ffbaa50f3b7358efabcf15c3c3691abd6719c1976151f799791bc008bd", 0x52}, {&(0x7f0000000200)="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", 0x48}], 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc\x00', 0x100, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) 13:13:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xf5ffffff]}, 0xb}, 0x7a) 13:13:57 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x4, 0x91000000, 0x3ff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) [ 333.799064] IPVS: ftp: loaded support on port[0] = 21 [ 333.818609] rtc_cmos 00:00: Alarms can be up to one day in the future 13:13:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0xfffffdfd, 0x0, [0x40000022]}) 13:13:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x300000) 13:13:57 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x7fd, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) [ 334.085456] binder_alloc: binder_alloc_mmap_handler: 14370 20005000-20008000 already mapped failed -16 [ 334.202137] binder: 14330:14336 ioctl c018620b 20000280 returned -14 [ 334.210388] binder: 14330:14331 ioctl c0306201 20000380 returned -14 [ 334.225471] binder: undelivered TRANSACTION_ERROR: 29201 [ 334.240817] IPVS: ftp: loaded support on port[0] = 21 13:13:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x90012, r0, 0x4) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:13:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xfe800000]}, 0xb}, 0x7a) 13:13:57 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:13:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x2, [0x40000022]}) 13:13:57 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+'}, 0x28, 0x1) ioctl$RTC_AIE_ON(r0, 0x7001) 13:13:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x400000) [ 334.350870] rtc_cmos 00:00: Alarms can be up to one day in the future 13:13:58 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) ptrace(0x10, r1) getpid() ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:13:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xfffffff5]}, 0xb}, 0x7a) [ 334.412143] rtc_cmos 00:00: Alarms can be up to one day in the future 13:13:58 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x200, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 13:13:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x4, [0x40000022]}) 13:13:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)=0x8, 0x4) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:13:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x10000000000000]}, 0xb}, 0x7a) [ 334.578268] rtc_cmos 00:00: Alarms can be up to one day in the future 13:13:58 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000000)={0x7, 0x3, 0x2b, @remote, 'bond_slave_0\x00'}) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:13:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x1000000) 13:13:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) r1 = semget(0x0, 0x2, 0x102) semctl$GETVAL(r1, 0x7, 0xc, &(0x7f0000000040)=""/209) [ 334.671829] device bridge_slave_1 left promiscuous mode [ 334.677402] bridge0: port 2(bridge_slave_1) entered disabled state 13:13:58 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', r1}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) 13:13:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x100000000000000]}, 0xb}, 0x7a) 13:13:58 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x8) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000180)) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) ioctl$FICLONE(r0, 0x40049409, r0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xffb) [ 334.762037] binder_alloc_mmap_handler: 5 callbacks suppressed [ 334.762053] binder_alloc: binder_alloc_mmap_handler: 14435 20005000-20008000 already mapped failed -16 [ 334.782977] device bridge_slave_0 left promiscuous mode [ 334.788574] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.794197] binder_alloc: binder_alloc_mmap_handler: 14434 20005000-20008000 already mapped failed -16 13:13:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x8, [0x40000022]}) [ 334.835787] rtc_cmos 00:00: Alarms can be up to one day in the future [ 334.869400] rtc_cmos 00:00: Alarms can be up to one day in the future 13:13:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x200000000000000]}, 0xb}, 0x7a) [ 334.926086] binder_alloc: binder_alloc_mmap_handler: 14434 20005000-20008000 already mapped failed -16 13:13:58 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 13:13:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0x0, 0x802) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) mmap$binder(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x8, 0x10010, r1, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) recvfrom$unix(r1, &(0x7f0000000740)=""/4096, 0x1000, 0x2, 0x0, 0x0) 13:13:58 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) lseek(r0, 0x0, 0x3) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x40, r0, &(0x7f0000000140)="6da6bab51ce5f847321fc2ab95082d9b29fcea0782acf610ebc5af2d82175cfbc9d88745bbf8de39e569f50de2cc5bed4a5b42f1dd49f4b5003f9c70da49605553ab33b41978e4a10099617daa7d982b072e9453bca71d69ef678b0a34ca3cc91ed9d1002d60bf9cfc96aafcd2b30c808b8a7cee3608cb98ac16ba9f9e10c5da2750403c421b89b6f4b82a2c23f700574c3b8824ea110cf5ad61e0e144", 0x9d, 0x100, 0x0, 0x0, r0}]) 13:13:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x10, [0x40000022]}) 13:13:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x2000000) [ 335.075997] rtc_cmos 00:00: Alarms can be up to one day in the future 13:13:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x300000000000000]}, 0xb}, 0x7a) 13:13:58 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/'}], 0xa, "1df9a0d02f6b4634bdbcead40bdf36a0214b76e0fd0da1bcbba3d60f65849a6f2ed253680a9bac69ebdf6349e376b6511614cfea824aa475627fce6718ad816f6e39adb4cc5728d12858a7a912b4cc215b187a0904d921e9dfc50377fdee31ba61a219c144403c87a538ae658c12c622c75692588289612795f39637f8cfb6729dc82245c68de6b87956d451e8f3730005d6d4d68dad89054c5ed5e3cbe42d3cada90f4f94cc49996792a174146393985f0be5f278fef646fc92cd6858552fbc883dbf9bf41b6c465e043e0dcb97e37dfdf8320e30f20c6785a8bf5a"}, 0xe9) ioctl$RTC_AIE_ON(r0, 0x7001) [ 335.212075] binder_alloc: binder_alloc_mmap_handler: 14463 20005000-20008000 already mapped failed -16 13:13:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x11, [0x40000022]}) 13:13:58 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000600)={0x0, 0x6, "27f4a62f3bb05e4bd42ca9f1dbd1e1d8fb67a5bbad9742768375b2a5df84af32", 0x3, 0x6, 0x2, 0x5, 0x4, 0x4, 0x9, 0xc8, [0x86, 0x10001, 0x5]}) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) open_by_handle_at(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="73000000f400000013876ecdb4fac3f2c5eaa995230c67681465498c714af221a1f12e801c4b68d85866437d17cebb62036cd190d196c86fdf193729be44336875b16fea5dff1cdbc58161ec492b915a6c7a007d58bac5613a815e8fc0c07be51b569280ed0191ecd78ae9477d6d1b3e1a72eabc6710f0d29860b29b229145d1ee3a10a8fd1f6baa0c54e19109602be9311228af85fbab884eb493db7e2ac4f98fd120e2fad97d09e4a280ac0ef1400edc19af6cc7bc995439df5a1b262c2ae5cad6efb2fb04699b811cbdde8169c7d356491e9f3a8af3c8a1e6e312771a011cdd7819bfd603c8dea395e1ba92b6e4c420fa3c2697e49952751020f69728d1d733d996bc8100ca"], 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000140)={"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"}) [ 335.261512] device hsr_slave_1 left promiscuous mode [ 335.298354] rtc_cmos 00:00: Alarms can be up to one day in the future [ 335.327422] device hsr_slave_0 left promiscuous mode 13:13:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x400000000000000]}, 0xb}, 0x7a) 13:13:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) [ 335.358774] binder_alloc: binder_alloc_mmap_handler: 14483 20005000-20008000 already mapped failed -16 [ 335.395617] rtc_cmos 00:00: Alarms can be up to one day in the future 13:13:59 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffd) r1 = gettid() r2 = getpid() ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000280)=&(0x7f0000000240)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x0, r3, 0x30, 0x1, @in6={0xa, 0x4e22, 0x651e, @mcast1, 0x8}}}, 0xa0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000040)={r0, r0, 0x4}) [ 335.437879] team0 (unregistering): Port device team_slave_1 removed [ 335.463270] binder_alloc: binder_alloc_mmap_handler: 14502 20005000-20008000 already mapped failed -16 13:13:59 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x400800, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') ioctl$RTC_AIE_OFF(r0, 0x7002) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100027bd7000ffdbdf250b0000003c0004000c000700080001000b0000001400010062726f6164636173742d6c696e6b00000c00010073797a30000000000c00010073797a3000000000540007000800020000000000080002000100000008000100040000000c0004000800000000000000080002003f00000008000200020000000c00030000000000000000000800020006000000080001000300000014000200040004000400040008000100a1ea0000"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0x172f, 0x0, 0x0, 0x80}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x8400, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x647, r2}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000380)={0x1, 0x0, 0xc7a46546bb89a3bf, 0x3, {0x0, 0x9, 0x1}}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000003c0)={{0xa, 0x4e22, 0x1ff, @dev={0xfe, 0x80, [], 0xf}, 0xe18}, {0xa, 0x4e20, 0x1, @mcast2, 0xb3e1ac3}, 0x9, [0x1f, 0x10001, 0x1, 0x9, 0x6, 0x4, 0x7, 0xe5]}, 0x5c) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000010}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd0, r1, 0x500, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x121a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x100000001, @mcast1, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000300)={0x100000001, 0xc, 0x4, 0x20000001, {}, {0x3, 0x1, 0x5, 0x8, 0x3, 0xffffffffffffffff, "feca1eee"}, 0xffff, 0x7, @fd=r0, 0x4}) [ 335.494024] team0 (unregistering): Port device team_slave_0 removed [ 335.527171] binder_alloc: binder_alloc_mmap_handler: 14502 20005000-20008000 already mapped failed -16 13:13:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x500000000000000]}, 0xb}, 0x7a) 13:13:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x3000000) [ 335.553615] bond0 (unregistering): Releasing backup interface bond_slave_1 13:13:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x12, [0x40000022]}) 13:13:59 executing program 1: semctl$GETPID(0xffffffffffffffff, 0x2, 0xb, &(0x7f0000000140)=""/4096) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43, 0x9, 0x1, {0x9, 0x0, 0x3, 0x8, 0x1f, 0x101, 0x101, 0x98b, 0xc1}}, 0x43) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:13:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000040)=""/108) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000000c0)=""/30) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000001, 0x1000000000080015, r0, 0xfffffffffffffffe) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 13:13:59 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3) r1 = gettid() perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x3ff, 0x3, 0x7, 0x0, 0x6, 0x4b0, 0x9, 0x7, 0x7, 0x7, 0x0, 0x7, 0xfffffffffffffffb, 0x40, 0x1, 0x7, 0x7fff, 0x7ff, 0x4, 0x6, 0xfff, 0x5, 0x1, 0x101, 0x1c0000000000, 0x80000000, 0x6, 0x6, 0x8, 0x7, 0x2, 0x4, 0xfffffffffffffff9, 0x1, 0x401, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x1, 0x6, 0x6, 0xb, 0x100000001, 0xffffffff, 0x9eb}, r1, 0x0, r0, 0x8) [ 335.671182] bond0 (unregistering): Releasing backup interface bond_slave_0 13:13:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x600000000000000]}, 0xb}, 0x7a) [ 335.761200] binder_alloc: binder_alloc_mmap_handler: 14523 20005000-20008000 already mapped failed -16 13:13:59 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r1 = accept4$tipc(r0, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80000) poll(&(0x7f00000000c0)=[{r0, 0x2}, {r1, 0x138}, {r1, 0xc0a8}, {r1, 0x8}, {r0}, {r0, 0x8}, {r0, 0x400}, {r1, 0x101}], 0x8, 0x7) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) [ 335.823169] binder: 14538:14540 ioctl 4b60 20000040 returned -22 [ 335.862664] rtc_cmos 00:00: Alarms can be up to one day in the future 13:13:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x700000000000000]}, 0xb}, 0x7a) [ 335.879420] binder: 14538:14544 ioctl 4b60 20000040 returned -22 13:13:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x44000, 0x0) write$capi20_data(r1, &(0x7f0000000080)={{0x10, 0x2, 0xff, 0x80, 0xfffffffffffffffa, 0x6}, 0x1e, "b43e0cbe5bf742850fe877ee220bbe322ff90c62cfe959f0bb26db2797b7"}, 0x30) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x43007ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:13:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x17, [0x40000022]}) [ 335.920151] rtc_cmos 00:00: Alarms can be up to one day in the future [ 335.991255] binder_alloc: binder_alloc_mmap_handler: 14523 20005000-20008000 already mapped failed -16 [ 336.018291] bond0 (unregistering): Released all slaves 13:13:59 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) 13:13:59 executing program 4: syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) [ 336.150000] rtc_cmos 00:00: Alarms can be up to one day in the future [ 336.185068] binder_alloc: binder_alloc_mmap_handler: 14560 20005000-20008000 already mapped failed -16 [ 336.195715] rtc_cmos 00:00: Alarms can be up to one day in the future 13:13:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x4000000) 13:13:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x800000000000000]}, 0xb}, 0x7a) 13:13:59 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:13:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x1b, [0x40000022]}) [ 336.226617] IPVS: ftp: loaded support on port[0] = 21 13:13:59 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl$RTC_VL_CLR(r1, 0x7014) 13:14:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x900000000000000]}, 0xb}, 0x7a) 13:14:00 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:14:00 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x188, 0x2f, 0x402, 0x70bd2a, 0x25dfdbff, {0x7}, [@nested={0x174, 0x3e, [@generic="50e84a33e3b0608448207e7c688edfd220929d9f0e4e51c906d43f5085436e5c63d0ebb703890cf88a05c77c9cb167fdaa7c55e057c13746c718e30b161992fadcfb1653a162e459fcf2804d942e65f421d8245d9b1c5db5f52c4239d8469b11c1276ef20be45aae2b7fb3e1e33da4eff22be4a6a737f860cc2bfb2337f6f6ef48cc937e3f6acacffb01e153f74b442000bf8a0cd46dccf30dbed9d299c6b9a7d3b4c35b8b1f17cbeeebb6d68f9376829bf2daff115bb6fcfcd9637224b4d96360943134fb1e03adac9438c7db37dfb4318cc056cd5a3707a7febcdb91fdbf338a0b84a024b6b5f26fd09c56", @generic="d72f7cad8a043b77571e6a0e3a96ff7b0a597d97df21158c1af8366c00886133121ef05936b8b868d3739f641d92352fad5c21bf2532a8eacc4e69e0a5967f833de9fa22e40104889e9c35d10b6a223118ce01053d89c5401a95635249d72bfed02c2a1be36da93d92dec5479930964a32fd97b1e597380b6fa4c54d54ca8fd3428490"]}]}, 0x188}, 0x1, 0x0, 0x0, 0x44}, 0x80) ioctl$RTC_AIE_ON(r0, 0x7001) [ 336.556589] rtc_cmos 00:00: Alarms can be up to one day in the future [ 336.608484] rtc_cmos 00:00: Alarms can be up to one day in the future [ 336.614945] IPVS: ftp: loaded support on port[0] = 21 13:14:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x6, @ipv4={[], [], @empty}, 0x53}], 0x2c) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xa00000000000000]}, 0xb}, 0x7a) 13:14:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x2a, [0x40000022]}) 13:14:00 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000011c0)={0x3, 0x0, [{0x4000, 0x1000, &(0x7f0000000140)=""/4096}, {0x7002, 0x0, &(0x7f0000000080)}, {0x1000, 0x57, &(0x7f0000001140)=""/87}]}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x101400, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0xfff) 13:14:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x5000000) 13:14:00 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x1000000000000000]}, 0xb}, 0x7a) [ 336.790558] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:00 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x71, "b92c6aa6f874685485bc0b49ae2f1b781a31e64c40ad41560a9e67e1044bdc7a066945270e9968167029e8a4acca46ef7c2b69545b8ddb2906e72e73bf69763372f371ce7e6af338b3bd5e846d9aee0249b1ca51ded94b2812afcd25a3fae3b580a5958a7f16e72ee55e1f85f893a2ec8c"}, &(0x7f00000000c0)=0x79) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r1, 0x31}, 0x8) accept4$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14, 0x0) connect$packet(r0, &(0x7f0000000240)={0x11, 0x17, r2, 0x1, 0x3ff}, 0x14) 13:14:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000040)=@can={0x1d, 0x0}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000200)=""/168, 0xa8}], 0x4, &(0x7f0000000300)=""/110, 0x6e}, 0x10000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', r2}) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) [ 336.858304] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x3f00000000000000]}, 0xb}, 0x7a) 13:14:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x2c, [0x40000022]}) 13:14:00 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000000)) 13:14:00 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xfff) 13:14:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x6000000) 13:14:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x4000000000000000]}, 0xb}, 0x7a) 13:14:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)={{0x10b, 0x9, 0x59, 0x1c6, 0x389, 0x7, 0x31d, 0x3}, "594cf6739ee3ee215999a0b518079c579cda234b98e1b3d9786210aa57e0543cf81a02741163bbd83b1b6b880bd6c590c8c8ca3bcd7784d5be2b8fb7f08a1cf380e8a062f82bcdfa5e047195f20254e5d99041a284c848e2553c49be7098bf354bfbebd8d8fb2a5aca143586bb4b5e2f7c001a3835cfdcda1a128da3b09fcd91a53c2b780b1991b356edc5f24165d2299f49bed0f23a190f6af3e5af5004f1b2a53307eb26e4516d016e22945eebed436b575b416af7de0d4fbc78e62ce5381141fc78e0ef", [[], []]}, 0x2e5) [ 337.124834] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xf5ffffff00000000]}, 0xb}, 0x7a) [ 337.207451] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:00 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)={0x60000013}) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:14:00 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) sendto$packet(r0, &(0x7f0000000000)="b2013c140e7a5750db110f952a1e294d208fde127c77d45d6204437ffaa57d0856e5f19c981e7f3618aad456acb8f62234c0b3834577090c338a9eb6f5607363d055bfa26d2dd8a6d2ecf7eb5893f98f7991611c7dc9d30fc1cc856ab48524005dd6baba82647939d56a32c04f8dda7cfb2f11356a4020c2dbea8cfbd177f8aa036d777c7457003b553fcdff42fc254f06622dbe46", 0x95, 0x44, &(0x7f0000000140)={0x11, 0x15, r1, 0x1, 0x1, 0x6, @broadcast}, 0x14) 13:14:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x34, [0x40000022]}) 13:14:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xfe80000000000000]}, 0xb}, 0x7a) 13:14:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80000, 0x0) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="04945f255185966ea35ad6c9a9e359230aaa079ffd8a54652618283358246bf341dfb0959ed9a5229e48776dd2e8d2746805759d2197812d8af47c7def3664c5652e1cb18de0e7458e2146efe65c3e7e28cfca7afcd24f3982b5c0993d09d95ccb455b8e169d21fda7c848cd3b80c7bf3eb136bb3868beb3339bbcd31c117bb8359001cd352c55f346c094c8d7b59ebbe4e005a2d15a611688549ba7c286d31c3baeafe27b546e35c4d512cf3a28c609090b9a1973b8c8e67099c8f80ebe000f508c", 0xc2}, {&(0x7f0000000240)="731335f4e87fe6e4bd14f4767e3a217337c616b602fb94b8b021d1a7cd0da043ef756c60c4448c5d9d2b657686433371a2ca75fd7b064ce88f743fa8a6e70459627ff7cb74e2583da1ccbd57ceec4c5e1dca8bcaec225eb54f741915cbac0f4719456cd7df44", 0x66}, {&(0x7f00000002c0)="99d347c79cbbde4c09c19ab8795dba139613cb72a3dd7f25e35da8915ec1a4fdd0ccdcd557045539ab2d350a4cb04441e91aa72eb6f8eebc3cc56df4a83268bb73cc957f03b913843710fff079121e1a5a", 0x51}, {&(0x7f0000000340)="6103e0db62a269b340525e9c2763e71bee20522ebff7e0d28a71074587f31fa7b7c3b4b6c4408c7f3d1f57bc8d0d1449c14d9693706335aaf88ca21a7368ad2995d196574ed084d337df6a1128f2c79c92", 0x51}], 0x4, 0x2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 337.413480] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000080)={@empty, @loopback, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@deltfilter={0x60, 0x2d, 0x0, 0x70bd2d, 0x25dfdbfd, {0x0, r2, {0x0, 0xffff}, {0xf, 0xfffb}, {0xffff, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x8, 0x5, {0x10001, 0x3c9139f}}, @filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x1c, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x95b, 0x4}}, @TCA_U32_HASH={0x8, 0x2, 0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x4) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xffffffff00000000]}, 0xb}, 0x7a) [ 337.476504] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x7000000) 13:14:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x2) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) 13:14:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x200000, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x4e22, @multicast2}}) 13:14:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x3a, [0x40000022]}) 13:14:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x2]}, 0xb}, 0x7a) 13:14:01 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e22, 0x20, @loopback, 0x8e}}, 0x0, 0x5, 0x8, 0x3f, 0x30}, &(0x7f00000001c0)=0x98) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x80001, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) 13:14:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000000)=""/31) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:14:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x3]}, 0xb}, 0x7a) [ 337.836364] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x3b, [0x40000022]}) 13:14:01 executing program 2: setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000080)=0x4, 0x4) r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) getsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000040), &(0x7f0000000200)=0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=""/102, 0x66, 0xffffffffffffffff}}, 0x10) setsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000240)="ba592eb8df66159da5c330c3168300f77169e095a6c2db46efcfd91b10f2", 0x1e) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) ioctl$RTC_WIE_OFF(r1, 0x7010) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) [ 337.892966] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000140)=""/165) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:14:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000240)={r2, 0x1, 0x6, @broadcast}, 0x10) 13:14:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x20000000) 13:14:01 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x4000, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x800, 0x401) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bond0\x00'}) 13:14:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x4]}, 0xb}, 0x7a) 13:14:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000001640)={0xb, 0x2, 'client1\x00', 0x6, "a9d43c1a0431d884", "df97865ef27e3152ccb7ed11350082c970287710750ed0f675776a697d1914d2", 0x7fff, 0x8c3}) ioctl$int_in(r0, 0x5452, &(0x7f0000001b80)=0xfff) fcntl$setflags(r0, 0x2, 0x1) readv(r0, &(0x7f0000001b00)=[{&(0x7f0000001780)=""/219, 0xdb}, {&(0x7f0000001880)=""/236, 0xec}, {&(0x7f0000001980)=""/185, 0xb9}, {&(0x7f0000001a40)=""/146, 0x92}, {&(0x7f0000000080)=""/61, 0x3d}], 0x5) sendmsg$alg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="f5ddb8501d85a6438ac9ee1ba530c339c8ebb23dbcdfe0bbae82644381704a7638dc64473667b9c4e08e51a50dc0d4613bfba88aeba84f870cd4f6939d64f4c4aeceb383422263dd95270156d3aeb5ac4514a193b9a6d659765e4cfbf08fc2185def829b6209ec97e5313088c2618d9103cc7c0139744e1927c270cd46c4b0c2e922b49603f046f54d197a29301859526fd8", 0x92}, {&(0x7f0000000200)="90182b7d77340c6ad9b21ae4e4ce39550a816b41a754f0e5ca5d82c869c74f8bf6578214fd0edaeff1fd25d78dd4d77d3b707c607f5fd736d1ae2712b878e642849057b81b4948effd79cd74dc12ea061e243f1cf63c8d2021fe82ce4216ef50b4ec8f3df5aa7dac8db485a7de7f4f58a342da627ff5e9e94f4af79f9620a7c68ae56b8817278b470ba6497dfc5c550832dc5cc1fb6af4b8c018f05e3c35c7c72d332da739ccf372cb18a24d8759c55577733caa6a8a4607", 0xb8}, {&(0x7f00000002c0)="70be15cdc9aefa4222270253efa7f57c4901f2ee9c7b418ed2d4185f92035a35bc3a6ea87ec0b17ef5a7d62e588f3d63e90821b6ad66aa5865d706b2b7606bdf79e21070d2c85d3b9e7f81369dfdaed85529eb5c22c99009a590964e667dc1037ce8c5aa9cf77335ac9305f01749b17970e9bcf60e82d6290d85055362e310a5dc9a418b9bbdc8efba80d71b6544e5f8e8604f0b57a5b93a5044bd64bb58aba36345726938d6a2f876fb604eb512e89a14f17819ff133421c66346e096f15fa0", 0xc0}, {&(0x7f0000000380)="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", 0xfa}, {&(0x7f0000000480)="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", 0x1000}], 0x5, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x190, 0x40}, 0x4000) openat$audio(0xffffffffffffff9c, &(0x7f0000001700)='/dev/audio\x00', 0x208080, 0x0) 13:14:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x48, [0x40000022]}) 13:14:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000040)={0x7, 0x2, @start={0xffffffff9e1ef635, 0x1}}) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:01 executing program 4: msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) 13:14:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x5]}, 0xb}, 0x7a) 13:14:02 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x3, 0x2000, 0x78000608, &(0x7f0000ffd000/0x2000)=nil) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000100)) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) keyctl$session_to_parent(0x12) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x7f, &(0x7f00000000c0)=0x505800000000, 0x7) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$RTC_AIE_ON(r2, 0x7001) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x80000001, @remote, 0xe4}, 0x1c) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000080)) 13:14:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x3f000000) 13:14:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x6]}, 0xb}, 0x7a) 13:14:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x800004, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0xf) futimesat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x77359400}}) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x80012, r1, 0x0) 13:14:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x8b, [0x40000022]}) 13:14:02 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x7]}, 0xb}, 0x7a) 13:14:02 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0xfff) 13:14:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x9e, [0x40000022]}) 13:14:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x8]}, 0xb}, 0x7a) 13:14:02 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'system.', '/dev/rtc\x00'}, &(0x7f0000000080)=""/81, 0x51) 13:14:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x10, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x40000000) [ 339.125498] rtc_cmos 00:00: Alarms can be up to one day in the future [ 339.155998] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:02 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@caif=@rfm={0x25, 0x400, "4f6f5b310721febb2beb12c6f338e93d"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="33d03fba7f55f32a26f03bae42fa5fb8498605d697aa05c10d3005d7155c3807868b952feb70e5700fd9210ad70cfa95eee514e4849c06bd29a1e482c6992f32b78773671cf2de640e4f77d0743a2e72be6b4030263569d9124871e8cbb463028e8bb9265d1ca3aebeb3a58027d441ba3c584cd72af6e7c520ff9e0548a40044f5b3d83fe399f2436fa76fd8d32a4d5032afae105f4dfd249547e106bf11733119ada14513cdb91028096724638083f658d4319f81b78e05e6c3f914658b3ee40e37fddea7abcf82b5e9f7df09fbbee9af33803038e6ee2ebcca1a0e2c72fb9bcb4c77b83dab76f3eef3c36e86a5def3", 0xf0}, {&(0x7f00000001c0)="ed9ba8975472405685a108da893947b2c105ce64c8c874082943867b58c4f516628dd1c2f3a7527e62b01e36fc5a7275a17bfa769ab0cae4ca6c51b61eb7084f824a736d8d8c3abe847601dab2c8f3a8e7d9a86a74c3f942cab7fc347362954824e0a5a2742f78d72adb84c4ef5ebf2e1293ca54f435ce27aac16c2c044b2b4e55de27f22d33324b47f4921f537665b3173b8341c2bb50506b783b90311eae5378bff9ecc34f4b9fd1911c6dee8492ba87765b737df327c5ae3cf136031e726527075ba6be98c955fb0a3a1a929d98b60fbb49d67fe381d5", 0xd8}], 0x2, &(0x7f0000000300)=[{0xe0, 0x3a, 0x0, "2a148afbed2857f8ad2f65883ee339b08c98590df4236af0d380ac139d96bf11b230cda8c9c7011a45f57c2a220ca9e2844518beb07d3d924f1cffd5b40bdb06f990edb4c7634f9d0e6cbd51bc60a50dc10ad175c6d0787c1afc7dc319344b2bd3902d3c2757d6b0ad6afc07b0da9f605d45ff892edfa808fbb0831f93f99f9ba35d004d166b65ec6743a150c779d4cfc9656b2619243b3d0d756395c5bd988b61243ba53c06f973b38fe15a39c6c3970207553d2253ef280d388a4a37b342406a64a0d31605a76d47b892156f6a9e5e"}, {0xf0, 0x114, 0x3f, "3485c6650f9162a0f3c48ed798c244aa0964713d4a7dd04cf457eaea70e105a20ff77e81861ddcc3a55f4cbdcf80a3101c40d18362ce1775a82a5dde76e78ce15d45d37a60cc06979c098121f2276b4fd03abc97f20b4a4af77319261cacda9aafc9473f2c243cbc21a0861ade7c60db5ebbe287cdbec222394c41eded89a24ed4ca8c24e0a238cc144867733501c5aa3e1ac7539bc2cc35c90ee142eaa25871f4d29e9c842a36ba314243634524625e686418652a909ce6bdb15d5a03dd993cc7771ce3ced6375b38977feb0510c034323c2c0906118ebc182bbcde64a5ad"}, {0xb8, 0x29, 0x0, "f101e17123df1eb60364a66b8a12391acfdd00b6f6140d128d72eaf1f798cfafedea88d855ac10d36a53ed0fd1fd8fa43ff0dc2d77ea37d83d97bc853f10f09f6abd9d01ab644665cb48cfecfe596cf4c30d9f358e798fd46b8c7154f4eb84642dbc1765ec43ff5f506d99289dbd3c9aba7ce649fa82110e69041292fc4665dd950bd035d7f6b11a924a1d77ef84a655062f2324fc5530067246dd75f516bbd068"}], 0x288}, 0x800) 13:14:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x9]}, 0xb}, 0x7a) 13:14:02 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10080100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ec6c847}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 13:14:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x48000000) [ 339.327747] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xc1, [0x40000022]}) [ 339.374122] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xa]}, 0xb}, 0x7a) 13:14:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) getsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000100)=""/250, &(0x7f0000000280)=0xffffffffffffff8d) 13:14:03 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x4c000000) 13:14:03 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in=@loopback, @in=@initdev}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000000)=0xe8) 13:14:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x10]}, 0xb}, 0x7a) [ 339.597684] rtc_cmos 00:00: Alarms can be up to one day in the future [ 339.598294] binder: 14872:14879 ioctl 6612 0 returned -22 13:14:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x60000000) 13:14:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xc2, [0x40000022]}) [ 339.659402] binder: 14872:14884 ioctl 6612 0 returned -22 13:14:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x7) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:03 executing program 4: pipe(&(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet(r1, &(0x7f0000000080)=""/4096, 0x1000, 0x40002000, &(0x7f0000001080)={0x2, 0x4e20, @local}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/autofs\x00', 0x800, 0x0) write$binfmt_elf32(r0, &(0x7f0000001180)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x8, 0x3, 0x2, 0x6, 0x2, 0x3f, 0x1, 0x230, 0x38, 0xcd, 0x800, 0x8, 0x20, 0x2, 0x2e, 0x4, 0x3}, [{0x6474e551, 0xff, 0x200, 0x0, 0x9, 0x10000, 0x5, 0x7}, {0x7, 0x80, 0x9, 0xdae, 0x0, 0x1, 0x66, 0xe31f}], "38b9b257718af72934e36b63fddea84a44cbe39a06cf16062bfd92b24c4bc51165e8af39e03032a7f02a738e6e6cb5ba45d7c92cdfda7a2f4359bdadb0feb8740b626c925af25bc86f3b716b6d5c1156900dca20749e01ab0bb8d2", [[], [], []]}, 0x3d3) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000001100), 0x4) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1f, 0x8000) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xb) 13:14:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x300]}, 0xb}, 0x7a) 13:14:03 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x30080, 0x0) fsync(r0) 13:14:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x500]}, 0xb}, 0x7a) 13:14:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xcd, [0x40000022]}) [ 339.914541] binder_alloc_mmap_handler: 30 callbacks suppressed [ 339.914556] binder_alloc: binder_alloc_mmap_handler: 14900 20005000-20008000 already mapped failed -16 13:14:03 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f00000000c0)=0x5e) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x1, "c7729e5dcdd23f75"}) 13:14:03 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000000)=0x7fff) ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x600]}, 0xb}, 0x7a) [ 340.129931] rtc_cmos 00:00: Alarms can be up to one day in the future [ 340.189188] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x68000000) 13:14:04 executing program 2: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, &(0x7f00000003c0)=0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000400)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000640)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000740)={{{@in=@loopback, @in6=@empty, 0x4e22, 0x1, 0x4e21, 0xe6ca, 0x0, 0x20, 0x80, 0x87, r1, r2}, {0xfff, 0x2, 0x4, 0x3, 0x7fffffff, 0xfffffffffffffffb, 0x80}, {0x100000000, 0xffffffffffffffff, 0x0, 0x62}, 0xe491, 0x6e6bb2, 0x1, 0x0, 0x1, 0x3}, {{@in6=@ipv4={[], [], @broadcast}, 0x4d5, 0x32}, 0x2, @in6=@remote, 0x0, 0x3, 0x0, 0xfffffffffffffffa, 0x3f, 0x140000000, 0xd2}}, 0xe8) r3 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400240, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={@empty, @ipv4={[], [], @loopback}, @mcast2, 0x4, 0x80000000, 0x0, 0x500, 0x10001, 0x40180000, r5}) getsockname(r4, &(0x7f0000000080)=@nfc, &(0x7f0000000100)=0x80) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) clone(0x20080000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x8, 0x90012, r6, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x2000, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r3, 0x0) ioctl$IMHOLD_L1(r7, 0x80044948, &(0x7f0000000180)=0x39) 13:14:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x700]}, 0xb}, 0x7a) 13:14:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xce, [0x40000022]}) 13:14:04 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x205, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000000)={0x10000, 0x7, 0x5, 0x7, 0x1f, 0x44d8}) 13:14:04 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80400, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x8}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0xfff) 13:14:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x900]}, 0xb}, 0x7a) [ 340.596416] rtc_cmos 00:00: Alarms can be up to one day in the future [ 340.633118] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:04 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000180)=0x4) fcntl$notify(r0, 0x402, 0x80000000) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:14:04 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x59e2c364cc8dc40c, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000000)=""/13) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, r1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x400000, 0x0) 13:14:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xa00]}, 0xb}, 0x7a) 13:14:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xfe, [0x40000022]}) 13:14:04 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000000c0)={{0x1ff, 0x2, 0x8, 0x7ff, 0xfffffffffffffffe, 0x76d}, 0x2}) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000140)={0x7fffffff, "758d7570204a5e34ed681ee87301f3ce8a0c7e5d4d732faef5a54ad34114dd46", 0x930, 0x7, 0x2, 0x5, 0x2}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x800, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000200)=0x8000000000000080, 0xffffff18) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000240)=0xb) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0xfff) [ 341.045922] IPVS: ftp: loaded support on port[0] = 21 [ 341.169441] chnl_net:caif_netlink_parms(): no params data found [ 341.198990] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.205505] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.212903] device bridge_slave_0 entered promiscuous mode [ 341.219783] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.226305] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.233323] device bridge_slave_1 entered promiscuous mode [ 341.251496] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 341.260392] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 341.277041] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 341.284582] team0: Port device team_slave_0 added [ 341.305894] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 341.313488] team0: Port device team_slave_1 added [ 341.318694] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 341.326370] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 341.393915] device hsr_slave_0 entered promiscuous mode [ 341.451098] device hsr_slave_1 entered promiscuous mode [ 341.509858] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 341.517167] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 341.530330] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 341.571396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.580504] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 341.598142] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 341.605391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 341.612818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.622280] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 341.628337] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.637091] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 341.644356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.652563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.660070] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.666440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.675931] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 341.683972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 341.691380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 341.699067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.707161] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.713555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.732462] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 341.739562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 341.749887] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 341.756851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 341.767974] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 341.775513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.776288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.791293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 341.813994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 341.821541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.829269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.839509] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 341.849542] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 341.856609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.864496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.872336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 341.879759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.889846] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 341.896970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 341.922620] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 341.933272] 8021q: adding VLAN 0 to HW filter on device batadv0 13:14:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x6c000000) 13:14:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:05 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x0, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x3, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x4c}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x3f00]}, 0xb}, 0x7a) 13:14:05 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) keyctl$session_to_parent(0x12) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:14:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x10a, [0x40000022]}) [ 341.974783] binder_alloc: binder_alloc_mmap_handler: 14988 20005000-20008000 already mapped failed -16 [ 341.994195] binder_alloc: binder_alloc_mmap_handler: 14988 20005000-20008000 already mapped failed -16 13:14:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x4000]}, 0xb}, 0x7a) 13:14:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) fcntl$setown(r0, 0x8, r1) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)={r3, 0x2}) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x98012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) [ 342.057828] binder_alloc: binder_alloc_mmap_handler: 14997 20005000-20008000 already mapped failed -16 [ 342.072514] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:05 executing program 1: ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0xfff) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x10, &(0x7f0000000000)={&(0x7f0000000140)=""/93, 0x5d, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x10, &(0x7f0000000280)={&(0x7f00000001c0)=""/130, 0x82, 0x0}}, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4) fsetxattr$security_ima(r1, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000340)=ANY=[], 0x0, 0x3) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x117, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000400)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r3}}, 0x18) [ 342.136534] binder_alloc: binder_alloc_mmap_handler: 15005 20005000-20008000 already mapped failed -16 13:14:05 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000001c0)={@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x3, 0x3, 0x1, 0x4}}, {&(0x7f0000000000)=""/165, 0xa5}, &(0x7f00000000c0)}, 0xa0) ioctl$RTC_AIE_ON(r0, 0x7001) [ 342.181986] device bridge_slave_1 left promiscuous mode [ 342.187516] bridge0: port 2(bridge_slave_1) entered disabled state 13:14:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x11e, [0x40000022]}) [ 342.238807] binder: 15015:15017 ioctl c0086420 20000080 returned -22 [ 342.252447] device bridge_slave_0 left promiscuous mode [ 342.275103] bridge0: port 1(bridge_slave_0) entered disabled state 13:14:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x80fe]}, 0xb}, 0x7a) [ 342.283138] rtc_cmos 00:00: Alarms can be up to one day in the future [ 342.294344] binder_alloc: binder_alloc_mmap_handler: 15015 20005000-20008000 already mapped failed -16 [ 342.311775] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x74000000) 13:14:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000180)=0xda) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffff7fff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={r1, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x3f}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r2, r3}) [ 342.372175] binder: 15015:15017 ioctl c0086420 20000080 returned -22 13:14:06 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x10, &(0x7f0000000100)={&(0x7f0000000000)=""/245, 0xf5, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r1, 0x4) 13:14:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xfe80]}, 0xb}, 0x7a) 13:14:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x400000000006bb) ioctl$int_in(r0, 0x4000000005452, &(0x7f0000000100)=0x100000000000101) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x935, 0x100000001, 0x9, 0x1}, {0xad, 0xa6, 0x8}, {0x3d4f, 0x9, 0x8}, {0x1, 0x3, 0xffffffff80000001, 0x10000}]}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={r1}) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)={r2}) 13:14:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=[&(0x7f00000000c0)='\x00', &(0x7f0000000100)='/dev/binder#\x00', &(0x7f0000000140)='/dev/cachefiles\x00', &(0x7f0000000180)='/dev/binder#\x00'], &(0x7f0000000240)=[&(0x7f0000000200)='/dev/binder#\x00'], 0x800) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x140, [0x40000022]}) [ 342.562423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 342.594873] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x100000]}, 0xb}, 0x7a) 13:14:06 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000a00)='/dev/midi#\x00', 0x8, 0x2000) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000a40)={'TPROXY\x00'}, &(0x7f0000000a80)=0x1e) write$FUSE_INTERRUPT(r0, &(0x7f0000000ac0)={0x10, 0x0, 0x4}, 0x10) r1 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x200) recvmsg$kcm(r2, &(0x7f0000000800)={&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000000240)=""/145, 0x91}, {&(0x7f0000000300)=""/234, 0xea}, {&(0x7f0000000400)=""/90, 0x5a}, {&(0x7f0000000480)=""/158, 0x9e}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)=""/31, 0x1f}, {&(0x7f0000000640)=""/89, 0x59}], 0x9, &(0x7f00000006c0)=""/25, 0x19}, 0x20) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r1, 0x0) fcntl$getown(r1, 0x9) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'team_slave_1\x00', 0x0}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) fstat(r1, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000900)={{{@in=@remote, @in6=@rand_addr="0c9bad0eef3842c2bd9e57a46cd60bd5", 0x4e23, 0x0, 0x4e20, 0x80, 0xa, 0xa0, 0x20, 0x6, r4, r5}, {0x7, 0x0, 0x6, 0x100000001, 0x8, 0x83df, 0x9, 0xffffffffffffffc0}, {0xffffffffffff0001, 0x1, 0x20, 0xffffffffffffffe0}, 0x76, 0x0, 0x0, 0x1, 0x3, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0xff}, 0xa, @in6=@rand_addr="6b7d4c7b7d250ce1cc99bd7364a592d0", 0x3507, 0x0, 0x3, 0xa7, 0x2, 0x3, 0x7fff}}, 0xe8) [ 342.643807] binder_alloc: binder_alloc_mmap_handler: 15041 20005000-20008000 already mapped failed -16 13:14:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/5, 0xffffffffffffff33) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0xf6c4556960ae6348) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400, 0x0) 13:14:06 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000)=0x100000000, 0x4) 13:14:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x1000000]}, 0xb}, 0x7a) [ 342.816032] device hsr_slave_1 left promiscuous mode [ 342.865320] binder_alloc: binder_alloc_mmap_handler: 15068 20000000-20004000 already mapped failed -16 [ 342.885855] binder_alloc: binder_alloc_mmap_handler: 15068 20005000-20008000 already mapped failed -16 [ 342.928671] device hsr_slave_0 left promiscuous mode 13:14:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x7a000000) 13:14:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x174, [0x40000022]}) 13:14:06 executing program 4: ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) 13:14:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:14:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x2000000]}, 0xb}, 0x7a) [ 342.990217] team0 (unregistering): Port device team_slave_1 removed 13:14:06 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5517}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, [], 0xc}, 0x2}}, 0x4, 0x8001, 0x3, 0x2, 0x80}, 0x98) 13:14:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x3000000]}, 0xb}, 0x7a) 13:14:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) [ 343.106229] binder_alloc: binder_alloc_mmap_handler: 15097 20005000-20008000 already mapped failed -16 [ 343.111800] team0 (unregistering): Port device team_slave_0 removed 13:14:06 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x175, [0x40000022]}) [ 343.235314] rtc_cmos 00:00: Alarms can be up to one day in the future [ 343.244517] bond0 (unregistering): Releasing backup interface bond_slave_1 13:14:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x400000000000) 13:14:06 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @multicast2}, 0x308, 0x0, 0x0, 0x0, 0xdd, &(0x7f0000000000)='gretap0\x00', 0x8, 0x100000000, 0x5}) sendmsg$unix(r0, &(0x7f0000000040)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000240)="ac6c744713f49ab8c4693d5b437d15a25eae9a0f531464eeb6e28bbd4af6b9c2dfea3c4bbe0461d1666ef5ccceaf3a7d09be990cd068d25763f70ef59dda52aa0e5da274eed155f86220419d361b472eaeac5d66a131dfd8ef82f1276164cbf24b4a051609b0235a934ef04ed54ce4b3e388158b4c45c11d522aea98312e8a821ad822f96cf6191797a0c164acf59191d04f201fe6903b4c101dc6e691d82d2272ea0bf9320a089f89711f0b31e6afdb15efabd059efc314db1853ffb38ce7923ff71536fcc5d7ba5ad618fd430fff88830c1601b6afd21fe36b65e5a8660bea288d8559369357b4dc08621f3bc870f515035373", 0xf4}, {&(0x7f0000000340)="702056fbed0ba105fdb89eea0d2c5c8ef0c0a37f563b60ecf32c5cabd74c224877eb1db9026b9a78fe9aeb6011b9741726519c69f8383a9d87888327994980d1c6eeca12e6ee64ce0b6c1fa9345217d2c54b756fafb6b594fc1d413332669f98edacd1ca1966f41169087b287244b9d5e2f9d0eb2dfd65fe41cd2187f8eeb1567e5ce849e96377e12ec28505124c9bdd959ffcd065d125f3ff01d2edf40fa8999b810002694d803ec945c06f4967f74643b6d0306ab99a49fce8acf463f375bbb7b97d8089eb094d55f31c20108feda1eaef73cf7d113ae1ba958f95eec9f5037592b3a37c015deff373", 0xea}, {&(0x7f0000000440)="481dababfab1904d7ba61f5760d107f592a0b98df5803b056bb9acadb90813aa457ca3e98b245bdc4a8177f3d3dc73409a6b24e1a986b41392faf27046d866e7ed14b9d3025a7833b0af8d1d9b56dbd872", 0x51}, {&(0x7f00000004c0)="f4d6fa02b9b3840a1515069a0cb66c3c36a363526cb316a3af569fccb606e032dfb4bae4bdc3a941689189462600575d57ea2d0e967c977017a38b7c86a8a78bc5848d3623b628dd2b0a6c46fc5083bded52b417989df5eaec5c91d57b1ef3418caef16e3f23cf015d", 0x69}, {&(0x7f0000000540)="c664a0fcbbc39e398594aeec76a226117a47d036c5a7f791cf858c9547eec2fe1317cf4e06a9cb56d6cfbd30de09a76c55500bf415da0c00ab9bbcfc93b88802e4e30c9a155418507193efc0439308dbe1836abbc9c1972125a9c891426ccb3a009a3f42fe148c6dec1a95c19c64d86d9908917f02de230f693213b7eae8126f0672257fb8c283f7229183757d5cd91c97bf339c3e68402199bc9ab5aa20b0116cca09e67256f636cb2aa99a0e698944e4f7268c9331906ff472b1cf419964cc2845f6a1d65f0af645a9b7d69d1469d5686e78427a10ed99a80f7a", 0xdb}, {&(0x7f0000000640)="b444f09ecff9272e7cc571c13eb06153a4b6c7ce177187ff38a37c67a9620a9590e4ec4de33fb6fb5da823d41fec4390d6ad7b5e524dcd86dc042d96fdb7689e156bca4f2ac906b1d5f5f7cec65ab7cee7b1af6a952c3650932eceb7fd80b6e31bf40833e5aaf0e53fdd259f9bbece81ac98aa7d7e8e9b", 0x77}, {&(0x7f00000006c0)="d0b05c3480b3dd70d228c7208cf92c50bc6fa5b13d37cfbfafbb52f8c07f9e7877397089debd75685a3bf280f2d15b35494beda94680d7db6509e7b8325b3e85551285f65f72ae213a426b2e4eceb5bbc8b814fb87b21542b22557ff67ad5c61ef77d762a322", 0x66}], 0x7, 0x0, 0x0, 0x800}, 0x41) 13:14:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x4000000]}, 0xb}, 0x7a) 13:14:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) write(r1, &(0x7f00000000c0)="63a869913c", 0x5) read(r1, &(0x7f0000000040)=""/88, 0x58) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) [ 343.329587] rtc_cmos 00:00: Alarms can be up to one day in the future [ 343.367882] bond0 (unregistering): Releasing backup interface bond_slave_0 13:14:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) dup3(r0, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:14:07 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) 13:14:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2900008}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x301, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000180)=""/178) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x60010, r1, 0x3) 13:14:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x5000000]}, 0xb}, 0x7a) 13:14:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x176, [0x40000022]}) [ 343.525696] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x20) [ 343.611223] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0xffffffffffffc) 13:14:07 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x100, 0x400) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x4, 0x5, 0x81, 0x200, '\x00', 0x1997}, 0x0, 0x38, 0xf0, r1, 0xa, 0x7, 'syz1\x00', &(0x7f0000000080)=['#\x00', 'self^cgroup]ppp0\x00', '/dev/rtc\x00', '\x00', '/dev/rtc\x00', '\x00', 'eth0\x00', '/dev/rtc\x00', '/dev/rtc\x00', 'proc\x00'], 0x43, [], [0x4, 0x0, 0x10000, 0x7fffffff]}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x5, 0x1, [0x5]}, &(0x7f0000000140)=0xa) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x4e23, @loopback}}, 0xf, 0x2, 0x5, 0x8, 0xc1}, 0x98) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) 13:14:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x6000000]}, 0xb}, 0x7a) 13:14:07 executing program 2: socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x80012, 0xffffffffffffffff, 0x0) [ 343.806282] bond0 (unregistering): Released all slaves 13:14:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x8902, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:14:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x179, [0x40000022]}) 13:14:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x7000000]}, 0xb}, 0x7a) 13:14:07 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x10181, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x8001, 0x2) clone(0x2182001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x30000000000000) 13:14:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000040)=0x400) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x8000000]}, 0xb}, 0x7a) 13:14:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x17a, [0x40000022]}) 13:14:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x1, 0xb, 0x2, "1844d2c98a674d90a5a5fd34f0e5f0db64914a576753ed15ddf1685514f41b48", 0x7377775f}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x1, {0x82, 0x38, 0x5, 0x6}}) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000000)={0x9, 0xb73a}) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4) modify_ldt$write2(0x11, &(0x7f0000000040)={0x5, 0x20000800, 0xffffffffffffffff, 0x9, 0x0, 0x1, 0x4, 0x557, 0x3, 0x7}, 0x10) 13:14:07 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 13:14:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 13:14:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x100000000000000) 13:14:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x1007fffc, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000000c0)={0x7ff, 0x100, r1, 0x0, r2, 0x0, 0x5, 0xffffffff80000000}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x401, 0xb37, 0x8000, 0x6, 0xa913, 0x5}) 13:14:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x9000000]}, 0xb}, 0x7a) 13:14:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x17b, [0x40000022]}) 13:14:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) clone(0x8080100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xa000000]}, 0xb}, 0x7a) 13:14:08 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) fcntl$getown(r0, 0x9) ioctl$KDSETLED(r0, 0x4b32, 0x20) [ 344.437700] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x200000000000000) 13:14:08 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000140)=[0x0], 0x5, 0x3, 0x2, 0x1}) [ 344.549363] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x10000000]}, 0xb}, 0x7a) 13:14:08 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x4203, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r1, 0x4}}, 0x10) ioctl$RTC_AIE_ON(r0, 0x7001) perf_event_open(&(0x7f00000001c0)={0x7, 0x70, 0xae, 0x4, 0x4, 0x3, 0x0, 0xffffffff, 0xa0000, 0x8, 0x0, 0xfffffffffffffffb, 0x1, 0x9, 0x3f, 0xe715, 0x80d1, 0x2, 0x80f0, 0x4, 0x6, 0x2, 0x8000, 0x9, 0x2, 0xffff, 0x6, 0x100000000, 0x7ff, 0x7fff, 0x1, 0x437, 0x6, 0x1ff, 0x9, 0x0, 0x11, 0x2, 0x0, 0x100000000, 0x6, @perf_config_ext={0x3, 0x6}, 0x100, 0x4bf1, 0x7, 0xf, 0x80, 0x8, 0x8}, 0x0, 0xefe, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xfff, @mcast1, 0xf05}, r2}}, 0x30) 13:14:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x186, [0x40000022]}) 13:14:08 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:14:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x3f000000]}, 0xb}, 0x7a) 13:14:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsync(r0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x300000000000000) 13:14:08 executing program 4: socketpair(0x2, 0x4, 0x1, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8) accept4$packet(0xffffffffffffff9c, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000540)={@dev, 0x0}, &(0x7f0000000580)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f00000005c0)={@remote, @multicast2, 0x0}, &(0x7f0000000600)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0}, &(0x7f0000000740)=0x14, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000780)={@remote, 0x0}, &(0x7f00000007c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000009c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'tunl0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000b40)={0x0, @multicast2, @multicast2}, &(0x7f0000000b80)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000c00)={@empty, 0x0}, &(0x7f0000000c40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000dc0)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000e00)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000e40)={'vcan0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000ec0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000200}, 0xc, &(0x7f00000015c0)={&(0x7f0000000f00)={0x684, r1, 0x403, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x224, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r5}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x64ce}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r9}, {0x23c, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffffff}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0xb4, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r16}, {0x13c, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r18}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}]}, 0x684}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r19 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xfffffffffffffffd, 0x88902) r20 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x3, 0x0, 0x9, 0x9, 0x50, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x90, &(0x7f0000000280)=""/144, 0x41100, 0x1, [], 0x0, 0x80a08e1b4b491570}, 0x2c7) r21 = openat$vfio(0xffffffffffffff9c, &(0x7f0000004900)='/dev/vfio/vfio\x00', 0x8000, 0x0) setsockopt$SO_RDS_TRANSPORT(r21, 0x114, 0x8, &(0x7f0000004940)=0x1, 0x4) ioctl$TUNSETSTEERINGEBPF(r19, 0x800454e0, &(0x7f0000000240)=r20) quotactl(0x7fffffff, &(0x7f0000000640)='./file0\x00', r4, &(0x7f0000000800)="4d5dd5e6f6c0d49cb4315e8a9ca00575d8a1e182d32c1de63f6786695c1777f5fb00e03a2e95f803e9bafaee71773a38acfbbde83699b8854f87afbefdd1c4ef9289170ec7330b0c2afd6ff519cd37c7a1b67216da879f739ffbd3dc3728a2dcd86353fac2f259983a9513311852eed711f31c7e8694db0968b789bff66d9fd65c59139d7e6c2797c4c24472") r22 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r22, 0x7001) [ 344.937066] binder_alloc_mmap_handler: 13 callbacks suppressed [ 344.937080] binder_alloc: binder_alloc_mmap_handler: 15280 20005000-20008000 already mapped failed -16 13:14:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x40000000]}, 0xb}, 0x7a) 13:14:08 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)={'syz0', "0e209e4f9cd43225188c7a9d010a7e670e356b70deca901b4521438027"}, 0x21) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r3, 0x3c, 0x0, @in6={0xa, 0x4e23, 0x2, @ipv4={[], [], @rand_addr=0x2}, 0x6}}}, 0x90) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80016, r1, 0x0) 13:14:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x187, [0x40000022]}) 13:14:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x400000000000000) 13:14:08 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x450080, 0x1) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000000c0)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x8180, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000000)=0x20001000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000240)={{0x9}, {0x400000000, 0x3}, 0x5, 0x7, 0x9}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f40)={0x0, r0, 0x0, 0xa, &(0x7f0000001f00)='/dev/rtc0\x00', 0xffffffffffffffff}, 0x30) r3 = gettid() r4 = getuid() r5 = getegid() getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000027c0)=@assoc_id=0x0, &(0x7f0000002800)=0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000002840)={r6, @in6={{0xa, 0x4e22, 0x75eb, @rand_addr="f525813e7dc0a0813b5d89dd2d382d74", 0x5}}, 0x0, 0xdd3, 0x7f, 0x3, 0xcf}, 0x98) r7 = fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000020c0)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000021c0)=0xe8) getresgid(&(0x7f0000002200)=0x0, &(0x7f0000002240), &(0x7f0000002280)) fcntl$getownex(r1, 0x10, &(0x7f0000002900)={0x0, 0x0}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002500)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000002780)={&(0x7f00000024c0), 0xc, &(0x7f0000002740)={&(0x7f0000002540)={0x1c4, r11, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x94, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @loopback, 0xfffffffffffffff8}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x103c000000000}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002300)={0x0, 0x0}, &(0x7f0000002340)=0xc) r13 = getgid() sendmsg$netlink(r0, &(0x7f0000002480)={&(0x7f00000002c0)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002080)=[{&(0x7f0000000300)={0x4a4, 0x2d, 0x1, 0x70bd27, 0x8001, "", [@nested={0x188, 0x1e, [@generic="e750491b7a7cf57357994f00d2b73df24073fe6ee0c646c7776158ed4b9eb73e42c0a3cdaeac4baf8c7ff4be616cd64689058e50d5ccfacc27ab8d0ba392e340642ac9cc09787bd9d82b", @typed={0xc, 0x55, @u64=0x50}, @generic="76e7bcc3027d4d61f5e161fbe6200563dcd059e65df61b74eed9ebbffbcd6c41f9e1bcdb2d047396", @generic="454754a1a098c1c3b2f6d69124bb3c459ba13297c20a6d84ef845280", @typed={0x8, 0x78, @u32=0x100}, @typed={0x4, 0x39}, @typed={0x8, 0x6, @ipv4=@remote}, @generic="52b310fa3881b7e7e8a53304ba3d0cd167712e7b382c873de4a7980eb1683aaa6655c71b31c36f4e54fa7b0e6d4d168d063a5f3abec8d67e", @typed={0x8, 0x1e, @u32=0x3}, @generic="cdf95e4b7751bcc75ce55a28ecbe08b068557ed9143288d874746aabd54390dbc5dd87947668be915b20c351cfc889fe3f9c3f66b195e521a2cd83703bd27c371682848334ffd7f62e7e1b2a1b708f9fd4109334df7d711a31e43b29c5c19979155ecc048d5fed2241e574de42cdf17be7ed8b177b43f57a779e70c85cd0763a3ad4de85e0034e3974edafbbb305d3ccbce078d9"]}, @nested={0xe8, 0x94, [@generic="f906cd03bdd93475be49", @typed={0xb4, 0x7, @binary="038d3d983ccbf085ffd7a72ddf509660e4dfabe13d8d23772ccab3c5fe45c632d3e943e8735fc3ade05a35a0ef82d3eec2db45f2484325f6b6242b0d775891a3bb794ac83d00e2b46be4ae394bdf9e06f7ec0d5047d4fda760ae07e4c83b1ddb3a67b6556b9f7434e210fe92f11998c2300d1165291f92609b30cb7b62388f31c6828fbf54a7b72d1cd2050e79ef3fbfad233b44ecb4d3b9564df92d8ada1dd335d28f3320be8f298a5055e69b87"}, @typed={0x14, 0xf, @ipv6=@remote}, @typed={0x10, 0x5, @str='/dev/rtc0\x00'}]}, @generic="a2be75b31436a486e7875db7029b9129d9efb614ac09db8a247dbc052c89db74655a1475c512017c85c076ab268de71ab23a49f1190b30df8e331bd3b464b38f467f8a689ffff4a7e44919c5403e879fe8f3ed7433f137f8a5a35dd7141f4732680f4e6731dd883d416e336dc6df15bc54df08b2aa30efbb7ffeb9d403391bf343a0dc0b0de8ba262418c8e7cbba50b33a129e", @nested={0x140, 0x49, [@typed={0xc, 0x24, @u64=0x5}, @generic="f3dc59dc7a1eb0fa2bc3fe17f8294228996ee75b173e39c979c5956b26bc4e872b2552762ef2852b1b6e7955abf1a833e7188478ea1bf28bd6526e90fc2f748e49ab4d313ab8ab64749c2715a53d843c1bfc3e5e6d35234d5962b4b8dc1c79bbda3e43f591e25bb51ac5cc8aa88954e1283d6d0e61f0723a98e109b28052fbd83048", @typed={0x78, 0x13, @binary="97b6a4b1d5eb4e8094c79916f5a76b1d01cf1890b2f731a50a2d6d167f1a43e9215be88a8d9d0efeda22c8cbfa13f485311a910d93c8241bff25f0c640377a8defea1873f3ebb0ee0a5fd80e80adedc9f0f5bd0213a5a6afbeb0726fbebceb4864bc5493d751b9275a68f1ee309afccf66e925"}, @typed={0x34, 0x48, @str='selinuxsecuritymd5sumcgroupbdev}(\'selfmime_type\x00'}]}, @generic="6adf913625683e64c922656563fb387c318f783280cfe32ea9b18dd546529a14037e8d5d30ccaac5fc37cc35260a67a4cf7c986f29e9985cdc8a2836479b712073085a15fba05c4bf5da73efc6ed75"]}, 0x4a4}, {&(0x7f00000007c0)={0x1708, 0x10, 0x320, 0x70bd27, 0x25dfdbfd, "", [@generic="27cbada27ebfc6598d8461eff22c77fa58860b1e8ad46480e1814d24a12a707f13ea251fc6e8ed903775d5d59d1902ee1fbe976e3c8975139ab5d942b4ff4e66953e00da0663285450f11ab08c7bfc0cc97266c735ec2e4918126eb263d0917d8295d25ef0a11b48dc", @generic="92a273c4c039f23ca951c04ec0e2e4714422ddc3be1c2e5c5d11931aceb863bed506d816bf75bf698468ab6230c4791544a5287ed5c509ba92cb48c303787cb9dc6d4da9cc373817dc0ce542f1b83c2ffef5b836d58ef05c5b087ce1c7d689fb4fc55e69330112", @nested={0x14f8, 0xc, [@generic="46c57e890880cb78b96e301fe16e205d21395a7ed5fb1b509fc6fb120ab643bc65b58a0d026b5f498fc44c179709a642c7ec00ecf4eaa6e7e616a7cf49f0b633c54e141cb7c036fc4719af49b3c5603b27922e28d860cacf56de881e6bfec64f0691d850c3e0bb445a6ab64bb6f3176a2a4f5b9a2bc26a469986ce8e4b149c7b69986c401a9c5f982db29c852c7a071032e15dcac4e314d739d4edc4", @generic="53021657a876b01501195ffe340cf536b107df4a68716b294e655187c6fb9619d21b651843181dd2ee80655da8627c12ad17c2e2ed333ab1341379894256727dc1ae21c7dc66964ad9bf1d9d8f470e841b2fae116d23891495f00fd5acb0d0ef819237c15dd463f40d2fa381ad3dece58d7bd7fca3f147e5949a1fd4931a19eb51ed9a6cdb4db929c4012c9b4265a5ca463bf213bbdaac305b815cf97222fead75be5f5b2ad58d4683710f4cef6bba11293b1f6410bc130b2bd6bb09753629ce151dbb4d36b753ad223a6cb9cad2deb82e", @generic="984a97d4597bcdc33ab4ddbec50da90e21f4b847cc358cb34588a49ba89af46dd1c0fc1dacbccedc0c0440642c2ff9c94b5bfb58e9add6eef0b2dcc269c13ea0cdbc1166ef44cd5e4d9aa234368c0e4273bcc15d44fff2cd83d2c50880995052478c313040a1e336ef25e412e40c0764fd35105f919ca61cfc0717ac6ffe5772872b26792f4a043f7b53062bb3788cbfa488f2417753c516aec36f45aeea16a06cc005276e227348a92c12b2ef480ea24566f5c0624e778d213de7512469c9a6511e3f7165f4002254783a33bba396fa8f9ca182b957d02158dc56", @generic="960f098d87a068f6685d3f868e5657efb9a96c91878cc59a06daeae45787f04f783a2331d2a34de8367fc4", @typed={0x8, 0x18, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="0d95020b9b9f2de2dd5bfc363ed860f6ae102592f6f865c66b1790d2657b8cbf5e21a2ab25cbaec735f559ee792bc9fa9a8f63ae7856c159fa191440b20d5e85e7a86d362708f6cace8119986f40721906906ce3ecc95df33d6862692df545c669d228e04ae79966896ad801d86bae8655ffe9374028928e49394c708ab83292c3f5310fb140a7c9db8c1244dd426013035ab98a92f4a8d37f1cab263ebfc9b22afbd6801829d3dbd7b9e393baa9ff4530", @generic="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", @generic="efe3ad2ef755fc7a9bfb8d41331b79d92c0b2459b89e24fa6596d0d194ae159bb0e4ccad96e3c2fb930ea191c8e5b5b2cd124e92e500843829a2d9fef3f5b6d02704cc482582ea47ba106becb67429c46da5515aab7f25fb80266314a5188851720c505a6700959123b4a7d1e4c707c10f8d1c163582d5ad25b90ef14bf4f42f7870177a878716e64312d7a48eb7917f8dd4b55e64a831e7fece9b83c238c87a96d7ac3e5b8ec8cd84a9ab58669d52ed61831c60b608fbb4a5b1ea2065dbf9d0b1631caedf1e5540b521c667301f329d2e28978e89ef597f0f867c3e", @generic="76337f76eb65849ab83b6b45173c79341ef821ab7649057d04594a7e38a419e5ab2b06825537359513dc6015dc7e1d728a76c9127801b26a7ae01d0e29300c6e5a4877aa5259110ea5a021a4935e4e17e7e20003ab367490a51413dbc998a8749b45af68e5be7e55a37d4f6bb89ff34713cd7f4663af55a22cbdd0af0070c91b082ffb0b3b2b5fe6997f584b67e19ad46cede738ab05d6f6e64aa2104fe60540aeca5c00e6f1c78f588516f2bfd856d62967958251d6ae4cca3d583ec55b3ba29d986c7bb1cf787a5bdb4efb2b2605292154108e664efa18400549c3a3d5c783e98b4c3c954092f2bff4fb"]}, @generic="b8c7f2b26273cb944e35929b8b1f814de769b1aa394488760351bd223991797461ff16a786e8c037df9e1bc8a422d2bbff55ca5f319b67571d50cec2b9a50d5c", @nested={0xb0, 0x6, [@typed={0xc, 0x72, @u64=0xff}, @typed={0x14, 0x52, @str='wlan0\\/\bem0self\x00'}, @generic="d267f555fbdb8a3fadf77148bf2caa7e1da76446bf5fd036f77aae3eb9abd03e274b11e21beaa348145354c3d94f594c2f4f2ae016f6368550b994cf8fc7d289f4ec34d8349bb80dc118eee5e67600b9fa5e14e6b58e27fd2d33dda7d3c1f507dba945f53a85ff1042e9c62730f473fa823e63a144af569b2ea46af566e38b3bf5ad1ba76adc899277a76371"]}, @generic="187803edd7e034e73f63c9dcfb53ab3478a57230ae39de66f6866097a930a7ea508bbdbc53b23ddb95ed53c5434e00ad22c473fc896f0eedb64d7c91517052d2"]}, 0x1708}, {&(0x7f0000001f80)={0xd8, 0x12, 0xa, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x54, 0x7, [@typed={0x10, 0x42, @str='/dev/rtc0\x00'}, @generic="6d35941e1e8ba1573ba4d6519f9a6ee187b6462f4ca97e554087de3283e36432e947ff0af2aff02326b05c367541ef8a45ecc0bfa6aed5e7f5fa6dd4e3"]}, @generic="dd18855464ca431f6de79dd0b5cd81a936fdbd2afead633b197e086617b4d9fca2f57d74968cfd76eeb3d78aa9", @typed={0x14, 0x4b, @ipv6=@loopback}, @typed={0x8, 0xd, @pid=r2}, @nested={0x20, 0x72, [@typed={0x14, 0x8c, @ipv6=@dev={0xfe, 0x80, [], 0x2b}}, @typed={0x8, 0x25, @ipv4=@remote}]}, @typed={0x8, 0x41, @u32=0x6}]}, 0xd8}], 0x3, &(0x7f0000002380)=[@rights={0x20, 0x1, 0x1, [r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x20, 0x1, 0x1, [r1, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r12, r13}, @rights={0x18, 0x1, 0x1, [r1]}], 0xd8, 0x4000}, 0x880) 13:14:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xf5ffffff]}, 0xb}, 0x7a) [ 345.119266] binder_alloc: binder_alloc_mmap_handler: 15296 20000000-20004000 already mapped failed -16 [ 345.151916] binder_alloc: binder_alloc_mmap_handler: 15307 20005000-20008000 already mapped failed -16 13:14:08 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) acct(0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4208}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x10c, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xa0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc2f1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd7}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x64a6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x50}, 0x94) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) 13:14:08 executing program 4: r0 = accept$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) fcntl$setstatus(r0, 0x4, 0x400) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000080)={0x1, 0x7f, 0x3}) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) 13:14:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x198, [0x40000022]}) 13:14:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xfe800000]}, 0xb}, 0x7a) 13:14:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000040)='stat\x00') openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xe9) 13:14:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xfffffff5]}, 0xb}, 0x7a) 13:14:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:09 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x2200, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}]}) 13:14:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x500000000000000) 13:14:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000140)) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) [ 345.607087] binder_alloc: binder_alloc_mmap_handler: 15356 20005000-20008000 already mapped failed -16 [ 345.637277] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x10000000000000]}, 0xb}, 0x7a) 13:14:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x199, [0x40000022]}) [ 345.670130] binder_alloc: binder_alloc_mmap_handler: 15354 20005000-20008000 already mapped failed -16 13:14:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) ftruncate(r0, 0x3d) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000000)=0xf002) 13:14:09 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x1, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x9, 0x7f, 0x5, 0x20, 0x1}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r1, 0x3, 0x10, 0xfff, 0x9}, &(0x7f00000001c0)=0x18) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x600, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200)={0x6}, 0x1) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000)={0xa, 0x5, 0x100000, 0xfffffffffffffffb}, 0xa) 13:14:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000000)={0xc61, 0x2, 0x2, 0x5, 0x6}) 13:14:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x100000000000000]}, 0xb}, 0x7a) 13:14:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x600000000000000) [ 345.896232] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000100)=0x1) 13:14:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x1a0, [0x40000022]}) 13:14:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x200000000000000]}, 0xb}, 0x7a) [ 345.980171] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:09 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@mcast1, @in6=@local, 0x4e23, 0x0, 0x4e20, 0xfff, 0xa, 0x20, 0x80, 0xbb, r1, r2}, {0x2, 0x0, 0x5, 0x6aac, 0x1000, 0xf, 0x2, 0x6}, {0x1, 0x8, 0x200, 0xfa7}, 0x407a, 0x0, 0x3, 0x0, 0x1, 0x2}, {{@in6=@remote, 0x4d4, 0x3b}, 0x2, @in=@remote, 0x0, 0x0, 0x0, 0x2, 0x8001, 0xe408, 0xff}}, 0xe8) 13:14:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000140)=""/220) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) write$P9_RLINK(r0, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) ioctl$KDSETLED(r0, 0x4b32, 0xfffffffffffffffe) 13:14:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x300000000000000]}, 0xb}, 0x7a) [ 346.178180] rtc_cmos 00:00: Alarms can be up to one day in the future [ 346.239514] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0xa87baaa2f120ad62) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x6, 0x200200) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000000000/0x4000)=nil, 0x4000}, &(0x7f00000001c0)=0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x5}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001180)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000001140)=0x1008) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000100)=0x800, 0x4) 13:14:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) getpgrp(r2) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x700000000000000) 13:14:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x1c0, [0x40000022]}) 13:14:10 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10, 0x800) fstatfs(r1, &(0x7f0000000100)) 13:14:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x400000000000000]}, 0xb}, 0x7a) 13:14:10 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0x50, "a61fc793fa61eea1806164e19d31b2115607767f5d9c5ba6ef4cf2b0da72b1fd32aa1f8324d64d9652693c025187ce1ee53153cfd3b7c535c8c0cd5cc2c6144cf13afb3a49c1772174c5754166b7cc4f"}, &(0x7f0000000200)=0x58) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240)={r1, 0x42, "132c16d231d74e3cea302570f7a84861e2dc7331b522b7b76799e17478fc3db9ba92c8f626e52c460fe9eba5d56baa86b3456053e96f36f425ce8437c4f25ccc2b66"}, &(0x7f00000002c0)=0x4a) syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x3, 0x40000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x80}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r2, 0x4) 13:14:10 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60, 0x0, 0x6, {{0x800, 0x0, 0x6, 0x6, 0x0, 0x7ff, 0xfffffffffffffffc, 0x80000001}}}, 0x60) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x100) [ 346.455828] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x500000000000000]}, 0xb}, 0x7a) [ 346.509235] binder_alloc: binder_alloc_mmap_handler: 15440 20005000-20008000 already mapped failed -16 [ 346.527964] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x2000000000000000) 13:14:10 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000040)=0x1) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x1d9, [0x40000022]}) 13:14:10 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)=ANY=[@ANYBLOB="010033000630ec421bcd293530fdd3abab99ecac9bf39e23a98972bee21396cdd22bbb2a2e0a9e2a2714f1149f08e6ff33e3543b8289c5"]) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0xfffffffffffffff9) socket$caif_seqpacket(0x25, 0x5, 0x5) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x1f) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:14:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x600000000000000]}, 0xb}, 0x7a) [ 346.750929] rtc_cmos 00:00: Alarms can be up to one day in the future [ 346.805383] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:10 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) semget$private(0x0, 0x2, 0xd0) ioctl$int_in(r0, 0x1000005452, &(0x7f0000000100)=0x200000001c92) 13:14:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x700000000000000]}, 0xb}, 0x7a) 13:14:10 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x9) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000)) 13:14:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x1db, [0x40000022]}) 13:14:10 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xfff) 13:14:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x800000000000000]}, 0xb}, 0x7a) [ 347.069935] rtc_cmos 00:00: Alarms can be up to one day in the future [ 347.129104] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x3f00000000000000) 13:14:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x900000000000000]}, 0xb}, 0x7a) 13:14:11 executing program 1: setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:14:11 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x1de, [0x40000022]}) 13:14:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x724, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x2000c080) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) [ 347.905753] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xa00000000000000]}, 0xb}, 0x7a) 13:14:11 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfff) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="ad7602867bc0", 0x6}, {&(0x7f00000000c0)="9fdd410583d91528", 0x8}], 0x2) 13:14:11 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f00000000c0)={0x80, &(0x7f0000000040)=""/128}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x401, 0x40) 13:14:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x1000000000000000]}, 0xb}, 0x7a) 13:14:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x2ff, [0x40000022]}) 13:14:11 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5552, &(0x7f0000000100)=0xfff) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x800, 0x0) [ 348.115082] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:11 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) r1 = pkey_alloc(0x0, 0x1) pkey_free(r1) [ 348.330317] IPVS: ftp: loaded support on port[0] = 21 [ 348.375722] IPVS: ftp: loaded support on port[0] = 21 [ 348.379765] rtc_cmos 00:00: Alarms can be up to one day in the future [ 348.412992] rtc_cmos 00:00: Alarms can be up to one day in the future [ 348.656415] chnl_net:caif_netlink_parms(): no params data found [ 348.673292] chnl_net:caif_netlink_parms(): no params data found [ 348.753616] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.760057] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.767711] device bridge_slave_0 entered promiscuous mode [ 348.775418] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.785091] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.796701] device bridge_slave_0 entered promiscuous mode [ 348.808360] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.815426] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.827081] device bridge_slave_1 entered promiscuous mode [ 348.838206] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.848908] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.856358] device bridge_slave_1 entered promiscuous mode [ 348.885429] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 348.901696] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 348.921117] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 348.931196] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 348.944346] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 348.952121] team0: Port device team_slave_0 added [ 348.962746] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 348.970123] team0: Port device team_slave_1 added [ 348.982567] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 348.989712] team0: Port device team_slave_0 added [ 348.995494] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 349.003077] team0: Port device team_slave_1 added [ 349.008369] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 349.019299] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 349.026859] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 349.034282] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 349.102376] device hsr_slave_0 entered promiscuous mode [ 349.142050] device hsr_slave_1 entered promiscuous mode [ 349.207226] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 349.220019] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 349.273890] device hsr_slave_0 entered promiscuous mode [ 349.341390] device hsr_slave_1 entered promiscuous mode [ 349.391444] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 349.398409] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 349.435978] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.442357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.449018] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.455409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.468504] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.474862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.481544] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.487885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.573565] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 349.579625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.601233] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 349.607302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.616292] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 349.625619] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 349.638351] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 349.644511] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.653135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 349.660495] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.667622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 349.676267] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.683961] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.691173] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.704339] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 349.713278] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 349.737930] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 349.744747] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.753776] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 349.760965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 349.768968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.776871] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.783273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.795130] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 349.803328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.803795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.818598] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.825034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.835733] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 349.844433] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 349.851894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 349.859820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 349.867937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.875684] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.882081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.891869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 349.905321] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 349.920127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 349.928336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.936971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.945457] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.951879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.959968] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 349.968747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 349.976583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.986041] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 350.008639] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 350.016259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 350.026385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 350.037324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 350.044960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 350.055209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 350.063043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 350.070425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 350.094128] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 350.103899] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 350.111248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 350.118839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 350.127049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 350.147847] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 350.155480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 350.167669] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 350.178143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 350.186049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 350.194767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 350.209857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 350.229336] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 350.236915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 350.245339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 350.255974] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 350.268073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.275247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 350.283392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 350.292149] device bridge_slave_1 left promiscuous mode [ 350.297583] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.331807] device bridge_slave_0 left promiscuous mode [ 350.337236] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.393113] device bridge_slave_1 left promiscuous mode [ 350.398587] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.442873] device bridge_slave_0 left promiscuous mode [ 350.448334] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.605667] device hsr_slave_1 left promiscuous mode [ 350.676574] device hsr_slave_0 left promiscuous mode [ 350.736176] team0 (unregistering): Port device team_slave_1 removed [ 350.747191] team0 (unregistering): Port device team_slave_0 removed [ 350.760465] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 350.818008] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 350.900512] bond0 (unregistering): Released all slaves [ 351.024325] device hsr_slave_1 left promiscuous mode [ 351.097540] device hsr_slave_0 left promiscuous mode [ 351.156194] team0 (unregistering): Port device team_slave_1 removed [ 351.167295] team0 (unregistering): Port device team_slave_0 removed [ 351.178130] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 351.218177] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 351.298981] bond0 (unregistering): Released all slaves [ 351.412042] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 351.421168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 351.428715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.441598] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 351.447628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 351.479069] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 351.499900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.501802] binder_alloc: binder_alloc_mmap_handler: 15546 20005000-20008000 already mapped failed -16 13:14:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x4000000000000000) 13:14:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x3f00000000000000]}, 0xb}, 0x7a) 13:14:15 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x8, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:14:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x47f, [0x40000022]}) 13:14:15 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x3, 0xa75b907615e64ecc, 0x0, 0xffff, 0x3, @stepwise={{0x0, 0x6}, {0xfffffffffffffffa, 0x4}, {0x200, 0x7}}}) fanotify_mark(r0, 0x1, 0x40000000, r0, &(0x7f0000000040)='./file0\x00') ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x40, 0x2}) fcntl$dupfd(r0, 0x0, r0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x400002) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) [ 351.613366] binder_alloc: binder_alloc_mmap_handler: 15552 20005000-20008000 already mapped failed -16 13:14:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x4000000000000000]}, 0xb}, 0x7a) 13:14:15 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000100)=0x401) [ 351.683789] rtc_cmos 00:00: Alarms can be up to one day in the future [ 351.732946] binder_alloc: binder_alloc_mmap_handler: 15561 20005000-20008000 already mapped failed -16 [ 351.750818] rtc_cmos 00:00: Alarms can be up to one day in the future [ 351.762318] binder_alloc: binder_alloc_mmap_handler: 15569 20005000-20008000 already mapped failed -16 13:14:15 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) write$eventfd(r0, &(0x7f0000000000)=0x800, 0x8) 13:14:15 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000040)=0x4ffff) 13:14:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xf5ffffff00000000]}, 0xb}, 0x7a) [ 351.787927] binder_alloc: binder_alloc_mmap_handler: 15569 20000000-20004000 already mapped failed -16 [ 351.816382] binder_alloc: binder_alloc_mmap_handler: 15569 20005000-20008000 already mapped failed -16 13:14:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x480, [0x40000022]}) [ 351.921475] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x4800000000000000) 13:14:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x6ad, 0x6}) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) 13:14:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8001, 0x80002) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0xfff) getpeername$packet(r1, &(0x7f0000000bc0)={0x11, 0x0, 0x0}, &(0x7f0000000c00)=0x14) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000140), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000d00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000290026062abd7000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="0c000e000100f2ff0f00e3ff080005004c03000008000500ff81000008000100647272000c0002000800010003000000080005000906000008000500dd070000907e59eefc76e99f919d0a6397344d9e9f7abd60d0f90d77719cf32722d313a08540371b07316a115a5f4dec"], 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x80) 13:14:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xfe80000000000000]}, 0xb}, 0x7a) [ 351.986398] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:15 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xffffffff00000000]}, 0xb}, 0x7a) 13:14:15 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x4000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0xfffffd80, &(0x7f00000002c0)}, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0x73) openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x7e, 0x0) [ 352.101358] binder_alloc: binder_alloc_mmap_handler: 15605 20005000-20008000 already mapped failed -16 13:14:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x1) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x200000a, 0x400084016, r0, 0x0) 13:14:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x491, [0x40000022]}) [ 352.142440] binder_alloc: binder_alloc_mmap_handler: 15606 20005000-20008000 already mapped failed -16 [ 352.166789] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2]}, 0xb}, 0x7a) 13:14:15 executing program 2: r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_security(0x11, r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001400)={0x0, 0x4c00007e, &(0x7f00000013c0)={&(0x7f0000000100)={0x14, 0x17, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') write$P9_RCREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) [ 352.251598] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:15 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfff) 13:14:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x4c00000000000000) 13:14:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3]}, 0xb}, 0x7a) 13:14:16 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x4d0, [0x40000022]}) 13:14:16 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)="994833db9ccefb0f8c4882e4e47b2830a9c1c16af729509f3fea33ec2660a9", 0x1f, 0xfffffffffffffffb) keyctl$describe(0x6, r1, &(0x7f0000000140)=""/11, 0xb) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000180)) 13:14:16 executing program 2: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x18) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x100, 0x0, 0x24}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:14:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4]}, 0xb}, 0x7a) [ 352.586898] rtc_cmos 00:00: Alarms can be up to one day in the future [ 352.637850] binder_alloc: binder_alloc_mmap_handler: 15656 20005000-20008000 already mapped failed -16 13:14:16 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x20, 0x8, 0x1000, 0x2, 0x6e3}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={r1, 0x37, 0xa12}, 0x8) 13:14:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x560, [0x40000022]}) 13:14:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x5]}, 0xb}, 0x7a) 13:14:16 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/19, 0x13}, {&(0x7f0000000140)=""/223, 0xdf}, {&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/143, 0x8f}, {&(0x7f00000005c0)=""/218, 0xda}, {&(0x7f00000006c0)=""/113, 0x71}], 0x9, &(0x7f0000000800)=""/199, 0xc7}, 0x40002002) getsockopt$inet6_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000940)=""/94, &(0x7f00000009c0)=0x5e) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0xfff) 13:14:16 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') setns(r0, 0x0) 13:14:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x6000000000000000) 13:14:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x6]}, 0xb}, 0x7a) [ 352.863456] rtc_cmos 00:00: Alarms can be up to one day in the future [ 352.925367] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:16 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x6, 0x4) ioctl$VT_DISALLOCATE(r0, 0x5608) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xfff) 13:14:16 executing program 2: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x8, 0xffffffffffffffff) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 352.978474] binder_alloc: binder_alloc_mmap_handler: 15690 20005000-20008000 already mapped failed -16 13:14:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x7]}, 0xb}, 0x7a) 13:14:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x561, [0x40000022]}) 13:14:16 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x8f}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0xdb, 0x10}, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x48000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xa4, 0x8, 0x7, 0x930, 0x70bd2c, 0x25dfdbfd, {0x2}, [@typed={0x80, 0x55, @binary="dd50d7d390ed23f6df657e3e12126bb5290dc395815cc58ad18daf4a80d4b099d69ddf59003c355fd95ad994cf7b5f08d97ec00effc426a445de05707771e8c767027c53bf48c98dc447ced8003617225dced08c1c58d9f5c18bd3c963017a47408b63c410a566935def7d48ccf096484fde30265d92efe3b45290b4"}, @typed={0x10, 0x41, @str='/dev/rtc\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x10) 13:14:16 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000340)=""/6) [ 353.142963] rtc_cmos 00:00: Alarms can be up to one day in the future [ 353.175334] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x8]}, 0xb}, 0x7a) 13:14:16 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400000, 0x0) 13:14:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x570, [0x40000022]}) 13:14:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x6800000000000000) 13:14:17 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbff, 0x81}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x3, 0x1}) [ 353.366324] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x9]}, 0xb}, 0x7a) 13:14:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x282, 0x0) [ 353.429032] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:17 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000011c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f00000012c0)=0xe8) r3 = getegid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001300)=0x0) stat(&(0x7f0000001340)='./file0\x00', &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001400)=0x0, &(0x7f0000001440), &(0x7f0000001480)) r7 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000014c0)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000015c0)=0xe8) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000018c0)=0x7, 0x4) getgroups(0x6, &(0x7f0000001600)=[0xee00, 0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0xee01]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001640)={0x0}, &(0x7f0000001680)=0xc) stat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getgid() sendmsg$unix(r0, &(0x7f0000001880)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)="ec01dff4f8e28cdb9653be0f8fcca065242745f0baf00e65eca5a8511568b555cf3f06d993590aebac59ac0723b475aa", 0x30}, {&(0x7f00000000c0)="d60116a428dee1412041b585a428ff79803679ef430542618009cfa746733611b4df", 0x22}, {&(0x7f00000001c0)="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", 0x1000}], 0x3, &(0x7f0000001780)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}], 0xe8, 0x91}, 0x20000000) 13:14:17 executing program 2: 13:14:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x571, [0x40000022]}) 13:14:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x6c00000000000000) 13:14:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xa]}, 0xb}, 0x7a) [ 353.619707] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:17 executing program 2: [ 353.688014] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x10]}, 0xb}, 0x7a) 13:14:17 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x100) 13:14:17 executing program 2: 13:14:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x572, [0x40000022]}) 13:14:17 executing program 1: 13:14:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x300]}, 0xb}, 0x7a) 13:14:17 executing program 2: [ 353.951263] rtc_cmos 00:00: Alarms can be up to one day in the future [ 354.017499] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x7400000000000000) 13:14:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) getuid() fstat(0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f00000001c0)) ioprio_set$uid(0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) readlink(0x0, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket(0x0, 0x8000a, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000000)=[{}]}) syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{}]}, 0x8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:14:17 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffa, 0x101002) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x4, 0x0, "45953ede46fdd5169347fcbebd131ee7e218a60ac6bc394e35b5a2734fb973e9ef95a10dae4a8d51be96b788c798eb01acee09443f47a50175a9253f9ade22fae9e4efafb042e25eaddc4202ba1053ff"}, 0xd8) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x8, 0x3ff}) fstat(r0, &(0x7f00000001c0)) 13:14:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x500]}, 0xb}, 0x7a) 13:14:17 executing program 2: 13:14:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x580, [0x40000022]}) [ 354.224845] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x600]}, 0xb}, 0x7a) 13:14:17 executing program 2: [ 354.293997] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:18 executing program 2: 13:14:18 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x480, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x700]}, 0xb}, 0x7a) 13:14:18 executing program 1: 13:14:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x7a00000000000000) 13:14:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x587, [0x40000022]}) [ 354.544335] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:18 executing program 2: 13:14:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x900]}, 0xb}, 0x7a) 13:14:18 executing program 1: 13:14:18 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:18 executing program 2: 13:14:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x6e0, [0x40000022]}) [ 354.769521] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:18 executing program 1: 13:14:18 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x2) ioctl$RTC_AIE_ON(r0, 0x7001) fremovexattr(r0, &(0x7f0000000000)=@random={'system.', ']ppp1trusted\x00'}) 13:14:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xa00]}, 0xb}, 0x7a) 13:14:18 executing program 2: 13:14:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x8000000000000000) [ 354.969257] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:18 executing program 1: [ 355.016922] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:18 executing program 2: 13:14:18 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x24282, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9) ioctl$RTC_AIE_ON(r0, 0x7001) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000000)=""/198, &(0x7f0000000100)=0xc6) 13:14:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3f00]}, 0xb}, 0x7a) 13:14:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xa01, [0x40000022]}) 13:14:18 executing program 1: 13:14:18 executing program 2: 13:14:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0xfcffffffffff0f00) 13:14:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4000]}, 0xb}, 0x7a) 13:14:19 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x28d40, 0x0) 13:14:19 executing program 1: 13:14:19 executing program 2: 13:14:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x80fe]}, 0xb}, 0x7a) 13:14:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xbff, [0x40000022]}) [ 355.492982] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:19 executing program 2: 13:14:19 executing program 1: [ 355.591799] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfe80]}, 0xb}, 0x7a) 13:14:19 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x102) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0xffffffffffffffcd, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x1) 13:14:19 executing program 1: 13:14:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x8) r2 = mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1, 0xc0010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x94, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="106308400000000008631040", @ANYRES64=r2, @ANYBLOB="020000000000000011634840030000000000000003000000000000000000000010000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYBLOB="03000000000000000c6300000e630c400000000001000000000000000d6300000f630c40040000000200000000000000"], 0x54, 0x0, &(0x7f0000000180)="492c45af5cf95c60c5c8dda341729c4d9ee1cb04b16ec9efebc18879e85e5b452f9cb26ab30644603b0d260e698382bdba01686e092ae973e24ef422e4acf86dc7daf31837ae74e0aab9924315c2dec214b6d1aa"}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xd90, [0x40000022]}) 13:14:19 executing program 2: 13:14:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x100000]}, 0xb}, 0x7a) [ 355.902110] binder: 15933:15940 BC_DEAD_BINDER_DONE 4010630800000000 not found 13:14:19 executing program 1: 13:14:19 executing program 4: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="a6000000290100060000005900000000000000000000008002000000000000000607002e2f66696c65302003000000040000000000000063be0000a7bccfa6872a794b2f66696c65302300000000050000000000000001800000000000000207002e2f6669531e6c653084030000ea08000000e400000002000000000000000107002e2f66696c65308c0400000007000000000000000800000007000000000000002f66696c6530"], 0xa6) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x408000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x4b, "e8c2f8b5c0fef8f299632790d83c29f6ba613d46aeaf059b31b48915b96ce7f4b389e1284056495816c65e981a4364e885f3f74ca6b5a5aa66cc3e50f11a470527f603f1dec30a9112eb83"}, &(0x7f0000000040)=0x53) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xbe}}}, &(0x7f0000000140)=0x84) ioctl$RTC_AIE_ON(r0, 0x7001) [ 355.973244] binder: 15933:15940 unknown command -1 13:14:19 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0//ile0\x00', 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 13:14:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1000000]}, 0xb}, 0x7a) 13:14:19 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_ALM_READ(r0, 0x80247008, 0x0) [ 356.034475] binder: 15933:15940 ioctl c0306201 20000200 returned -22 [ 356.061085] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:19 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) socket$kcm(0x29, 0x5, 0x0) io_setup(0xffffffff, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) io_getevents(r1, 0x1, 0x4, &(0x7f00000001c0)=[{}, {}, {}, {}], &(0x7f0000000240)={r2, r3+10000000}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)={0x0, 0x8, [0x0, 0x80000001]}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x2, 0xfffffffffffffff7, 0x2, 'queue0\x00', 0x2}) [ 356.146132] binder: 15933:15947 ioctl c0306201 20000200 returned -14 13:14:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0xa, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{}, {}, {}]}, 0x108) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) 13:14:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xda0, [0x40000022]}) [ 356.323190] kernel msg: ebtables bug: please report to author: Valid hook without chain [ 356.332728] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:20 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x200) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080)) r1 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r1, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x400, 0x0) 13:14:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2000000]}, 0xb}, 0x7a) 13:14:20 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0/file0\x00', 0x3, 0x0) [ 356.373194] kernel msg: ebtables bug: please report to author: Valid hook without chain [ 356.384041] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:20 executing program 1: add_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x4c00007e, &(0x7f00000013c0)={&(0x7f0000000100)={0x14, 0x17, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) symlink(0x0, 0x0) 13:14:20 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000000)=""/252) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x4, 0x70, 0x0, 0x8, 0x0, 0x7f, 0x0, 0x81, 0x202, 0x1, 0x9, 0x9, 0x4, 0xfffffffffffffffb, 0x3, 0x1f, 0x0, 0x401, 0x5, 0x0, 0x0, 0x7, 0x400, 0x7f, 0x6, 0x8, 0x10000, 0x800, 0x10000, 0x0, 0x2, 0x1, 0x1, 0x8000, 0x80000001, 0x6, 0x692, 0x3, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x4000, 0xcd5, 0x8, 0x3, 0xffffffffffffadd3, 0x4}) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000140)) 13:14:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x1100, [0x40000022]}) 13:14:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3000000]}, 0xb}, 0x7a) [ 356.562473] binder_alloc_mmap_handler: 6 callbacks suppressed [ 356.562489] binder_alloc: binder_alloc_mmap_handler: 15991 20005000-20008000 already mapped failed -16 [ 356.603012] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:20 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x3, 0xa75b907615e64ecc, 0x0, 0xffff, 0x3, @stepwise={{0x0, 0x6}, {0xfffffffffffffffa, 0x4}, {0x200, 0x7}}}) fanotify_mark(r0, 0x1, 0x40000000, r0, &(0x7f0000000040)='./file0\x00') ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x40, 0x2}) fcntl$dupfd(r0, 0x0, r0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4000000]}, 0xb}, 0x7a) [ 356.645778] rtc_cmos 00:00: Alarms can be up to one day in the future [ 356.667721] binder: 15991:15993 ioctl 80082407 20000080 returned -22 13:14:20 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='ghang\x00\x00\x00\x00\x00\x00\x00\x00 /dev/rtc\x00'], 0x17) 13:14:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x1200, [0x40000022]}) 13:14:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x5000000]}, 0xb}, 0x7a) [ 356.780616] rtc_cmos 00:00: Alarms can be up to one day in the future [ 356.820048] binder_alloc: binder_alloc_mmap_handler: 15991 20000000-20004000 already mapped failed -16 [ 356.915252] rtc_cmos 00:00: Alarms can be up to one day in the future [ 357.003490] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffe) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x8040000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x9, 0x0, 0x1, 0x0, 0x3, 0x1f}, 0x20) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xff, 0x301000) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f00000000c0)={0x3, "53dc206d2f55fce95eec129535855caffe739f0881c2ca61d7e3013f2d4d2abc", 0x1100, 0xfff, 0x7, 0x1, 0x7}) 13:14:20 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000a00)='/dev/midi#\x00', 0x8, 0x2000) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000a40)={'TPROXY\x00'}, &(0x7f0000000a80)=0x1e) write$FUSE_INTERRUPT(r0, &(0x7f0000000ac0)={0x10, 0x0, 0x4}, 0x10) r1 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x200) recvmsg$kcm(r2, &(0x7f0000000800)={&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000000240)=""/145, 0x91}, {&(0x7f0000000300)=""/234, 0xea}, {&(0x7f0000000400)=""/90, 0x5a}, {&(0x7f0000000480)=""/158, 0x9e}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)=""/31, 0x1f}, {&(0x7f0000000640)=""/89, 0x59}], 0x9, &(0x7f00000006c0)=""/25, 0x19}, 0x20) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r1, 0x0) fcntl$getown(r1, 0x9) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'team_slave_1\x00', 0x0}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) fstat(r1, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000900)={{{@in=@remote, @in6=@rand_addr="0c9bad0eef3842c2bd9e57a46cd60bd5", 0x4e23, 0x0, 0x4e20, 0x80, 0xa, 0xa0, 0x20, 0x6, r4, r5}, {0x7, 0x0, 0x6, 0x100000001, 0x8, 0x83df, 0x9, 0xffffffffffffffc0}, {0xffffffffffff0001, 0x1, 0x20, 0xffffffffffffffe0}, 0x76, 0x0, 0x0, 0x1, 0x3, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0xff}, 0xa, @in6=@rand_addr="6b7d4c7b7d250ce1cc99bd7364a592d0", 0x3507, 0x0, 0x3, 0xa7, 0x2, 0x3, 0x7fff}}, 0xe8) [ 357.114025] binder_alloc: binder_alloc_mmap_handler: 16033 20005000-20008000 already mapped failed -16 13:14:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x1700, [0x40000022]}) 13:14:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x6000000]}, 0xb}, 0x7a) 13:14:20 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4640, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000040)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1d, @empty}, 0x7) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f00000000c0)={0x0, @aes256}) ioctl$NBD_DO_IT(r1, 0xab03) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r2, 0x41c, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x332e}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7a}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x273173c6c975d757}, 0x40000) ioctl$RTC_AIE_ON(r1, 0x7001) 13:14:20 executing program 2 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x10000000000000ed) 13:14:20 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000a00)='/dev/midi#\x00', 0x8, 0x2000) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000a40)={'TPROXY\x00'}, &(0x7f0000000a80)=0x1e) write$FUSE_INTERRUPT(r0, &(0x7f0000000ac0)={0x10, 0x0, 0x4}, 0x10) r1 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x200) recvmsg$kcm(r2, &(0x7f0000000800)={&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000000240)=""/145, 0x91}, {&(0x7f0000000300)=""/234, 0xea}, {&(0x7f0000000400)=""/90, 0x5a}, {&(0x7f0000000480)=""/158, 0x9e}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)=""/31, 0x1f}, {&(0x7f0000000640)=""/89, 0x59}], 0x9, &(0x7f00000006c0)=""/25, 0x19}, 0x20) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4180, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r1, 0x0) fcntl$getown(r1, 0x9) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'team_slave_1\x00', 0x0}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) fstat(r1, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000900)={{{@in=@remote, @in6=@rand_addr="0c9bad0eef3842c2bd9e57a46cd60bd5", 0x4e23, 0x0, 0x4e20, 0x80, 0xa, 0xa0, 0x20, 0x6, r4, r5}, {0x7, 0x0, 0x6, 0x100000001, 0x8, 0x83df, 0x9, 0xffffffffffffffc0}, {0xffffffffffff0001, 0x1, 0x20, 0xffffffffffffffe0}, 0x76, 0x0, 0x0, 0x1, 0x3, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0xff}, 0xa, @in6=@rand_addr="6b7d4c7b7d250ce1cc99bd7364a592d0", 0x3507, 0x0, 0x3, 0xa7, 0x2, 0x3, 0x7fff}}, 0xe8) 13:14:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000005000/0x7000)=nil, 0x7000, 0x4, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) [ 357.347222] binder_alloc: binder_alloc_mmap_handler: 16046 20005000-20008000 already mapped failed -16 [ 357.372844] binder_alloc: binder_alloc_mmap_handler: 16047 20005000-20008000 already mapped failed -16 [ 357.391538] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x7000000]}, 0xb}, 0x7a) 13:14:21 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x402000, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000140)={'broute\x00'}, &(0x7f0000000040)=0x78) seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x2000000000081}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) [ 357.422881] FAULT_INJECTION: forcing a failure. [ 357.422881] name failslab, interval 1, probability 0, space 0, times 0 [ 357.448521] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:21 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x6, 0xdfdd, 0x8009, 0x5, 0x8000, 0x5f, 0xdef3, 0x4, r1}, 0x20) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x4, 0x5, 0xfffffffffffffffd}, &(0x7f00000000c0)=0x10) [ 357.532505] CPU: 1 PID: 16059 Comm: syz-executor2 Not tainted 5.0.0-rc1+ #21 [ 357.539719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.549071] Call Trace: [ 357.551680] dump_stack+0x1db/0x2d0 [ 357.555360] ? dump_stack_print_info.cold+0x20/0x20 [ 357.560392] ? check_preemption_disabled+0x48/0x290 [ 357.565411] ? mark_held_locks+0x100/0x100 [ 357.569682] should_fail.cold+0xa/0x15 [ 357.573585] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 357.573635] ? ___might_sleep+0x1e7/0x310 13:14:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x1b00, [0x40000022]}) [ 357.582894] ? arch_local_save_flags+0x50/0x50 [ 357.582925] ? ___might_sleep+0x1e7/0x310 [ 357.582950] __should_failslab+0x121/0x190 [ 357.582969] should_failslab+0x9/0x14 [ 357.599706] __kmalloc+0x2dc/0x740 [ 357.603261] ? __mutex_lock+0x622/0x1670 [ 357.607333] ? rw_copy_check_uvector+0x28c/0x330 [ 357.612171] rw_copy_check_uvector+0x28c/0x330 [ 357.616795] ? mutex_trylock+0x2d0/0x2d0 [ 357.620875] import_iovec+0xc1/0x2a0 [ 357.624622] ? dup_iter+0x260/0x260 [ 357.624642] ? lock_downgrade+0x910/0x910 [ 357.624690] vfs_writev+0xf5/0x370 [ 357.624709] ? vfs_iter_write+0xb0/0xb0 [ 357.635996] ? kasan_check_write+0x14/0x20 [ 357.636011] ? __mutex_unlock_slowpath+0x195/0x870 [ 357.636030] ? wait_for_completion+0x810/0x810 [ 357.652374] rtc_cmos 00:00: Alarms can be up to one day in the future [ 357.654235] ? mutex_lock_nested+0x16/0x20 [ 357.654248] ? mutex_lock_nested+0x16/0x20 [ 357.654266] ? __fdget_pos+0xdc/0x1f0 [ 357.673098] ? __fdget_raw+0x20/0x20 [ 357.676824] ? __sb_end_write+0xd9/0x110 [ 357.680931] do_writev+0x11a/0x300 [ 357.684490] ? vfs_writev+0x370/0x370 [ 357.688301] ? trace_hardirqs_off_caller+0x300/0x300 [ 357.693420] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 357.697384] rtc_cmos 00:00: Alarms can be up to one day in the future [ 357.698194] __x64_sys_writev+0x75/0xb0 [ 357.698214] do_syscall_64+0x1a3/0x800 [ 357.698234] ? syscall_return_slowpath+0x5f0/0x5f0 [ 357.698252] ? prepare_exit_to_usermode+0x232/0x3b0 [ 357.698273] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 357.727452] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.732669] RIP: 0033:0x457ec9 [ 357.735860] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 357.754775] RSP: 002b:00007f556c55ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 357.762478] RAX: ffffffffffffffda RBX: 00007f556c55ec90 RCX: 0000000000457ec9 [ 357.769756] RDX: 10000000000000ed RSI: 0000000020000700 RDI: 0000000000000005 13:14:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={r1}) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) [ 357.777026] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 357.784294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f556c55f6d4 [ 357.791562] R13: 00000000004c488e R14: 00000000004dca78 R15: 0000000000000006 13:14:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x8000000]}, 0xb}, 0x7a) 13:14:21 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000)) ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x9000000]}, 0xb}, 0x7a) 13:14:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x1e01, [0x40000022]}) [ 357.999404] rtc_cmos 00:00: Alarms can be up to one day in the future [ 358.091634] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:21 executing program 2 (fault-call:4 fault-nth:1): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x10000000000000ed) 13:14:21 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x2, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/55) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x2) 13:14:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xa000000]}, 0xb}, 0x7a) 13:14:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x2a00, [0x40000022]}) [ 358.293915] rtc_cmos 00:00: Alarms can be up to one day in the future [ 358.332041] FAULT_INJECTION: forcing a failure. [ 358.332041] name failslab, interval 1, probability 0, space 0, times 0 [ 358.369477] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x10000000]}, 0xb}, 0x7a) [ 358.412111] CPU: 0 PID: 16105 Comm: syz-executor2 Not tainted 5.0.0-rc1+ #21 [ 358.419315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.428688] Call Trace: [ 358.428736] dump_stack+0x1db/0x2d0 [ 358.428776] ? dump_stack_print_info.cold+0x20/0x20 [ 358.428791] ? aa_path_link+0x5d0/0x5d0 [ 358.428822] should_fail.cold+0xa/0x15 [ 358.447909] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 358.453031] ? ___might_sleep+0x1e7/0x310 [ 358.457201] ? arch_local_save_flags+0x50/0x50 [ 358.461824] ? common_file_perm+0x231/0x800 [ 358.466162] __should_failslab+0x121/0x190 [ 358.470399] should_failslab+0x9/0x14 [ 358.474197] __kmalloc+0x2dc/0x740 [ 358.477745] ? apparmor_file_permission+0x25/0x30 [ 358.482600] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.488154] ? kernfs_fop_write+0x33d/0x480 [ 358.492487] kernfs_fop_write+0x33d/0x480 [ 358.496637] ? rw_verify_area+0x118/0x360 [ 358.500825] do_iter_write+0x4a5/0x610 [ 358.504737] vfs_writev+0x1ee/0x370 [ 358.508403] ? vfs_iter_write+0xb0/0xb0 [ 358.512383] ? kasan_check_write+0x14/0x20 [ 358.517138] ? __mutex_unlock_slowpath+0x195/0x870 [ 358.522084] ? wait_for_completion+0x810/0x810 [ 358.526697] ? mutex_lock_nested+0x16/0x20 [ 358.530933] ? mutex_lock_nested+0x16/0x20 [ 358.535174] ? __fdget_pos+0xdc/0x1f0 [ 358.538989] ? __fdget_raw+0x20/0x20 [ 358.542727] ? __sb_end_write+0xd9/0x110 [ 358.546799] do_writev+0x11a/0x300 [ 358.550345] ? vfs_writev+0x370/0x370 [ 358.554155] ? trace_hardirqs_off_caller+0x300/0x300 [ 358.559261] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 358.564021] __x64_sys_writev+0x75/0xb0 [ 358.567998] do_syscall_64+0x1a3/0x800 [ 358.572034] ? syscall_return_slowpath+0x5f0/0x5f0 [ 358.576969] ? prepare_exit_to_usermode+0x232/0x3b0 [ 358.581996] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 358.586850] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.592036] RIP: 0033:0x457ec9 13:14:22 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) sendto$rxrpc(r0, &(0x7f0000000000)="6ff96cebca8d8c60276dc424640c2865d0ed8867e51314175e35fb9d638ff95fd79d924c21c917c234720d4ff68a1239b8451997c1924b471c290b58426e3897a36032ba935fdd29e6d9f7b11233bcf3c66ab71cd2d44e1d2d4d2f873f85e6c3a1d83333c3e78dab84c44fe2a90f79b803fb7523322f595b4b4818e242931e7fd988602214df7f8ae029ea7c501ecc", 0x8f, 0x40, &(0x7f00000000c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0xfffffffffffffffe}}, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)={{0xa7f0, 0x6}, {0x5e16, 0x3ff}, 0x100000000, 0x2}) [ 358.595257] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 358.614152] RSP: 002b:00007f556c53dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 358.621858] RAX: ffffffffffffffda RBX: 00007f556c53dc90 RCX: 0000000000457ec9 [ 358.629123] RDX: 10000000000000ed RSI: 0000000020000700 RDI: 0000000000000004 [ 358.636400] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 358.643674] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f556c53e6d4 [ 358.650954] R13: 00000000004c488e R14: 00000000004dca78 R15: 0000000000000005 13:14:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3f000000]}, 0xb}, 0x7a) [ 358.747849] rtc_cmos 00:00: Alarms can be up to one day in the future [ 358.792026] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:22 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000000)=r0) ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x40000000]}, 0xb}, 0x7a) [ 358.904693] rtc_cmos 00:00: Alarms can be up to one day in the future [ 358.976541] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x2c00, [0x40000022]}) 13:14:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf5ffffff]}, 0xb}, 0x7a) 13:14:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000140)={@in={0x2, 0x4e21, @multicast1}, {&(0x7f0000000080)=""/85, 0x55}, &(0x7f0000000100), 0x2}, 0xa0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffd, 0x80010, r0, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000240)=0xc) 13:14:22 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x40000101000, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) getsockname$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0xe3, 0x100000000, 0x7, &(0x7f0000000100)="b7b2883e88f69d"}) 13:14:22 executing program 2 (fault-call:4 fault-nth:2): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x10000000000000ed) 13:14:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x6, 0xfffffffffffffffa, 0x2, 0x1, 0xa4c6, 0x8}) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) recvmmsg(r3, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x2fd, 0x400002fd, 0x0) [ 359.258614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 359.286316] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 359.287027] FAULT_INJECTION: forcing a failure. [ 359.287027] name failslab, interval 1, probability 0, space 0, times 0 [ 359.372116] CPU: 1 PID: 16142 Comm: syz-executor2 Not tainted 5.0.0-rc1+ #21 [ 359.379329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.388704] Call Trace: [ 359.391312] dump_stack+0x1db/0x2d0 [ 359.394954] ? dump_stack_print_info.cold+0x20/0x20 [ 359.399976] ? kasan_slab_free+0xe/0x10 [ 359.403953] ? kfree+0xcf/0x230 [ 359.407251] ? kernfs_fop_write+0x18c/0x480 [ 359.411594] ? do_iter_write+0x4a5/0x610 [ 359.411609] ? vfs_writev+0x1ee/0x370 [ 359.411625] ? __x64_sys_writev+0x75/0xb0 [ 359.411656] should_fail.cold+0xa/0x15 [ 359.411680] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 359.432668] ? ___might_sleep+0x1e7/0x310 [ 359.436840] ? arch_local_save_flags+0x50/0x50 [ 359.441431] ? kfree+0x173/0x230 [ 359.444816] __should_failslab+0x121/0x190 [ 359.449085] should_failslab+0x9/0x14 [ 359.449100] __kmalloc+0x2dc/0x740 [ 359.449120] ? iov_iter_npages+0xf20/0xf20 [ 359.460685] ? kernfs_fop_write+0x18c/0x480 [ 359.465060] ? kernfs_fop_write+0x33d/0x480 [ 359.469394] kernfs_fop_write+0x33d/0x480 [ 359.473561] do_iter_write+0x4a5/0x610 [ 359.477479] vfs_writev+0x1ee/0x370 [ 359.481141] ? vfs_iter_write+0xb0/0xb0 [ 359.485132] ? kasan_check_write+0x14/0x20 [ 359.489393] ? __mutex_unlock_slowpath+0x195/0x870 [ 359.494327] ? wait_for_completion+0x810/0x810 [ 359.494348] ? mutex_lock_nested+0x16/0x20 [ 359.503149] ? mutex_lock_nested+0x16/0x20 [ 359.507397] ? __fdget_pos+0xdc/0x1f0 [ 359.511204] ? __fdget_raw+0x20/0x20 [ 359.514936] ? __sb_end_write+0xd9/0x110 [ 359.519049] do_writev+0x11a/0x300 [ 359.522604] ? vfs_writev+0x370/0x370 [ 359.526414] ? trace_hardirqs_off_caller+0x300/0x300 [ 359.531555] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 359.536326] __x64_sys_writev+0x75/0xb0 [ 359.540311] do_syscall_64+0x1a3/0x800 [ 359.544213] ? syscall_return_slowpath+0x5f0/0x5f0 [ 359.549155] ? prepare_exit_to_usermode+0x232/0x3b0 [ 359.554206] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 359.559078] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.564270] RIP: 0033:0x457ec9 [ 359.567466] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 359.586370] RSP: 002b:00007f556c55ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 359.594093] RAX: ffffffffffffffda RBX: 00007f556c55ec90 RCX: 0000000000457ec9 [ 359.601358] RDX: 10000000000000ed RSI: 0000000020000700 RDI: 0000000000000005 [ 359.608621] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 359.615894] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f556c55f6d4 13:14:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfe800000]}, 0xb}, 0x7a) 13:14:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfffffff5]}, 0xb}, 0x7a) 13:14:23 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0xa4000, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0xa5) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) poll(&(0x7f0000000040)=[{r0, 0x21}, {r0, 0x1000}, {r0}, {r0, 0x200}, {r0, 0x1482}, {r0, 0x2c8}, {r0, 0x10}, {r0, 0x2}], 0x8, 0x1) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x1f, 0x4, [0x1, 0x7ff, 0x7c1, 0x7]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0x9}, &(0x7f0000000140)=0x8) [ 359.623162] R13: 00000000004c488e R14: 00000000004dca78 R15: 0000000000000006 13:14:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x10000000000000]}, 0xb}, 0x7a) 13:14:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x3400, [0x40000022]}) [ 359.789463] IPVS: ftp: loaded support on port[0] = 21 13:14:23 executing program 4: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) [ 359.856869] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:23 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) getsockopt(r0, 0x4d8, 0x100000000, &(0x7f0000000000)=""/139, &(0x7f00000000c0)=0x8b) 13:14:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x100000000000000]}, 0xb}, 0x7a) [ 359.980408] rtc_cmos 00:00: Alarms can be up to one day in the future [ 360.010622] rtc_cmos 00:00: Alarms can be up to one day in the future [ 360.200017] chnl_net:caif_netlink_parms(): no params data found [ 360.272035] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.278420] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.287671] device bridge_slave_0 entered promiscuous mode [ 360.298141] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.305307] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.312522] device bridge_slave_1 entered promiscuous mode [ 360.330209] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 360.340070] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 360.366023] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 360.374371] team0: Port device team_slave_0 added [ 360.379663] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 360.387088] team0: Port device team_slave_1 added [ 360.392332] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 360.399539] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 360.463887] device hsr_slave_0 entered promiscuous mode [ 360.501150] device hsr_slave_1 entered promiscuous mode [ 360.541293] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 360.553536] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 360.567631] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.574051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.580615] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.587037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.624628] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 360.631102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.639539] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 360.648141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 360.656733] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.663825] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.671680] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 360.682496] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 360.688544] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.702312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 360.709929] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.716309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.727556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 360.735601] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.742012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.749611] device bridge_slave_1 left promiscuous mode [ 360.755580] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.811720] device bridge_slave_0 left promiscuous mode [ 360.817174] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.966236] device hsr_slave_1 left promiscuous mode [ 361.046679] device hsr_slave_0 left promiscuous mode [ 361.116795] team0 (unregistering): Port device team_slave_1 removed [ 361.128026] team0 (unregistering): Port device team_slave_0 removed [ 361.140024] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 361.178460] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 361.271669] bond0 (unregistering): Released all slaves [ 361.377336] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 361.384595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 361.394002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 361.402811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 361.411638] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 361.418610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 361.426745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 361.437169] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 361.444273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 361.452279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 361.462208] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 361.470243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.480963] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 361.486981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 361.499556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 361.507214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 13:14:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:25 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x2, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/55) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x2) 13:14:25 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000800)='/dev/input/mice\x00', 0x0, 0x1) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000840)={0xfffffffffffffff7, 0x7d, 0x1, 0x4, 0x6, 0x80000000000000, 0x10000, 0x8, 0x2, 0xffffffff80000001, 0xe3}, 0xb) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00000000c0)=0x5) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x328, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x0, &(0x7f0000000000), &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x38f) 13:14:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x200000000000000]}, 0xb}, 0x7a) 13:14:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x3a00, [0x40000022]}) 13:14:25 executing program 2 (fault-call:4 fault-nth:3): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x10000000000000ed) [ 361.522437] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 361.533349] 8021q: adding VLAN 0 to HW filter on device batadv0 13:14:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x300000000000000]}, 0xb}, 0x7a) [ 361.603380] rtc_cmos 00:00: Alarms can be up to one day in the future [ 361.623185] FAULT_INJECTION: forcing a failure. [ 361.623185] name failslab, interval 1, probability 0, space 0, times 0 [ 361.644218] rtc_cmos 00:00: Alarms can be up to one day in the future [ 361.684504] CPU: 1 PID: 16187 Comm: syz-executor2 Not tainted 5.0.0-rc1+ #21 [ 361.691699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.701060] Call Trace: [ 361.703664] dump_stack+0x1db/0x2d0 [ 361.707314] ? dump_stack_print_info.cold+0x20/0x20 [ 361.712337] ? kasan_slab_free+0xe/0x10 [ 361.716330] ? kfree+0xcf/0x230 [ 361.719603] ? kernfs_fop_write+0x18c/0x480 [ 361.723924] ? do_iter_write+0x4a5/0x610 [ 361.727998] ? vfs_writev+0x1ee/0x370 [ 361.731850] ? __x64_sys_writev+0x75/0xb0 [ 361.736007] should_fail.cold+0xa/0x15 [ 361.739908] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 361.745026] ? ___might_sleep+0x1e7/0x310 [ 361.749182] ? arch_local_save_flags+0x50/0x50 [ 361.753769] ? kfree+0x173/0x230 [ 361.757142] __should_failslab+0x121/0x190 [ 361.761384] should_failslab+0x9/0x14 [ 361.765203] __kmalloc+0x2dc/0x740 [ 361.768748] ? iov_iter_npages+0xf20/0xf20 [ 361.772993] ? kernfs_fop_write+0x18c/0x480 [ 361.777320] ? kernfs_fop_write+0x33d/0x480 [ 361.781642] kernfs_fop_write+0x33d/0x480 [ 361.785805] do_iter_write+0x4a5/0x610 [ 361.789749] vfs_writev+0x1ee/0x370 [ 361.793411] ? vfs_iter_write+0xb0/0xb0 [ 361.797385] ? kasan_check_write+0x14/0x20 [ 361.801616] ? __mutex_unlock_slowpath+0x195/0x870 [ 361.806551] ? wait_for_completion+0x810/0x810 [ 361.811137] ? mutex_lock_nested+0x16/0x20 [ 361.815374] ? mutex_lock_nested+0x16/0x20 [ 361.819609] ? __fdget_pos+0xdc/0x1f0 [ 361.823408] ? __fdget_raw+0x20/0x20 [ 361.827125] ? __sb_end_write+0xd9/0x110 [ 361.831205] do_writev+0x11a/0x300 [ 361.834769] ? vfs_writev+0x370/0x370 [ 361.838572] ? trace_hardirqs_off_caller+0x300/0x300 [ 361.843678] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 361.848439] __x64_sys_writev+0x75/0xb0 [ 361.852413] do_syscall_64+0x1a3/0x800 [ 361.856296] ? syscall_return_slowpath+0x5f0/0x5f0 [ 361.861221] ? prepare_exit_to_usermode+0x232/0x3b0 [ 361.866242] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 361.871089] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.876272] RIP: 0033:0x457ec9 [ 361.879456] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 361.898367] RSP: 002b:00007f556c55ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 361.906067] RAX: ffffffffffffffda RBX: 00007f556c55ec90 RCX: 0000000000457ec9 [ 361.913331] RDX: 10000000000000ed RSI: 0000000020000700 RDI: 0000000000000005 [ 361.920592] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 361.927888] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f556c55f6d4 13:14:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0xb000, 0x0, 0x0) [ 361.935151] R13: 00000000004c488e R14: 00000000004dca78 R15: 0000000000000006 [ 362.008717] binder_alloc: binder_alloc_mmap_handler: 16198 20005000-20008000 already mapped failed -16 13:14:25 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e21, 0x7f, @dev={0xfe, 0x80, [], 0x25}, 0xffffffffffffff02}, {0xa, 0x4e23, 0x1, @mcast2, 0x63}, 0x1, [0x7, 0x1, 0x5, 0x3, 0x9, 0x1, 0x8, 0x10001]}, 0x5c) [ 362.049042] binder_alloc: binder_alloc_mmap_handler: 16198 20005000-20008000 already mapped failed -16 13:14:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x400000000000000]}, 0xb}, 0x7a) 13:14:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000080)={0xc, 0xfc, "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"}, 0x102) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) [ 362.152633] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x500000000000000]}, 0xb}, 0x7a) [ 362.208431] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:25 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x80043, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) r1 = add_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="126ffd9b1a4ba6033816faa92a8d44e159bc418dfb2f8defbec441dead966aede8963a75ef5934eb38fd5c41cb548cc6b66378f699b42a136c3b4f764ec26c16b77e1a93d1feb4c44c020055849f373b5fc0142e46db5695aead67dd8f92ea8720cf009dc7d5c3ef7dc23e79065cb65373078822c5fc897b25066f7ba912bc88d38fe0205b07b373575eb45c3c62d9208dc3f7954f11dab13fb614b1ae6daa", 0x9f, 0xfffffffffffffffd) r2 = semget$private(0x0, 0x3, 0x2) semctl$SETVAL(r2, 0x3, 0x10, &(0x7f00000002c0)) openat$capi20(0xffffffffffffff9c, &(0x7f0000000300)='/dev/capi20\x00', 0x4300, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="cfc408ef2805fa336722ca3e54367221ff2ae1be99ed880125e98ab70487f8f188f4e11a8a2ea5e1ddae4dbf425122fce2d87c861f3e4c5a25dccf20042c78f30063926a8b91ede500e57f93f40f5f5899e956e1bec83c97123e168539dba3301857145582ed18262b0cc5b70f1f81ca5d8435b21100d7e387c39574d27790a86d", 0x81, r1) [ 362.292594] binder_alloc: binder_alloc_mmap_handler: 16217 20005000-20008000 already mapped failed -16 13:14:26 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x600000000000000]}, 0xb}, 0x7a) [ 362.443294] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x3b00, [0x40000022]}) 13:14:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x1000) read(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), 0x0) prctl$PR_GET_SECCOMP(0x15) fcntl$setstatus(r1, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000940)={'bond0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000980)={@multicast2, @broadcast, r2}, 0xc) 13:14:26 executing program 2 (fault-call:4 fault-nth:4): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x10000000000000ed) [ 362.571552] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:26 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x700000000000000]}, 0xb}, 0x7a) 13:14:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0x0, 0x3fffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x3975, 0x4) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x400c0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x3f00, [0x40000022]}) 13:14:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x5) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9, 0x200) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f00000000c0)={0x7, 0x8b8a9fb5a3d9a6c4, 0x4, 0x7ff, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000180)={r3, 0xbf}, &(0x7f00000001c0)=0x8) mq_open(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x1, 0x0, &(0x7f0000000240)={0xb, 0x9, 0x4, 0x3, 0x4, 0x10000, 0x5bf8, 0x2}) 13:14:26 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x20500, 0x0) bind$bt_rfcomm(r0, &(0x7f0000000140)={0x1f, {0x0, 0x3, 0x100000001, 0x5, 0x1, 0x6}, 0x9d}, 0xa) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0xde, "d0e1fae9b96a05662d859306aa3f4c98078878e346727071fb86a3384145bc25ed073ecfd558a963e3d2f12f6e2245221194af7a720ae9aac9046f7825e9d0efd7cb7b36c0c0f3b3135a6097f815fe3fece7657f158ecb5e874056c451b9184201192ff5bcd38c018ecba79f4d67832ab8bbaddae476ded6c12a3b383301f27f6db21e7307c38e4c895d6f30545e48e0851582fa96150bba76dd817edcbca8654af1f6c914361a7d029105d1f212df2349680704c739a422c149c463c665ef12c10b10f7f800efa1b2f44f68f54191e5ed411ace80c3f7946c44e1faaba1"}, &(0x7f0000000100)=0xe6) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x204, 0x1, 0x8001, r2}, &(0x7f00000002c0)=0xfffffffffffffd57) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)={r3, 0xa41}, &(0x7f00000000c0)=0x8) 13:14:26 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x800000000000000]}, 0xb}, 0x7a) [ 362.782429] rtc_cmos 00:00: Alarms can be up to one day in the future [ 362.802348] rtc_cmos 00:00: Alarms can be up to one day in the future [ 362.853589] IPVS: ftp: loaded support on port[0] = 21 13:14:26 executing program 1: r0 = socket$kcm(0x11, 0x2, 0x300) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f00000001c0)={0xd, 0x1, {0x52, 0x0, 0x4, {0xb, 0x4dc0}, {0x0, 0x6}, @rumble={0xd7c2, 0xff53}}, {0x52, 0x80000000000, 0x7, {0x2, 0xfffffffffffffff7}, {0xb75, 0x2}, @ramp={0x6, 0x9, {0x4, 0x81, 0x2, 0x80000001}}}}) r2 = socket$kcm(0x11, 0x3, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c1", 0x1}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x541b, 0x70d000) 13:14:26 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000000)={0x80000001, 0xbf, 0x83e, 0x617}) 13:14:26 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x900000000000000]}, 0xb}, 0x7a) [ 362.989180] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:26 executing program 1: r0 = openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup3(r0, r0, 0x80000) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@caif=@dgm={0x25, 0x6, 0xfffffffffffffffb}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="7f73742410fe787904154a2322d89b30c8ec3779455d4e98b996321fcb13cbc3552d3bdb8c963d42ed433131a513d9df350cf5", 0x33}, {&(0x7f0000000100)="65cea5b42e8bf6e63926b600360dfeccdb92b7a5e1c3986efaafd9365eb089704eea76a1b8041a92b22ef517f873d4bc56fb", 0x32}], 0x2, &(0x7f0000000180)=[{0x98, 0x101, 0x3, "9708b0f7c67a4989c48fddcd7d32e0129370d1d80d6bc4d19595ea52a506eca16002968d8b6dd61dc50a7c79741bfe7ad6b61cc9eebec833ff0de84eca7174e484761e58fbfa78506b7f52ef9ef2b0e8d12206b4ed42d74a7ab85071a7a7b3e66243fc719a658553e0203fc92aec8256a8d8c6913b072c7427a67eb809c82274b59755"}, {0x100, 0x117, 0x1ff, "15762dec0d2be55abf22ca9f09f307bad228f0be40337e8c822b5d9df86766d94cf6abe4c70e7ca4cee2f1cbc0fde3d9fc464d37b1741aa53dd5124cf146db166166116a98535eb4f134a6f55ab4a515b5975f703140f29ecabd6aaf715e3089e5fd9decc6da64b800e4202bdafbf94d35ce08fd61716e059f981e73e11a41953ebc0639375c6ed3113505ccb622b0af30e47cee6225f1ca7171a0dec7a27d798866b1be19d6023e24067c84fc4e3ffec4c81b6eab88b528cd5810cbcafef1c1c2f81abde3b1a97d7897aa3a3a2b981d1d4edb791db4cac0f3419165fc6d31f367389c278a3b0c8915562aefb1a96d"}, {0x40, 0x0, 0x200, "720ac5948f0abdda23b5a3c30f91f31a805cb0bbc64bf99dd47044d86525bc76eaed4773f06cd29e34551b340d45dfaf"}, {0xe8, 0x11b, 0x3, "3a6d609a683f91a44d35a35df4db9b1ef9e4ea1d205318e1eac5ae0da745a42577468428da28193ac595d8ea35553cc2ec9506e03a4b68022a5aec847f7196d8cbf8ecee30293529c164453f4fb59f3645abf8521627363165ee6c07dc119d5e081b3ef26c22e6bc2eb158801acbd38d09e09a8ea0d8dc2a12d6ffa89077bb433f992eb3f16537729885716a2199998170e9fd9f9ac743445a01cab5a92cf3063c268707b85d782fb1bfac522b1f8f9288d77bb7a2741e94c73a33b415a9e2a7da60a76926c46c5302ad85613f75a72b313e5b598f0503"}, {0xf8, 0x0, 0x8, "5e9ad24b4fad7734cbc0da25321a3c70372f3a5eef1aa45334e231c6b6999399bfd05247e8d23835302bdbefe9241a6effe0eb19a330610659e58a053a03bf5143538f0da30f698f0fd6d2d9f30204c7ef164f783095fb422b83d60b68c2d76720898e6d4614975eae0f21fb01243f78ca97b8e9d209257b77f915ba59f4f27548929c3f2e2c889d42cf87bf669002d105fd76f39782d77e1c9ee29873b89590f8b951f9bf29bed9c7fe9cda0d49779f636a732aad3f9b057a96e6e2d9263931a0e3cb18e03005ff4b933827237d3d280b08ddaab8678e5dac9f22d243f5910032"}, {0x68, 0x107, 0x8c000000000, "cde9245f5df5a82489346e71590d166743003bfd08594a51c8fc09ff34f3b61c351f8b99d5fde36ccbc60f44dd8ff0f20d7d029c2ca890e281dcef5b6c6dd240afe9c4af82fbb5c1fe2e9ec87c91cee1564be10a"}], 0x420}, 0x3be394ae4af5ea93) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x8041, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40046103, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, 0x0) 13:14:26 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xa00000000000000]}, 0xb}, 0x7a) [ 363.059414] rtc_cmos 00:00: Alarms can be up to one day in the future [ 363.134032] QAT: failed to copy from user. [ 363.158036] QAT: failed to copy from user. [ 363.257840] IPVS: ftp: loaded support on port[0] = 21 13:14:27 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x10000000000000ed) 13:14:27 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x1, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) [ 363.482872] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1000000000000000]}, 0xb}, 0x7a) 13:14:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TSC(0x1a, 0x2) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000140)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000900)='./file0\x00', 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$setperm(0x5, r3, 0xffffffff) futex(&(0x7f00000006c0)=0x2, 0x0, 0x2, &(0x7f00000004c0)={0x0, 0x989680}, &(0x7f00000003c0), 0x2) epoll_wait(r2, &(0x7f0000000500)=[{}, {}, {}], 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x1d, r4}, 0x10, &(0x7f0000000a80)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x4880}, 0x4008044) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000dc0)) timer_create(0x4, &(0x7f0000000300)={0x0, 0x1c, 0x1, @thr={0x0, 0x0}}, 0x0) timer_create(0x6, &(0x7f0000000080)={0x0, 0x2c, 0x5, @thr={&(0x7f0000000040)="4ad3ee09", &(0x7f00000001c0)="1aaa3e18be7bb1dc5ec2689c689a76809f0a19aea2877a9f477423259bea730cbd3fe9fcfb7ae52b31202964ae73b01a560a95f413ec5933afbd93460e7262f0dc2e040bb67a178a26501cb1bc9c14f48918eeaf7b8226fe998c44272ce934b3831c4ba32243984f59a453e2685d6ac0d53597795c7fdc9835e13f17616beeb7"}}, &(0x7f0000000400)) timer_create(0x4, &(0x7f0000000480)={0x0, 0x41, 0x2, @thr={&(0x7f0000000440)="ab6aa5d06564987590321f801fa98b9f76bde4c57e0a1b7a31b5", 0x0}}, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000b00)=ANY=[@ANYBLOB="001000000000000006000000000000000500000000000000020000000000000006000000000000000600000000000000020000000000800000000000000000000000000077cfb26e288b21df2ccebd060000005a00000000e71300000000000000000000000000000000e16b6c817d2486ee49bf3b5a49ad0a320000000000000300000000000000049b9133db70172227c58f1f440e3dd5000000000000000000000000000000000000"]) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000008c0)) ioctl$sock_proto_private(r2, 0x89e3, &(0x7f0000000580)="1d8a17d1b0eafbb83f2a5e3d0d19e8ba19bf9ac742043082ba1ca27df6b328a17f2e658795820a032a7a0f0756b1f8fbfe92d71f484940b246150aa92e93e90d973c85a5ffd11f2fb51885d7f5033f210d86c47f996e1acd9628361beb4380a683a729afab52f175e1d72e82c9725162b36447da47623d7ebdb7840be3d6c109e78b0a604ad03e5bae7fde19f8abfc39fa839d858152a4d6d4af41efc4b6a3e636e83f47f38e8895059b6650e11d69") timer_create(0x7, 0x0, 0x0) r5 = accept$inet(r2, &(0x7f0000000340)={0x2, 0x0, @multicast2}, &(0x7f0000000640)=0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) timer_delete(0x0) signalfd4(r0, &(0x7f0000000180)={0xaf}, 0x8, 0x800) ioctl$RTC_UIE_OFF(r2, 0x7004) unshare(0x40000000) fstat(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000bc0)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f0000000880)=0xc) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="1f30303030303030303030302c757365725f69643d000000000000000000000000", @ANYRESDEC=r6, @ANYBLOB=',group_id=', @ANYRESDEC=r7, @ANYBLOB=',allow_other,blksize=0x0000000000001600,default_permissions,euid<', @ANYRESDEC=r8, @ANYBLOB=',subj_user=keyring\x00,defcontext=unconfined_u,uid=', @ANYRESDEC=r9, @ANYBLOB=',pcr=00000000000000000022,fowner=', @ANYRESDEC=r10, @ANYBLOB=',\x00']) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000000c0)=0xb) 13:14:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x4001, [0x40000022]}) 13:14:27 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2002, 0x0) sendto$rxrpc(r0, &(0x7f0000000040)="347ea4e83989da584a72481c4ffd0e42d352f77724a2357f29e7c9eaadb425c0febf5c5c9382f1d913af259b6715d533a50183822cc0d3aa18eb0b566178e9a8e69ea16cb4700d0ffce59ea2ca2173c252522e2b58fcf792ad471c50877e7560e0b98028ba08fc8012006c7f3b29cc04f3f08763797a24ede0d6396c2bb6705602a239e0fcf4141b7fc792a0e176dd7b507a1fd54d8296acb8ae564f30ff09306798031157006babbadc5c14bf568a5eb3743e5e661de4c598b295b7af6fc8b0", 0xc0, 0x90, &(0x7f0000000100)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) 13:14:27 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000002) 13:14:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3f00000000000000]}, 0xb}, 0x7a) [ 363.665683] rtc_cmos 00:00: Alarms can be up to one day in the future [ 363.691805] binder_alloc: binder_alloc_mmap_handler: 16310 20005000-20008000 already mapped failed -16 13:14:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4000000000000000]}, 0xb}, 0x7a) 13:14:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x4800, [0x40000022]}) 13:14:27 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:27 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000003) 13:14:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 13:14:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf5ffffff00000000]}, 0xb}, 0x7a) [ 363.967337] rtc_cmos 00:00: Alarms can be up to one day in the future [ 363.987503] IPVS: ftp: loaded support on port[0] = 21 13:14:27 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000004) [ 364.209016] binder_alloc: binder_alloc_mmap_handler: 16343 20005000-20008000 already mapped failed -16 [ 364.292215] binder_alloc: binder_alloc_mmap_handler: 16343 20005000-20008000 already mapped failed -16 [ 364.478284] IPVS: ftp: loaded support on port[0] = 21 13:14:29 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000140)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) r3 = dup2(r2, r1) io_setup(0x40000000004, &(0x7f00000001c0)=0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000080)={0x9, 0x64b}) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0}]) 13:14:29 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) write$P9_RREMOVE(r0, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7) write$P9_RCLUNK(r0, &(0x7f0000000040)={0x7, 0x79, 0x1}, 0x7) 13:14:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x6005, [0x40000022]}) 13:14:29 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfe80000000000000]}, 0xb}, 0x7a) 13:14:29 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/packet\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f00000000c0)={0x8, 0x8, 0x0, 0x80000001, 0x8, 0x5, 0x8, 0x6674, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r1, 0x40}, &(0x7f0000000180)=0x8) r2 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000600)={{0xa, 0x4e24, 0x100000000, @loopback, 0x3}, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x100000001}, 0x8, [0x3a36cfa1, 0xffff, 0x80, 0x3f, 0x9, 0x3, 0x81, 0x3]}, 0x5c) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000001c0)={0xfffffffffffffff8, 0x0, 0x10000, 0x4}) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000340)={0x8, 0x9, 0x20, 0x4, 0x9, 0x6}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000200)={0xf89e, r4, 0x10001, 0xd83}) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000004c0)={0xa4e, 0xfffffffffffffff7, 0x200, 0x8000, 0xfffffffffffff013, 0xffffffff}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0x4) syz_open_dev$evdev(&(0x7f0000000400)='/dev/input/event#\x00', 0x9, 0x101000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="733aedde03a409507fc9773205305506bf9392cf695fcc50f3cf1732dc5d0bd916eb70bb0c40741e145fdffa1f90194f28cea0293631b522b58782e29e413a444027d44a1a6f16eebc338c3e886080f5596442e64dcd945fa59d285c861309d525a32bcbaeb9d0dcce916fefdff0b231b9bb69163c88477fb6a16199b74e49d41d056d1548f42ea869f36b3153b99736973cde7d9769292b158253a11c09638153c85751114a0c1444a43ef97deffa867c4c381b5d5646a7ef8cdccad2dbe811", @ANYRES16=r5, @ANYBLOB="080026bd7000fbdbdf25080000000800060001000080"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x10) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f00000006c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r6, 0x430, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x80) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000002c0)={0x4, 0x80000001, 0x31b2, 0x4, 0x100000000, 0x7}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x1, @mcast1, 0x40}, {0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x12}, 0xa5}, 0x0, [0x3b, 0xfff, 0x100, 0x4, 0xe720, 0x4, 0x9, 0x200]}, 0x5c) 13:14:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000005) 13:14:29 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xffffffff00000000]}, 0xb}, 0x7a) [ 365.895361] rtc_cmos 00:00: Alarms can be up to one day in the future [ 365.927305] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000006) 13:14:29 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040)={0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x7, 0x8, {"9738647568c592cd47f1c724b7efae06"}, 0x0, 0x5, 0x6}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:29 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x4, 0x7, 0x5, 0x7, 0x100}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r3, 0xffffffffffff0000}, &(0x7f0000000180)=0x8) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20\x00', 0x40, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) ioctl(r4, 0x800000000000937e, &(0x7f00000001c0)="25000000000000007f") init_module(&(0x7f0000000380)='proc\x00', 0x5, &(0x7f00000003c0)='r^lonodevGPLmd5sum+.:\x00') [ 366.031429] binder_alloc: binder_alloc_mmap_handler: 16362 20005000-20008000 already mapped failed -16 13:14:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x6105, [0x40000022]}) 13:14:29 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x2]}, 0xb}, 0x7a) [ 366.124595] binder_alloc: binder_alloc_mmap_handler: 16362 20000000-20004000 already mapped failed -16 [ 366.151089] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000007) 13:14:29 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3]}, 0xb}, 0x7a) [ 366.215950] autofs4:pid:16399:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(37.0), cmd(0x0000937e) [ 366.252360] binder_alloc: binder_alloc_mmap_handler: 16362 20005000-20008000 already mapped failed -16 13:14:29 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x7005, [0x40000022]}) [ 366.351113] autofs4:pid:16399:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) [ 366.388922] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) [ 366.419036] autofs4:pid:16406:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(37.0), cmd(0x0000937e) 13:14:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000008) 13:14:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4]}, 0xb}, 0x7a) 13:14:30 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x0, 0xf) ioctl$RTC_AIE_ON(r0, 0x7001) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000280)='*]\\&\'\x00', 0x6) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=@canfd={{0x0, 0xff, 0x8, 0x3f}, 0x1d, 0x1, 0x0, 0x0, "6ae8af95b5c8edb0fbc332c88e5ee5667e32418e851e3e9eec40cff9df505d59bc9c6ca481e2af606f6b84e9ec5d60996deb803ccd0eb5c8cd41787a4ffe63df"}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) [ 366.458912] autofs4:pid:16406:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) [ 366.586318] rtc_cmos 00:00: Alarms can be up to one day in the future [ 366.614155] binder_alloc: binder_alloc_mmap_handler: 16429 20005000-20008000 already mapped failed -16 13:14:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x7105, [0x40000022]}) [ 366.631911] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x11, 0x800, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000600)=0xa7a, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000740)={0x74, 0x0, [0x9, 0x20, 0x3, 0x80]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setaffinity(0x0, 0xb3, &(0x7f0000000640)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000180)="9bea77e53e5f28") getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f0000000000)={0x0, 0x2, 0x1}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x402, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000440), 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f00000004c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x69, "66381e", "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"}}, 0x110) r7 = syz_genetlink_get_family_id$tipc2(0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000006c0)={0x0, 0x6d7, 0x1, [0x0]}, &(0x7f0000000700)=0xa) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x208, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x704}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x884}, 0x800) perf_event_open(0x0, r5, 0x3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000008, 0x13, r4, 0x0) 13:14:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x5]}, 0xb}, 0x7a) 13:14:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000009) 13:14:30 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x400803, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000080)=@ng={0x4, 0x1, "622fc1c257a13a157615"}, 0xc, 0x1) getgroups(0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xee00]) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xbb4ce3b9020f747a, r0, 0x4) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x6]}, 0xb}, 0x7a) 13:14:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x7205, [0x40000022]}) 13:14:30 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) write(r0, &(0x7f0000000000)="a18b1a965ceab04236973fca2b4c3d519edce07b1236e197deb61e48ce54d9d20b3750c8047678c9b9403839bf23dfc248527b445e069d16f37d7e7d79dabd27c6eeeafd3115739f77a95a1e2e559cb0e868912a242d3b2c4b47b0c224da3f841f8fd446ba0a0b4e184597a94670bfaa6fdaeade", 0x74) ioctl$RTC_AIE_ON(r0, 0x7001) 13:14:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000000a) 13:14:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x7]}, 0xb}, 0x7a) [ 367.039843] rtc_cmos 00:00: Alarms can be up to one day in the future [ 367.112557] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x7401, [0x40000022]}) 13:14:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000000)={0x81, 0x3, 0x4, 0x0, 0x0, [], [], [], 0xfffffffffffffffd, 0x7fff}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mq_unlink(&(0x7f0000000180)='/dev/binder#\x00') mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) mmap$binder(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000006, 0x10, r1, 0x0) 13:14:30 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) futex(&(0x7f0000000080)=0x2, 0x0, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) epoll_wait(r1, &(0x7f0000000880)=[{}, {}, {}], 0x155555555555598e, 0x100) getsockname$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000980)=0x14) fcntl$addseals(r0, 0x409, 0x8) timer_create(0x7, &(0x7f0000000400)={0x0, 0x30, 0x2, @thr={&(0x7f0000000180)="d40cbd7e0432f70a60c0390864147fac8ddd79b78c3887e995815689df7706f39ce9434fdf6c44b9", 0x0}}, &(0x7f0000000440)=0x0) timer_delete(r2) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000004c0)=@assoc_id=0x0, &(0x7f00000005c0)=0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000600)={r3, @in6={{0xa, 0x4e21, 0x4, @ipv4={[], [], @loopback}, 0x1}}, 0xfffffffffffffffa, 0x20, 0x6, 0x8, 0x7}, &(0x7f00000006c0)=0x98) unshare(0x40000000) r4 = getpid() sendmsg$inet_sctp(r1, &(0x7f0000000b00)={&(0x7f0000000540)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000580)="7747d9c0366aaa1c3b169517a47b0d5db5a96c6a0a5a4588403135e40a8b4370b6cd7aedbe0bdd959f1fc191146adf503daa4ad19ad1a3f65351d28dd65a", 0x3e}, {&(0x7f00000008c0)="be22cc97929435927c98524d349837a31577766d8af81aa6c94e3ce52df182da6084f432939b30288f01fe51ae3a6df0205ffcf6bca2656b0f634daed7f00cfe62832135b73c1c70a87be49f7e7c67b3034c8fd7fd2b5c3f96eeb0ae7d15c4", 0x5f}], 0x2, &(0x7f0000000ac0)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2}], 0x18, 0x20000001}, 0x404c014) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r1, 0x4) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000300)={[], 0x8e2, 0x0, 0x3, 0x2, 0x80000000, r4}) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000200)={0x7}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000009c0)={@un=@abs={0x0, 0x0, 0x4e24}, {&(0x7f0000000780)=""/243, 0xf3}, &(0x7f0000000500), 0x48}, 0xa0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2e0402, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000280)={r3, 0x8, "db47e25cf99cec38"}, &(0x7f0000000b40)=0x10) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f00000002c0)={0x0, 0x1ec4, 0xffe, &(0x7f0000000040)}) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000700)) write$P9_RCLUNK(r1, &(0x7f0000000240)={0x7, 0x79, 0x2}, 0x7) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/vsock\x00', 0x41fffd, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) dup2(r1, r1) 13:14:30 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0xffffffff, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x284, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x530}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x914}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d44}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x21}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9764}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8c1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000000}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4bf10415}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x757d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/98) 13:14:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000000b) 13:14:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x8]}, 0xb}, 0x7a) [ 367.342368] binder_alloc: binder_alloc_mmap_handler: 16490 20005000-20008000 already mapped failed -16 [ 367.381670] rtc_cmos 00:00: Alarms can be up to one day in the future [ 367.427276] QAT: Invalid ioctl 13:14:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x9]}, 0xb}, 0x7a) [ 367.461481] rtc_cmos 00:00: Alarms can be up to one day in the future 13:14:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x7501, [0x40000022]}) [ 367.524026] QAT: Invalid ioctl [ 367.535498] binder_alloc: binder_alloc_mmap_handler: 16490 20005000-20008000 already mapped failed -16 13:14:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000000c) [ 367.580827] QAT: Invalid ioctl 13:14:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x8000042, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20000, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) process_vm_writev(r2, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/1, 0x1}, {&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000440)=""/218, 0xda}, {&(0x7f0000000540)=""/236, 0xec}, {&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/240, 0xf0}, {&(0x7f0000000380)=""/32, 0x20}], 0x8, &(0x7f00000003c0)=[{&(0x7f0000000880)=""/150, 0x96}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)={@initdev, 0x0}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'nr0\x00', 0x0}) recvmsg(0xffffffffffffff9c, &(0x7f0000001780)={&(0x7f00000015c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001640)=""/112, 0x70}], 0x1, &(0x7f0000001700)=""/82, 0x52}, 0x10002) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x1, 0x8}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r9, 0x6193}, &(0x7f0000000240)=0x8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080000}, 0xc, &(0x7f0000001a80)={&(0x7f00000017c0)={0x2bc, r3, 0x0, 0x70bd2d, 0x8, {}, [{{0x8, 0x1, r4}, {0xc4, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x1d4, 0x2, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x100000000, 0x5, 0x8, 0x1000}, {0x100, 0x7, 0x5, 0x10001}, {0x2, 0x1, 0x7ff, 0x80}, {0x1, 0x9, 0x40, 0x3}, {0x4, 0x2, 0x1, 0x8}, {0x4b4, 0x4, 0x7fff, 0x7}, {0x1, 0x5, 0xef5, 0x2}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x80000001, 0x7, 0x9, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xa30}}}]}}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x48080}, 0x90) 13:14:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xa]}, 0xb}, 0x7a) 13:14:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x42041, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7ffffffb, 0x800) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) [ 367.749618] IPVS: ftp: loaded support on port[0] = 21 13:14:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x10]}, 0xb}, 0x7a) 13:14:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000000d) [ 367.861694] binder_alloc: binder_alloc_mmap_handler: 16531 20005000-20008000 already mapped failed -16 [ 368.192071] QAT: Invalid ioctl [ 368.242186] IPVS: ftp: loaded support on port[0] = 21 [ 368.284599] QAT: Invalid ioctl [ 368.288549] QAT: Invalid ioctl 13:14:32 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) futex(&(0x7f0000000080)=0x2, 0x0, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) epoll_wait(r1, &(0x7f0000000880)=[{}, {}, {}], 0x155555555555598e, 0x100) getsockname$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000980)=0x14) fcntl$addseals(r0, 0x409, 0x8) timer_create(0x7, &(0x7f0000000400)={0x0, 0x30, 0x2, @thr={&(0x7f0000000180)="d40cbd7e0432f70a60c0390864147fac8ddd79b78c3887e995815689df7706f39ce9434fdf6c44b9", 0x0}}, &(0x7f0000000440)=0x0) timer_delete(r2) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000004c0)=@assoc_id=0x0, &(0x7f00000005c0)=0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000600)={r3, @in6={{0xa, 0x4e21, 0x4, @ipv4={[], [], @loopback}, 0x1}}, 0xfffffffffffffffa, 0x20, 0x6, 0x8, 0x7}, &(0x7f00000006c0)=0x98) unshare(0x40000000) r4 = getpid() sendmsg$inet_sctp(r1, &(0x7f0000000b00)={&(0x7f0000000540)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000580)="7747d9c0366aaa1c3b169517a47b0d5db5a96c6a0a5a4588403135e40a8b4370b6cd7aedbe0bdd959f1fc191146adf503daa4ad19ad1a3f65351d28dd65a", 0x3e}, {&(0x7f00000008c0)="be22cc97929435927c98524d349837a31577766d8af81aa6c94e3ce52df182da6084f432939b30288f01fe51ae3a6df0205ffcf6bca2656b0f634daed7f00cfe62832135b73c1c70a87be49f7e7c67b3034c8fd7fd2b5c3f96eeb0ae7d15c4", 0x5f}], 0x2, &(0x7f0000000ac0)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2}], 0x18, 0x20000001}, 0x404c014) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r1, 0x4) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000300)={[], 0x8e2, 0x0, 0x3, 0x2, 0x80000000, r4}) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000200)={0x7}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000009c0)={@un=@abs={0x0, 0x0, 0x4e24}, {&(0x7f0000000780)=""/243, 0xf3}, &(0x7f0000000500), 0x48}, 0xa0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2e0402, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000280)={r3, 0x8, "db47e25cf99cec38"}, &(0x7f0000000b40)=0x10) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f00000002c0)={0x0, 0x1ec4, 0xffe, &(0x7f0000000040)}) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000700)) write$P9_RCLUNK(r1, &(0x7f0000000240)={0x7, 0x79, 0x2}, 0x7) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/vsock\x00', 0x41fffd, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) dup2(r1, r1) 13:14:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x8000042, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20000, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) process_vm_writev(r2, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/1, 0x1}, {&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000440)=""/218, 0xda}, {&(0x7f0000000540)=""/236, 0xec}, {&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/240, 0xf0}, {&(0x7f0000000380)=""/32, 0x20}], 0x8, &(0x7f00000003c0)=[{&(0x7f0000000880)=""/150, 0x96}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)={@initdev, 0x0}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'nr0\x00', 0x0}) recvmsg(0xffffffffffffff9c, &(0x7f0000001780)={&(0x7f00000015c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001640)=""/112, 0x70}], 0x1, &(0x7f0000001700)=""/82, 0x52}, 0x10002) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x1, 0x8}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r9, 0x6193}, &(0x7f0000000240)=0x8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080000}, 0xc, &(0x7f0000001a80)={&(0x7f00000017c0)={0x2bc, r3, 0x0, 0x70bd2d, 0x8, {}, [{{0x8, 0x1, r4}, {0xc4, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x1d4, 0x2, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x100000000, 0x5, 0x8, 0x1000}, {0x100, 0x7, 0x5, 0x10001}, {0x2, 0x1, 0x7ff, 0x80}, {0x1, 0x9, 0x40, 0x3}, {0x4, 0x2, 0x1, 0x8}, {0x4b4, 0x4, 0x7fff, 0x7}, {0x1, 0x5, 0xef5, 0x2}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x80000001, 0x7, 0x9, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xa30}}}]}}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x48080}, 0x90) 13:14:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x7601, [0x40000022]}) 13:14:32 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x300]}, 0xb}, 0x7a) 13:14:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xbc, r2, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb5c}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) clone(0x8000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:32 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000000e) 13:14:32 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x500]}, 0xb}, 0x7a) [ 368.503410] binder_alloc: binder_alloc_mmap_handler: 16555 20005000-20008000 already mapped failed -16 [ 368.520399] QAT: Invalid ioctl 13:14:32 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000000f) 13:14:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='.$:)\x00', 0x6) ioctl$SG_IO(r0, 0x2286, 0x0) [ 368.590188] QAT: Invalid ioctl [ 368.605123] QAT: Invalid ioctl 13:14:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x7901, [0x40000022]}) [ 368.700143] binder_alloc: binder_alloc_mmap_handler: 16555 20005000-20008000 already mapped failed -16 13:14:32 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x600]}, 0xb}, 0x7a) 13:14:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x50000, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet(0x2b, 0x80000000000001, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xfffffffffffffd63) poll(&(0x7f0000000040)=[{r3}, {r2}, {r3}], 0x3, 0x0) [ 368.865174] IPVS: ftp: loaded support on port[0] = 21 13:14:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/176, 0xb0}, {0x0}], 0x2, &(0x7f0000001200)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f00000000c0)="15bf6234488dd25d726070") socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget(0x3, 0x2000, 0xa41, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000001240)=""/4096) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0xfffffffffffffffd) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000002240)={@mcast1, 0x81, r4}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xaf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\x06\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00') socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r5, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) keyctl$setperm(0x5, 0x0, 0x1100000) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) 13:14:32 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000010) 13:14:32 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x700]}, 0xb}, 0x7a) 13:14:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000040)=""/33) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x7a01, [0x40000022]}) 13:14:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x3fffffffffffd, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000c7df60)={0x7ff, @in6}, &(0x7f000064b000)=0x98) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r1}, 0x8) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) 13:14:33 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x900]}, 0xb}, 0x7a) [ 369.417306] binder_alloc: binder_alloc_mmap_handler: 16607 20005000-20008000 already mapped failed -16 13:14:33 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000011) 13:14:33 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000027c0)={@local, @empty, 0x0}, &(0x7f0000002800)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002840)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000002940)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002a40)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000002bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002a80)={0xe4, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8001}}}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40008c0}, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a06", 0x12}], 0x1) ioctl$EXT4_IOC_RESIZE_FS(r7, 0x40086610, &(0x7f0000000100)=0xfffffffffffffffe) close(r7) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) 13:14:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000e, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x7ff, 0x7, 0x3378}, {0x60, 0x401, 0x2, 0x7d}]}, 0x10) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:33 executing program 1: mkdir(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = shmget$private(0x0, 0x1000, 0x78000840, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x2a, 0x6, 0x0, {0x1, 0x0, 0x1, 0x0, '&'}}, 0x2a) 13:14:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x7b01, [0x40000022]}) 13:14:33 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xa00]}, 0xb}, 0x7a) 13:14:33 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000012) 13:14:33 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000013) 13:14:33 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3f00]}, 0xb}, 0x7a) 13:14:33 executing program 1: mkdir(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = shmget$private(0x0, 0x1000, 0x78000840, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x2a, 0x6, 0x0, {0x1, 0x0, 0x1, 0x0, '&'}}, 0x2a) 13:14:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x7f04, [0x40000022]}) 13:14:33 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4000]}, 0xb}, 0x7a) 13:14:34 executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x2, 0x4a98fb59a0f3b0e8) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuac\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f00000000c0)) r3 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x21, 0x0, 0x10) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x1, 0x96, 0x8200, 0x8, 0xa3, 0x5, 0xcd, 0x0, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000002c0)={r5, 0xbd}, 0x8) r6 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x5f4, 0x244200) fcntl$getownex(r6, 0x10, &(0x7f0000000180)={0x0, 0x0}) restart_syscall() move_pages(r7, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000140)={r8, 0x80000, r2}) 13:14:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') ioctl$KDSETMODE(r1, 0x4b3a, 0x7) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000040)='./file0\x00') ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x7fffffff, 0x7, 0x7, 0x8]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_ENDIAN(0x14, 0x2) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0/file0\x00', 0xe, 0x1) 13:14:34 executing program 1: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) setns(r3, 0x10000000) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x4008af13, &(0x7f00000127c0)={'team0\x00'}) ioctl$KDGKBDIACR(r3, 0x4008af10, &(0x7f0000000240)=""/75) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000000)={0x3, 0x7ff, 0x7, 0x2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r3, 0x28, &(0x7f00000001c0)}, 0x10) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000000c0)) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000140)) close(r1) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000002c0)=0x300000000) 13:14:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x8004, [0x40000022]}) 13:14:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000014) 13:14:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x80fe]}, 0xb}, 0x7a) 13:14:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xfe80]}, 0xb}, 0x7a) 13:14:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x8005, [0x40000022]}) 13:14:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x100000]}, 0xb}, 0x7a) 13:14:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000015) 13:14:34 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@local, @remote}, &(0x7f0000000040)=0xc) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x42, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000100), &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRES16], @ANYRESHEX=r0]}, 0x92) 13:14:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0xffffffffffffffe0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) [ 370.835501] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 13:14:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0xb}, 0x7a) 13:14:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x8601, [0x40000022]}) [ 370.932511] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 13:14:34 executing program 1: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) setns(r3, 0x10000000) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x4008af13, &(0x7f00000127c0)={'team0\x00'}) ioctl$KDGKBDIACR(r3, 0x4008af10, &(0x7f0000000240)=""/75) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000000)={0x3, 0x7ff, 0x7, 0x2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r3, 0x28, &(0x7f00000001c0)}, 0x10) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000000c0)) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000140)) close(r1) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000002c0)=0x300000000) 13:14:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000016) 13:14:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0xb}, 0x7a) 13:14:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r2 = dup2(r1, r1) r3 = syz_open_dev$rtc(0x0, 0x4, 0x6000) r4 = msgget(0xffffffffffffffff, 0x2a0) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000940)) modify_ldt$read(0x0, &(0x7f0000001600)=""/4096, 0x1000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f00000000c0)={r5, r6/1000+10000}, 0x10) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, 0x0) msgctl$MSG_STAT(r4, 0xb, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000880)={0x0, @in6={{0xa, 0x0, 0x0, @local, 0x1}}, 0x0, 0x8001}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000140), 0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, &(0x7f0000000400)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) getsockname$inet6(r2, 0x0, &(0x7f0000000a40)) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000680)={&(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000640)=[0x0, 0x0], 0x1, 0x6, 0x0, 0x2}) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0, &(0x7f0000000000)={0x2, 0x500000000000000, @empty=0x5a8}, 0x10) openat$audio(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000300), 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xffff, 0x0, 0x2}, 0xfffffffffffffeef) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) 13:14:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0xb}, 0x7a) 13:14:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x8701, [0x40000022]}) 13:14:35 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0xb}, 0x7a) 13:14:35 executing program 4: r0 = socket$kcm(0x10, 0x200000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0), 0x100001b4}, 0x0) 13:14:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x8705, [0x40000022]}) 13:14:35 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0xb}, 0x7a) 13:14:35 executing program 4: socket$vsock_dgram(0x28, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x1000000000004) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0xffffffffffffffe1, 0x3, 0xfffffffffffffff8, 0x1, 0xfff, 0x2, 0x80000001, 0x8000}) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c5628693232fba7e680129643c218fe59a2d19880076406c04c890000000a215a0004fbf50dfff90003a50000f94f24d4005e0000001d30221f1000010007008a96ff0000ec6b0f536e", 0x58}], 0x1) recvmmsg(r0, &(0x7f0000005040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 13:14:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x8b00, [0x40000022]}) 13:14:35 executing program 1: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) setns(r3, 0x10000000) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x4008af13, &(0x7f00000127c0)={'team0\x00'}) ioctl$KDGKBDIACR(r3, 0x4008af10, &(0x7f0000000240)=""/75) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000000)={0x3, 0x7ff, 0x7, 0x2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r3, 0x28, &(0x7f00000001c0)}, 0x10) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000000c0)) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000140)) close(r1) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000002c0)=0x300000000) 13:14:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000280)={0x1, {{0xa, 0x4e21, 0x5, @mcast2, 0x6}}, {{0xa, 0x4e22, 0x0, @mcast1, 0x100000001}}}, 0x108) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x13cab5d789a077fc, 0x0) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000040)=0x20) 13:14:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000017) 13:14:35 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0xb}, 0x7a) 13:14:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x100) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000080)={0x9, "32adf7a27fe72c2aa597d68f9b627b5de755ad382082e2b100acb241407e0805", 0x3, 0x800, 0x1, 0x50007, 0x10}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x65, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x77, &(0x7f0000000000), 0x8) close(r3) close(r1) 13:14:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x900d, [0x40000022]}) 13:14:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000018) 13:14:35 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0xb}, 0x7a) 13:14:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@loopback, @in=@multicast1}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) r2 = syz_open_procfs(r1, &(0x7f0000000140)='syscall\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 13:14:35 executing program 1: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) setns(r3, 0x10000000) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x4008af13, &(0x7f00000127c0)={'team0\x00'}) ioctl$KDGKBDIACR(r3, 0x4008af10, &(0x7f0000000240)=""/75) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000000)={0x3, 0x7ff, 0x7, 0x2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r3, 0x28, &(0x7f00000001c0)}, 0x10) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000000c0)) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000140)) close(r1) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000002c0)=0x300000000) 13:14:35 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0xb}, 0x7a) 13:14:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x9104, [0x40000022]}) [ 372.395149] IPVS: ftp: loaded support on port[0] = 21 13:14:36 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000019) [ 372.774802] chnl_net:caif_netlink_parms(): no params data found [ 372.820956] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.827384] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.834797] device bridge_slave_0 entered promiscuous mode [ 372.842053] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.848486] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.856081] device bridge_slave_1 entered promiscuous mode [ 372.880436] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 372.889837] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 372.907440] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 372.914877] team0: Port device team_slave_0 added [ 372.920170] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 372.927497] team0: Port device team_slave_1 added [ 372.932864] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 372.940044] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 372.982889] device hsr_slave_0 entered promiscuous mode [ 373.031076] device hsr_slave_1 entered promiscuous mode [ 373.101347] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 373.108417] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 373.130264] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 373.164148] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 373.170213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.177725] device bridge_slave_1 left promiscuous mode [ 373.184196] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.211919] device bridge_slave_0 left promiscuous mode [ 373.217365] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.352236] device hsr_slave_1 left promiscuous mode [ 373.406347] device hsr_slave_0 left promiscuous mode [ 373.473646] team0 (unregistering): Port device team_slave_1 removed [ 373.485876] team0 (unregistering): Port device team_slave_0 removed [ 373.496339] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 373.564716] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 373.678272] bond0 (unregistering): Released all slaves [ 373.799163] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 373.809091] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 373.817083] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 373.825430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 373.832469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 373.842385] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 373.848491] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.858701] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 373.865935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 373.874237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 373.882240] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.888558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.897790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 373.906196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 373.913689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 373.921862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.929371] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.935762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.945717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 373.953373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 373.963991] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 373.971225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 373.981930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 373.988891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 373.997847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 374.006194] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 374.017623] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 374.026316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 374.036391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 374.046584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 374.053669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 374.061834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 374.073729] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 374.080579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 374.089025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 374.098889] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 374.105185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 374.295901] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 374.305694] 8021q: adding VLAN 0 to HW filter on device batadv0 13:14:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x7fffffff, 0x40}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r2, 0xfffffffffffeffff}, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) 13:14:38 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0xb}, 0x7a) 13:14:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x9801, [0x40000022]}) 13:14:38 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x200000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000004c0)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0), r1, 0x2}}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r2 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 13:14:38 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000001a) 13:14:38 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x4, 0x4000) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0x10}, 0x1ff}}, 0x9, 0x8}, 0x90) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000200)={0x2, 0x0, @ioapic={0xd000, 0x6, 0x8001, 0x4, 0x0, [{0x0, 0x8, 0x3, [], 0x9}, {0x1, 0x2, 0xffffffffffffff81, [], 0xd06}, {0x7, 0x2, 0x2, [], 0x4}, {0x0, 0x0, 0x2, [], 0x34}, {0x5, 0x10001, 0xff, [], 0x81}, {0x7, 0x82c3, 0x9, [], 0x1}, {0x9, 0x0, 0x6, [], 0x7}, {0x0, 0x101, 0x7fffffff, [], 0x4}, {0x4, 0x9, 0x20, [], 0x8e3}, {0x1000, 0x20, 0x0, [], 0x7fa}, {0x7aa0000000000000, 0x100, 0xf683, [], 0xfffffffffffffffd}, {0x7f, 0x10001, 0x1}, {0x5f56, 0x10001, 0x4, [], 0xf398}, {0x200, 0x17, 0x0, [], 0x8001}, {0x9, 0x7f, 0xb71, [], 0x2}, {0x20, 0xff, 0x5, [], 0x2}, {0x1, 0x5, 0x6, [], 0xb3}, {0x6, 0x8, 0x4, [], 0x80000000}, {0x7, 0xa7, 0x800000, [], 0xffff}, {0xffff, 0x2b6, 0x5, [], 0x5958}, {0x1, 0x401, 0x2, [], 0x4}, {0xfff, 0x7fff, 0xffffffffffffffc0, [], 0x10001}, {0xbddf, 0x1, 0xcbc, [], 0xffffffffffffff3c}, {0x6, 0xfffffffffffffffb, 0xfffffffffffffa12, [], 0x9}]}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000300)) r2 = request_key(&(0x7f00000004c0)='rxr87V[Q,\xa3y\xd0sL k\xad|\xfd\x1a{0\xa7\x80\xe7\xdc\x01w\xef\xdf\xfa\x93\xd4\xcbre\x93\x9bSF\xd8\x94\f\xc2\xb2\xef\xb4\xba\xeeK\xa6p\xc1\xbd\xa4\xce\xb9\x17/\xb4\x14\xec\xf8\xff\x9f\xaa\x05\xd4\xbb\xc6\x83\xf4\x92\xd4\xf5\xb8\x1b \xfc\xf04\xb1U\xf1\xdd\xee\x9d\x90\xe8\x05_\xaf\xbbN\xca&\xa1\x85\xc4\xad\t\x9c\xaf\xdc\xd5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8eQ\xaf\xaa\x06\x88\xad5\xef\xees\xf05w/\x1f\xf9K\xd9\xe5\x13%\x8d\xf0Q\xad\xa9\xce\x0f\x9e\xfe\xb3\x97\x9b\xd8H\x02\xff\xa8\xe2', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='dev/ubi_ctrl\x00', 0x0) r3 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$link(0x8, r2, r3) dup3(r0, r0, 0x80000) syz_emit_ethernet(0x32, &(0x7f0000017f07)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x4305}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @loopback}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x5, 0x0, 0x4}}}}}}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x200400, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000040)={{0x5, 0x1, 0x3, 0x40, 0x5, 0x80000001}, 0xffffffff}) [ 374.337838] binder_alloc: binder_alloc_mmap_handler: 16840 20005000-20008000 already mapped failed -16 [ 374.357391] binder_alloc: binder_alloc_mmap_handler: 16840 20005000-20008000 already mapped failed -16 13:14:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x9901, [0x40000022]}) 13:14:38 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0xb}, 0x7a) 13:14:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0xc0) r2 = fcntl$getown(r0, 0x9) write$FUSE_LK(r1, &(0x7f0000000040)={0x28, 0x0, 0x1, {{0xffffffffffffffff, 0x8, 0x0, r2}}}, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000002c0)={0x0, 0x2, 0x0, {0x77359400}}) 13:14:38 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) r1 = accept4$tipc(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U+', 0x2}, 0x28, 0x3) accept4$tipc(r0, &(0x7f0000000140)=@name, &(0x7f0000000180)=0x10, 0x80000) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) r4 = geteuid() getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000540)={0x218, 0x0, 0x3, [{{0x3, 0x1, 0x2, 0x7, 0x38, 0x2, {0x4, 0x0, 0x8, 0x2, 0x7, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0x7f, 0x2, r2, r3, 0x6, 0xfffffffffffffd35}}, {0x2, 0x97b, 0x16, 0x1, 'trusted.overlay.nlink\x00'}}, {{0x6, 0x3, 0xffffffff, 0xa53e, 0x9, 0x8000, {0x5, 0x7ff, 0x7f, 0x8000, 0x9, 0x3, 0x8, 0x6, 0x2, 0xfffffffffffffff9, 0x10000, r4, r5, 0xffffffffffff0000, 0x8}}, {0x5, 0x80000001, 0x1c, 0x82, 'md5sumcpusetposix_acl_access'}}, {{0x1, 0x3, 0x2, 0x4, 0x8, 0x2, {0x4, 0x100000000, 0x4, 0x5, 0x8cf5, 0x27be, 0xffffffff80000001, 0xfffffffffffffff8, 0x6, 0x8001, 0x9, r6, r7, 0x2, 0x7}}, {0x6, 0xffff, 0x4, 0x6, 'bdev'}}]}, 0x218) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000780)={0x401, {{0xa, 0x4e20, 0x192, @mcast1, 0x8000}}}, 0x88) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000840), 0x10) write$P9_RREADLINK(r0, &(0x7f0000000880)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f00000008c0)=0x1) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000900)={{0x4, @addr=0x80}, 0x8, 0x0, 0x7}) fallocate(r0, 0x70, 0x1, 0x4) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000940)) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000980)={0x5e8, 0x0, 0x10003, 0x7fff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000009c0)={0x8, r8, 0x10001, 0x7f}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) pipe2(&(0x7f0000000a00)={0xffffffffffffffff}, 0x800) lseek(r9, 0x0, 0x3) r10 = socket$inet_dccp(0x2, 0x6, 0x0) fsetxattr$security_evm(r10, &(0x7f0000000a40)='security.evm\x00', &(0x7f0000000a80)=@v1={0x2, "60effea3b2d75ac2f2b76d7805"}, 0xe, 0x3) ioctl$PERF_EVENT_IOC_REFRESH(r9, 0x2402, 0x6e815893) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000ac0)=""/85) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000b40)) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/video0\x00', 0x2, 0x0) 13:14:38 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000001b) [ 374.623427] Unknown ioctl 19463 13:14:38 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0xb}, 0x7a) 13:14:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x80012, r0, 0x35) [ 374.695895] Unknown ioctl -2147204313 13:14:38 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x2) r0 = socket$inet6(0xa, 0x0, 0x102) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}}, [0x6, 0x100000001, 0x9, 0x7, 0x100000001, 0x101, 0x2, 0x7a4d, 0x8, 0x3, 0x9, 0x200, 0xcb, 0x80000001, 0x8000]}, &(0x7f0000000340)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000480)={r2, 0x0, 0x400}, &(0x7f00000004c0)=0x8) r3 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000000), 0x3}, 0x0) fcntl$setown(r3, 0x8, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\'', 0x1ff) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000380)=""/50) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000040)={0x0, 0x7fffffff, 0x2}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[]}}, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x5}, 0x1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x440, 0x148, 0x238, 0x238, 0x0, 0x238, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000580), {[{{@uncond, 0x0, 0x110, 0x148, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x400, 0x0, 0x1, [0x4, 0x1, 0x140000000000000, 0x20, 0x1, 0x1, 0x10000, 0x4, 0x7fff, 0x2, 0x8d, 0x6, 0x4, 0x6, 0x40, 0x4], 0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xb3, 0x80000000, 0x1}, {0x3ce, 0x5, 0x79f23ff6}, {0x9, 0xb7bf, 0x3}, 0x1, 0x2}}}, {{@ipv6={@local, @local, [0xffffffff, 0x0, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'yam0\x00', {0xff}, {0xff}, 0x3d, 0x5, 0x2, 0x11}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x727, 0x7, 0x1, [0x9da, 0x8000, 0x64, 0x9bc, 0xbf, 0x7, 0x7, 0x401, 0x49, 0x0, 0x1, 0x89, 0x401, 0x4, 0x1260, 0x5], 0x5}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) r5 = socket(0x1d, 0x4, 0x0) sendto$inet6(r5, &(0x7f0000000180), 0xaa8df75e, 0x0, 0x0, 0x0) 13:14:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x9e00, [0x40000022]}) [ 374.742696] Unknown ioctl -1070049712 [ 374.761098] Unknown ioctl 1074795139 [ 374.776678] Unknown ioctl -1071619020 [ 374.785247] Unknown ioctl 19463 13:14:38 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000001c) [ 374.842237] Unknown ioctl -2122820351 13:14:38 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3f000000]}, 0xb}, 0x7a) [ 374.864596] Unknown ioctl 1074554389 [ 374.889814] Unknown ioctl 19463 [ 374.930338] Unknown ioctl -2147204313 [ 374.962063] Unknown ioctl -1070049712 [ 374.984986] Unknown ioctl 1074795139 13:14:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x4) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) [ 375.008353] Unknown ioctl -1071619020 13:14:38 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000001d) [ 375.029000] Unknown ioctl 19463 [ 375.048631] can: request_module (can-proto-0) failed. [ 375.062968] Unknown ioctl -2122820351 13:14:38 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0xb}, 0x7a) 13:14:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xa001, [0x40000022]}) [ 375.076396] Unknown ioctl 1074554389 13:14:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x37, 0x101, 0x2, 0x8, 0x9, 0x4, 0x7, {0x0, @in6={{0xa, 0x4e24, 0xfffffffffffffff9, @ipv4={[], [], @multicast1}, 0x81}}, 0xff, 0x6f, 0x2eb8, 0x0, 0x1ad}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={r1, 0x101, 0x8}, 0xfffffcf2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x7, 0xdce, 0x7, 0x10001, 0x5, [{0x10000, 0x6, 0x401, 0x0, 0x0, 0x1}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x200}, {0x3ff, 0xffffffff00000001, 0x7fffffff, 0x0, 0x0, 0x300}, {0x4, 0x9, 0x32c, 0x0, 0x0, 0x200}, {0x80000001, 0x1, 0x7, 0x0, 0x0, 0x200}]}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket(0xa, 0x20000000001, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000300)=0x5) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r2, 0x1, 0xd, &(0x7f0000000140), 0x10) 13:14:38 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000001e) [ 375.232153] can: request_module (can-proto-0) failed. 13:14:38 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, 0xb}, 0x7a) 13:14:39 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x2) r0 = socket$inet6(0xa, 0x0, 0x102) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}}, [0x6, 0x100000001, 0x9, 0x7, 0x100000001, 0x101, 0x2, 0x7a4d, 0x8, 0x3, 0x9, 0x200, 0xcb, 0x80000001, 0x8000]}, &(0x7f0000000340)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000480)={r2, 0x0, 0x400}, &(0x7f00000004c0)=0x8) r3 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000000), 0x3}, 0x0) fcntl$setown(r3, 0x8, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\'', 0x1ff) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000380)=""/50) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000040)={0x0, 0x7fffffff, 0x2}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[]}}, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x5}, 0x1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x440, 0x148, 0x238, 0x238, 0x0, 0x238, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000580), {[{{@uncond, 0x0, 0x110, 0x148, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x400, 0x0, 0x1, [0x4, 0x1, 0x140000000000000, 0x20, 0x1, 0x1, 0x10000, 0x4, 0x7fff, 0x2, 0x8d, 0x6, 0x4, 0x6, 0x40, 0x4], 0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xb3, 0x80000000, 0x1}, {0x3ce, 0x5, 0x79f23ff6}, {0x9, 0xb7bf, 0x3}, 0x1, 0x2}}}, {{@ipv6={@local, @local, [0xffffffff, 0x0, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'yam0\x00', {0xff}, {0xff}, 0x3d, 0x5, 0x2, 0x11}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x727, 0x7, 0x1, [0x9da, 0x8000, 0x64, 0x9bc, 0xbf, 0x7, 0x7, 0x401, 0x49, 0x0, 0x1, 0x89, 0x401, 0x4, 0x1260, 0x5], 0x5}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) r5 = socket(0x1d, 0x4, 0x0) sendto$inet6(r5, &(0x7f0000000180), 0xaa8df75e, 0x0, 0x0, 0x0) 13:14:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xa00d, [0x40000022]}) 13:14:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r4 = memfd_create(&(0x7f0000000140)='-\xf7\xe5\xb4\x85\xdc\xf7\xdbG', 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x1081806) syz_emit_ethernet(0x63, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa7011b0c87ec991004b008100080000047ed42e670b3c3ac4d9e34fa21fa13dc14245db5b8823c9be72dd6fd87f0ba8596f9421b53315a6428721a0d77acbfedaf11138b8d423aa4ece54025c35"], 0x0) fcntl$addseals(r4, 0x409, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000040)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000340)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) syz_open_dev$loop(&(0x7f0000000d00)='/dev/loop#\x00', 0x417f, 0x8000000000100fff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000002c0)) r5 = getpid() ptrace$peekuser(0x3, r5, 0x8) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000300)={0x3, 0x20}) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x7, 0x68, 0x1, 0x3, 0x9, "900b21888b6cc77b101984261cafca360e11b6c7a13a0830cd29f419884847da90828288bebec9a65da1ba9bb02d8c9871511b6bee7194cfae74d7d4b41a5ee5", "627783b5afe9993d902ce10af431125ebedc76b0659a9cd7b79108b9097ed60e22e9cf55034bdf1fb1f0a15a01f32f2598064591156404681de46104820d931c", "8c5c4741e6ea115c84fc7f3b969deded47d3d964d140481071e204315cce1f9f", [0x0, 0x4]}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) getpid() r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getresgid(&(0x7f0000000400), &(0x7f0000000780), &(0x7f00000007c0)) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000440)={0x0, 0x8d, "4e8ab3d412f0035a0cb5c4166d70808e5fa4a01aea1bc03e2ec9183f554c30e17bf6b1a8dee7d30ed0c78ce7bdb27a083c41abadea9ac12eb9f16e059d88a790ed098bd5340d7a111dcb177a8c98ad51ace76d1255b4d7c80bc7c2b51b1d7b06437061d4f4bfd85c22c90639ce73f0a469065953960776fd13bc11e5436c6f5b786eaa4f994c4ff0b776c9628d"}, &(0x7f0000000240)=0x95) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000380)={r8, 0x44, "159723d3f64f2f654dd40fc68e2fa8f6677b298ba2fd324ff2993b4a235fd8d90eb293a99b41f9016429e56372d76127a4aed96ea9a5cb60af061c58b3247158e099b528"}, &(0x7f0000000280)=0x4c) ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f0000000100)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:14:39 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xfe800000]}, 0xb}, 0x7a) 13:14:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 13:14:39 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000021) [ 375.629023] can: request_module (can-proto-0) failed. 13:14:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xc100, [0x40000022]}) 13:14:39 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, 0xb}, 0x7a) [ 375.677625] binder_alloc: binder_alloc_mmap_handler: 16952 20005000-20008000 already mapped failed -16 13:14:39 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000022) 13:14:39 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x2) r0 = socket$inet6(0xa, 0x0, 0x102) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}}, [0x6, 0x100000001, 0x9, 0x7, 0x100000001, 0x101, 0x2, 0x7a4d, 0x8, 0x3, 0x9, 0x200, 0xcb, 0x80000001, 0x8000]}, &(0x7f0000000340)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000480)={r2, 0x0, 0x400}, &(0x7f00000004c0)=0x8) r3 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000000), 0x3}, 0x0) fcntl$setown(r3, 0x8, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\'', 0x1ff) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000380)=""/50) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000040)={0x0, 0x7fffffff, 0x2}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[]}}, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x5}, 0x1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x440, 0x148, 0x238, 0x238, 0x0, 0x238, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000580), {[{{@uncond, 0x0, 0x110, 0x148, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x400, 0x0, 0x1, [0x4, 0x1, 0x140000000000000, 0x20, 0x1, 0x1, 0x10000, 0x4, 0x7fff, 0x2, 0x8d, 0x6, 0x4, 0x6, 0x40, 0x4], 0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xb3, 0x80000000, 0x1}, {0x3ce, 0x5, 0x79f23ff6}, {0x9, 0xb7bf, 0x3}, 0x1, 0x2}}}, {{@ipv6={@local, @local, [0xffffffff, 0x0, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'yam0\x00', {0xff}, {0xff}, 0x3d, 0x5, 0x2, 0x11}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x727, 0x7, 0x1, [0x9da, 0x8000, 0x64, 0x9bc, 0xbf, 0x7, 0x7, 0x401, 0x49, 0x0, 0x1, 0x89, 0x401, 0x4, 0x1260, 0x5], 0x5}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) r5 = socket(0x1d, 0x4, 0x0) sendto$inet6(r5, &(0x7f0000000180), 0xaa8df75e, 0x0, 0x0, 0x0) 13:14:39 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x10000000000000]}, 0xb}, 0x7a) [ 375.830159] binder_alloc: binder_alloc_mmap_handler: 16952 20005000-20008000 already mapped failed -16 13:14:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xc200, [0x40000022]}) 13:14:39 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000000c0)=0x8696) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, &(0x7f000000d000)}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)=ANY=[], &(0x7f0000000540)) connect$inet6(r2, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) pwrite64(r1, &(0x7f0000000040)="99703ddd0e120511365e624b01ab7258bcb71a2a3c6b5a3dcc68c93a7bf2e7acde0f285ca2341c60c111ad7aec8389df91bce46168048744a8329bcca4ab2612f39616833eaf5564cd1c62fe49fa4e", 0x4f, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) 13:14:39 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0xb}, 0x7a) 13:14:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2020}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x26c, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x73}]}, @TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf244}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5f9}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0xb4, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4614}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40040) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) sched_yield() mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) [ 376.119440] can: request_module (can-proto-0) failed. 13:14:39 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000023) 13:14:39 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0xb}, 0x7a) 13:14:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xcd00, [0x40000022]}) 13:14:40 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x2) r0 = socket$inet6(0xa, 0x0, 0x102) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}}, [0x6, 0x100000001, 0x9, 0x7, 0x100000001, 0x101, 0x2, 0x7a4d, 0x8, 0x3, 0x9, 0x200, 0xcb, 0x80000001, 0x8000]}, &(0x7f0000000340)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000480)={r2, 0x0, 0x400}, &(0x7f00000004c0)=0x8) r3 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000000), 0x3}, 0x0) fcntl$setown(r3, 0x8, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\'', 0x1ff) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000380)=""/50) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000040)={0x0, 0x7fffffff, 0x2}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[]}}, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x5}, 0x1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x440, 0x148, 0x238, 0x238, 0x0, 0x238, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000580), {[{{@uncond, 0x0, 0x110, 0x148, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x400, 0x0, 0x1, [0x4, 0x1, 0x140000000000000, 0x20, 0x1, 0x1, 0x10000, 0x4, 0x7fff, 0x2, 0x8d, 0x6, 0x4, 0x6, 0x40, 0x4], 0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xb3, 0x80000000, 0x1}, {0x3ce, 0x5, 0x79f23ff6}, {0x9, 0xb7bf, 0x3}, 0x1, 0x2}}}, {{@ipv6={@local, @local, [0xffffffff, 0x0, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'yam0\x00', {0xff}, {0xff}, 0x3d, 0x5, 0x2, 0x11}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x727, 0x7, 0x1, [0x9da, 0x8000, 0x64, 0x9bc, 0xbf, 0x7, 0x7, 0x401, 0x49, 0x0, 0x1, 0x89, 0x401, 0x4, 0x1260, 0x5], 0x5}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) r5 = socket(0x1d, 0x4, 0x0) sendto$inet6(r5, &(0x7f0000000180), 0xaa8df75e, 0x0, 0x0, 0x0) [ 376.302051] binder_alloc: binder_alloc_mmap_handler: 16994 20005000-20008000 already mapped failed -16 13:14:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0xb}, 0x7a) 13:14:40 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000024) 13:14:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xce00, [0x40000022]}) 13:14:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0xb}, 0x7a) 13:14:40 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x111, 0x6}}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$video(&(0x7f00000004c0)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) poll(&(0x7f0000000000)=[{r1, 0x80}, {r1, 0x80}, {r1, 0x40}, {r2, 0x2108}, {r2}, {r1}, {r2, 0x200}], 0x7, 0xbd) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r1, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r1, 0x0) [ 376.687799] can: request_module (can-proto-0) failed. [ 376.908978] binder_alloc: binder_alloc_mmap_handler: 17031 20005000-20008000 already mapped failed -16 13:14:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, 0xb}, 0x7a) 13:14:40 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000025) 13:14:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.events\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x6) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000200)={0x4}) r4 = geteuid() getgroups(0x6, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee01, 0xee01]) write$FUSE_ENTRY(r3, &(0x7f0000000140)={0x90, 0xffffffffffffffff, 0x4, {0x2, 0x2, 0x0, 0x7, 0x0, 0x401000, {0x5, 0x4, 0x2f, 0x0, 0x1, 0x10000, 0x5, 0x8, 0xa54, 0x3f, 0x0, r4, r5, 0x506b42cd, 0xffffffff}}}, 0x90) ioctl$KVM_ENABLE_CAP(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x404ffff8000]}) 13:14:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xd004, [0x40000022]}) 13:14:40 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000000c0)=0x8696) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, &(0x7f000000d000)}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)=ANY=[], &(0x7f0000000540)) connect$inet6(r2, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) pwrite64(r1, &(0x7f0000000040)="99703ddd0e120511365e624b01ab7258bcb71a2a3c6b5a3dcc68c93a7bf2e7acde0f285ca2341c60c111ad7aec8389df91bce46168048744a8329bcca4ab2612f39616833eaf5564cd1c62fe49fa4e", 0x4f, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) [ 377.092355] syz-executor4: vmalloc: allocation failure: 8631877568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 13:14:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0xb}, 0x7a) 13:14:40 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000026) [ 377.250215] CPU: 1 PID: 17048 Comm: syz-executor4 Not tainted 5.0.0-rc1+ #21 [ 377.257448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.266810] Call Trace: [ 377.269411] dump_stack+0x1db/0x2d0 [ 377.273055] ? dump_stack_print_info.cold+0x20/0x20 [ 377.278088] ? idr_get_free+0xee0/0xee0 [ 377.282086] warn_alloc.cold+0xc2/0x1c8 [ 377.286097] ? zone_watermark_ok_safe+0x420/0x420 [ 377.290984] ? mark_held_locks+0x100/0x100 [ 377.295245] ? finish_task_switch+0x1e9/0xac0 [ 377.299774] ? find_held_lock+0x35/0x120 [ 377.303851] ? finish_task_switch+0x1e9/0xac0 [ 377.308377] __vmalloc_node_range+0x57a/0x910 [ 377.312890] ? kvm_arch_create_memslot+0xc3/0x570 [ 377.317745] ? vfree_atomic+0xe0/0xe0 [ 377.321579] ? add_lock_to_list.isra.0+0x450/0x450 [ 377.326538] ? kvm_arch_create_memslot+0xc3/0x570 [ 377.331401] __vmalloc_node_flags_caller+0x71/0x90 [ 377.336338] ? kvm_arch_create_memslot+0xc3/0x570 [ 377.341206] kvmalloc_node+0xdc/0x100 [ 377.345050] kvm_arch_create_memslot+0xc3/0x570 [ 377.349739] __kvm_set_memory_region+0x1cbb/0x2c40 [ 377.354696] ? kvm_vcpu_compat_ioctl+0x490/0x490 [ 377.359473] ? try_to_wake_up+0xf9/0x1480 [ 377.363634] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 377.368774] ? __might_fault+0x12b/0x1e0 [ 377.372855] ? lock_release+0xc40/0xc40 [ 377.376875] kvm_set_memory_region+0x2f/0x60 [ 377.381295] kvm_vm_ioctl+0xafa/0x1fe0 [ 377.385200] ? __lock_acquire+0x572/0x4a30 [ 377.389448] ? kasan_check_read+0x11/0x20 [ 377.393600] ? do_raw_spin_unlock+0xa0/0x330 [ 377.398021] ? kvm_unregister_device_ops+0x70/0x70 [ 377.402987] ? mark_held_locks+0x100/0x100 [ 377.407232] ? __lock_acquire+0x572/0x4a30 [ 377.411489] ? add_lock_to_list.isra.0+0x450/0x450 [ 377.416423] ? mark_held_locks+0x100/0x100 [ 377.420673] ? lock_downgrade+0x910/0x910 [ 377.424828] ? kasan_check_read+0x11/0x20 [ 377.429016] ? __fget+0x472/0x710 [ 377.432472] ? find_held_lock+0x35/0x120 [ 377.436545] ? __fget+0x472/0x710 [ 377.440018] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 377.445566] ? lock_downgrade+0x910/0x910 [ 377.449740] ? kasan_check_read+0x11/0x20 [ 377.453917] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 377.459224] ? rcu_read_unlock_special+0x380/0x380 [ 377.464179] ? __fget+0x499/0x710 [ 377.467649] ? iterate_fd+0x4b0/0x4b0 [ 377.471467] ? lock_release+0xc40/0xc40 [ 377.475447] ? kvm_unregister_device_ops+0x70/0x70 [ 377.480389] do_vfs_ioctl+0x107b/0x17d0 [ 377.484405] ? ioctl_preallocate+0x2f0/0x2f0 [ 377.488824] ? __fget_light+0x2db/0x420 [ 377.492826] ? fget_raw+0x20/0x20 [ 377.496315] ? put_timespec64+0x115/0x1b0 [ 377.500485] ? nsecs_to_jiffies+0x30/0x30 [ 377.504656] ? do_syscall_64+0x8c/0x800 [ 377.508666] ? do_syscall_64+0x8c/0x800 [ 377.512652] ? lockdep_hardirqs_on+0x415/0x5d0 [ 377.517266] ? security_file_ioctl+0x93/0xc0 [ 377.521703] ksys_ioctl+0xab/0xd0 [ 377.525193] __x64_sys_ioctl+0x73/0xb0 [ 377.529150] do_syscall_64+0x1a3/0x800 [ 377.533054] ? syscall_return_slowpath+0x5f0/0x5f0 [ 377.537994] ? prepare_exit_to_usermode+0x232/0x3b0 [ 377.543019] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 377.547940] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 377.553143] RIP: 0033:0x457ec9 [ 377.556344] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 377.575270] RSP: 002b:00007f4ab1610c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.583005] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 377.590280] RDX: 0000000020000000 RSI: 000000004020ae46 RDI: 0000000000000004 13:14:41 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3, 0x288000) connect$rds(r0, &(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000000c0)={{0x3c, @loopback, 0x4e20, 0x2, 'wrr\x00', 0x29, 0x0, 0x7}, {@multicast2, 0x4e22, 0x12000, 0x1, 0xfffffffffffffffc, 0xf7ca}}, 0x44) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x4, 0x90017, r0, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000140)=0x101, 0x4) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000180)={0x800, 0x8, 0x6}) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) 13:14:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xd901, [0x40000022]}) [ 377.597548] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 377.604873] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4ab16116d4 [ 377.612143] R13: 00000000004c0a70 R14: 00000000004d24d0 R15: 00000000ffffffff 13:14:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0xb}, 0x7a) 13:14:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/128, 0x80}, {&(0x7f0000000140)=""/156, 0x9c}], 0x2, &(0x7f0000000240)=""/75, 0x4b}, 0x1ff}, {{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/1, 0x1}, {&(0x7f0000000380)=""/186, 0xba}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x3}, 0x7}, {{&(0x7f0000000480)=@rc, 0x80, &(0x7f0000001740)=[{&(0x7f0000000500)=""/120, 0x78}, {&(0x7f0000000580)=""/95, 0x5f}, {&(0x7f0000000600)=""/94, 0x5e}, {&(0x7f0000000680)=""/106, 0x6a}], 0x4, &(0x7f0000001780)=""/253, 0xfd}, 0x40}, {{&(0x7f0000001880)=@nfc, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001900)=""/133, 0x85}, {&(0x7f00000019c0)=""/194, 0xc2}, {&(0x7f0000001ac0)=""/101, 0x65}], 0x3, &(0x7f0000001b80)=""/94, 0x5e}, 0x4e1}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000001c00)=""/188, 0xbc}, {&(0x7f0000001cc0)=""/59, 0x3b}, {&(0x7f0000001d00)=""/247, 0xf7}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/243, 0xf3}, {&(0x7f0000002f00)=""/158, 0x9e}, {&(0x7f0000002fc0)=""/50, 0x32}, {&(0x7f0000003000)=""/196, 0xc4}], 0x8, &(0x7f0000003180)=""/110, 0x6e}, 0x6}, {{&(0x7f0000003200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003280)=""/213, 0xd5}, {&(0x7f0000003380)=""/43, 0x2b}, {&(0x7f00000033c0)=""/251, 0xfb}], 0x3, &(0x7f0000003500)=""/98, 0x62}, 0xa405ef800000000}], 0x6, 0x0, &(0x7f0000003700)) getpeername$packet(r1, &(0x7f0000003740), &(0x7f0000003780)=0x14) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000000)='md5sumcgroupeth1GPLself\x00', 0x18) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x2, r2}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0xd0e, 0x5, 0x3f, 0x1, 0x9, 0x60, 0x4}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x6a75, 0x4) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) [ 377.821112] Mem-Info: [ 377.823701] active_anon:146323 inactive_anon:190 isolated_anon:0 [ 377.823701] active_file:7809 inactive_file:41853 isolated_file:0 [ 377.823701] unevictable:0 dirty:482 writeback:0 unstable:0 [ 377.823701] slab_reclaimable:13106 slab_unreclaimable:107593 [ 377.823701] mapped:55404 shmem:374 pagetables:1565 bounce:0 [ 377.823701] free:1207870 free_pcp:407 free_cma:0 13:14:41 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000027) [ 377.935069] Node 0 active_anon:585160kB inactive_anon:760kB active_file:31096kB inactive_file:167412kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:221516kB dirty:1924kB writeback:0kB shmem:1496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 526336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 377.947386] binder_alloc: binder_alloc_mmap_handler: 17074 20005000-20008000 already mapped failed -16 13:14:41 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x111, 0x6}}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$video(&(0x7f00000004c0)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) poll(&(0x7f0000000000)=[{r1, 0x80}, {r1, 0x80}, {r1, 0x40}, {r2, 0x2108}, {r2}, {r1}, {r2, 0x200}], 0x7, 0xbd) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r1, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r1, 0x0) 13:14:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0xb}, 0x7a) 13:14:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xdb01, [0x40000022]}) [ 378.080675] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 378.125998] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 378.169446] binder_alloc: binder_alloc_mmap_handler: 17074 20005000-20008000 already mapped failed -16 [ 378.347115] binder_alloc: binder_alloc_mmap_handler: 17086 20005000-20008000 already mapped failed -16 [ 378.356784] lowmem_reserve[]: 0 2535 2537 2537 [ 378.361827] Node 0 DMA32 free:1031360kB min:36080kB low:45100kB high:54120kB active_anon:585388kB inactive_anon:760kB active_file:31096kB inactive_file:167412kB unevictable:0kB writepending:1924kB present:3129332kB managed:2599664kB mlocked:0kB kernel_stack:7872kB pagetables:6260kB bounce:0kB free_pcp:1680kB local_pcp:1280kB free_cma:0kB [ 378.436845] lowmem_reserve[]: 0 0 2 2 [ 378.441236] Node 0 Normal free:1668kB min:2076kB low:2080kB high:2084kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:96kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 378.477872] lowmem_reserve[]: 0 0 0 0 [ 378.488379] Node 1 Normal free:3784176kB min:53780kB low:67224kB high:80668kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 378.522333] lowmem_reserve[]: 0 0 0 0 [ 378.526147] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 378.545320] Node 0 DMA32: 2985*4kB (UM) 3965*8kB (UME) 3257*16kB (UM) 1632*32kB (UME) 878*64kB (UME) 89*128kB (UME) 8*256kB (UM) 5*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 197*4096kB (M) = 1032220kB [ 378.569582] Node 0 Normal: 13*4kB (ME) 14*8kB (ME) 6*16kB (ME) 6*32kB (ME) 1*64kB (E) 1*128kB (M) 0*256kB 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 1668kB [ 378.590040] Node 1 Normal: 66*4kB (UE) 269*8kB (UE) 254*16kB (UE) 63*32kB (UME) 17*64kB (UME) 11*128kB (U) 5*256kB (UME) 5*512kB (UM) 3*1024kB (UM) 1*2048kB (E) 919*4096kB (M) = 3784176kB [ 378.613608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 378.625766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 378.638156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 378.653552] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 378.665491] 50045 total pagecache pages [ 378.669484] 0 pages in swap cache [ 378.676268] Swap cache stats: add 0, delete 0, find 0/0 [ 378.685364] Free swap = 0kB [ 378.688386] Total swap = 0kB [ 378.694790] 1965979 pages RAM [ 378.697901] 0 pages HighMem/MovableOnly [ 378.705222] 343989 pages reserved [ 378.708692] 0 pages cma reserved 13:14:42 executing program 4: msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x100, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x9, 0x2, 0x10, &(0x7f0000ffd000/0x3000)=nil, 0x2}) 13:14:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000028) 13:14:42 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0xb}, 0x7a) 13:14:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xde01, [0x40000022]}) 13:14:42 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') ioctl$FS_IOC_GETFLAGS(r0, 0xb704, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f00000000c0)=0x2, 0x4) [ 378.874143] binder_alloc: binder_alloc_mmap_handler: 17105 20005000-20008000 already mapped failed -16 13:14:42 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0xb}, 0x7a) 13:14:42 executing program 1: mkdir(0x0, 0x0) alarm(0x3) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c65300a92e2c1d779768dea6a5556bd955ddfa9686b9e18fe2888596694758bf6c354ac407bf5e40ca87e030f33002139564084cebe4e9f87acee977ad955bae997625ff7ccc3e94a148039383f4decabc2b7bc099bfc40978f056b9c1ce4813c9dde77f2bbe12c3b0f1f2ee7ed497994ecc8d7349e1a6b899df36799d8a0a6611360590c3ca9fc25e8256da8605e3b5da6c4a0837db0db91d7a1b67ea318e928f8cebff745eef827f999de2365e4fc49e56d058d50b31ab73c56aaccfdec54000000000000"], 0xcd) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000180)={{0x2b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x3, 'none\x00', 0x1, 0x7, 0x52}, {@broadcast, 0x4e23, 0x2000, 0xffffffffffffffff, 0x5, 0x7ff}}, 0x44) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x100000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) shmget(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) getresgid(0x0, 0x0, 0x0) getpgrp(0x0) chdir(0x0) ustat(0x6, &(0x7f0000000340)) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) umount2(&(0x7f0000000000)='./file0\x00', 0x3) write$UHID_INPUT(r1, &(0x7f0000001040)={0x8, "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", 0x1000}, 0x1006) keyctl$unlink(0x9, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000240)=0x2, 0x3) ptrace$cont(0x3f, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) 13:14:42 executing program 4: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000004c0)=0xe8) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='security.capability\x00', &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x3}, {0x7, 0x5}], r0}, 0x18, 0x3) r1 = socket$inet(0x10, 0x3, 0xc) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r3, 0x6, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0xffffffff, 0x3bc) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$sndtimer(&(0x7f0000000600)='/dev/snd/timer\x00', 0x0, 0x282002) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r5, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="75e8521eaef1fb38d647699a4bff34c2b97d9b1ae6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r7, 0x9}, &(0x7f00000002c0)=0x8) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000200)={0x4, 0x5, 0x2, 0x7, 0x2, 0x1ff}) fcntl$setpipe(r6, 0x407, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket(0x10, 0x20000000080003, 0xc) write(r4, &(0x7f0000000000)="1f0000000102fffffd3b54c007110000f30501000b000600000423ca310000", 0x1f) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000040)=""/15) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) fcntl$dupfd(r2, 0x0, r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', r8}) mremap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x2000, 0x0, &(0x7f0000b45000/0x2000)=nil) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000000a43ba5d806055b6fdd80b40000000090001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) 13:14:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xe006, [0x40000022]}) 13:14:42 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x400000) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/74, 0x4a}, &(0x7f00000000c0)}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0xfffffffffffffffd, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="c37172c13d5ea1825ad657691d06fe68", 0x10) clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r1, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80010, r1, 0x800000) 13:14:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000029) 13:14:42 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0xb}, 0x7a) 13:14:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000000)=""/42, &(0x7f0000000040)=0x2a) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000240)={0x4000000000000125}) 13:14:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xfe00, [0x40000022]}) [ 379.244522] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 13:14:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) socketpair$unix(0x1, 0x0, 0x0, 0x0) fsync(r0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x4000000002000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r0, 0x0) 13:14:42 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, 0xb}, 0x7a) 13:14:43 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x1000, 0x101000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ip6tnl0\x00', 0x2000}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xee30, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) accept4$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001280)=0x14, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000012c0)={@loopback, 0x2f, r2}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0xf, {0x0, 0xfff, 0x4, 0x6}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r3, 0x80045440, 0x709000) 13:14:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0xb}, 0x7a) 13:14:43 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000002a) [ 379.434374] binder_alloc_mmap_handler: 1 callbacks suppressed [ 379.434388] binder_alloc: binder_alloc_mmap_handler: 17162 20005000-20008000 already mapped failed -16 [ 379.466996] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 13:14:43 executing program 4: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000004c0)=0xe8) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='security.capability\x00', &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x3}, {0x7, 0x5}], r0}, 0x18, 0x3) r1 = socket$inet(0x10, 0x3, 0xc) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r3, 0x6, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0xffffffff, 0x3bc) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$sndtimer(&(0x7f0000000600)='/dev/snd/timer\x00', 0x0, 0x282002) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r5, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="75e8521eaef1fb38d647699a4bff34c2b97d9b1ae6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r7, 0x9}, &(0x7f00000002c0)=0x8) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000200)={0x4, 0x5, 0x2, 0x7, 0x2, 0x1ff}) fcntl$setpipe(r6, 0x407, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket(0x10, 0x20000000080003, 0xc) write(r4, &(0x7f0000000000)="1f0000000102fffffd3b54c007110000f30501000b000600000423ca310000", 0x1f) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000040)=""/15) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) fcntl$dupfd(r2, 0x0, r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', r8}) mremap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x2000, 0x0, &(0x7f0000b45000/0x2000)=nil) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000000a43ba5d806055b6fdd80b40000000090001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) 13:14:43 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0xc0002) write$tun(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x1000) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000240)={0xc9, "69652ecd2d171574f45d3b0ca6fcf5998bf646085d7e92a47e6af4f669ac3378f1d254277e9f23af8eab96ed5a2fe4c7fec04de242ff25477b95de343cfd7912b318e36e88650c73683e83859354472dbef64ac9d85dd272009f4edd36010fe5bce13b7f7649bbef4a9fbdc90ead1ee63783fc248dbbc5bc4a85cd57934938267ace50dd9367448455ae664a48af335c1dd299ec19866924c200029e20ec47da51bf2c93da90f372c5685dda07500f96c38678192935d8fc2be9286835eda6ed9802f24328c0046fce"}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000100)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) pipe(&(0x7f0000000180)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40, 0x0) 13:14:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, 0xb}, 0x7a) 13:14:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xff02, [0x40000022]}) [ 379.593514] binder_alloc: binder_alloc_mmap_handler: 17162 20005000-20008000 already mapped failed -16 13:14:43 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000002b) 13:14:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xfe80000000000000]}, 0xb}, 0x7a) 13:14:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x10001) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) pipe(&(0x7f0000000040)) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xff0b, [0x40000022]}) 13:14:43 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000002c) 13:14:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0xb}, 0x7a) [ 379.920602] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 379.998943] binder_alloc: binder_alloc_mmap_handler: 17203 20005000-20008000 already mapped failed -16 13:14:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000006000)='/dev/ppp\x00', 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000540)={"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"}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000005c0)=""/246) 13:14:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0xb}, 0x7a) 13:14:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x10040, [0x40000022]}) 13:14:44 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) connect(r0, &(0x7f0000000100)=@nl=@unspec, 0x80) 13:14:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="60000000a046908359ff90605caa6193df31d17a5c2f11fae5d3c028d15c6b53c11c5244000000e007003bd4fa60fac92db9caca4b81673ad73901b91e350e4ac766e4538f005377388ea109bff197204ef00416280ebd88ec39213b3be73d57a82d1e75da8d"], &(0x7f0000000080)=0x68) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x7, 0x3ff, 0xc, 0x7, 0x48, 0x7, 0x4, 0x488, r2}, &(0x7f0000000100)=0x20) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r1, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)=""/102, 0x66, 0x0}}, 0x10) fsetxattr$security_evm(r0, &(0x7f0000000400)='security.evm\x00', &(0x7f0000000440)=ANY=[@ANYBLOB], 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r3, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, r4, 0x0, 0x0, @in={0x2, 0x4e24, @remote}}}, 0xa0) mmap$binder(&(0x7f0000002000/0xf000)=nil, 0xf000, 0x10000000000000, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000002d) 13:14:44 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xb}, 0x7a) 13:14:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x100c0, [0x40000022]}) 13:14:44 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000280)={0xffffffff, 0x0, 0x0, 0x1ff}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000500)={r1}) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffff9c, 0x0, 0x4, &(0x7f0000000400)='em0\x00', 0xffffffffffffffff}, 0x30) r3 = syz_open_dev$usbmon(0x0, 0x9af, 0x0) write$P9_RREADDIR(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0x0, 0x8, 0x8, 0x1, 0x0, 0x65, 0x40303, 0x1, 0x0, 0x0, 0x8001, 0x0, 0x0, 0xb3, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dd, 0x373, 0x100000000, 0x0, 0x0, 0x652f, 0x0, 0xfffffffffffffff8, 0x0, 0x1ff, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0, 0x9}, 0x10, 0x3, 0x1, 0x9, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000006c0), &(0x7f0000000700)=0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000140)=0x84, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000540)={0x0, 0xff, "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"}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000900)={r5, 0x6, 0x30}, &(0x7f0000000940)=0xc) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r3, 0x1686, 0x7}) syncfs(r2) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x1ff) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000480)={'icmp\x00'}, &(0x7f00000004c0)=0x1e) write$binfmt_elf32(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1b1) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) socket$inet6_udplite(0xa, 0x2, 0x88) 13:14:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = getpgid(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x1, r2}) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:44 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0xb}, 0x7a) 13:14:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000002e) 13:14:44 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0xb}, 0x7a) 13:14:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xffffffffffffffff) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x90012, r0, 0x3) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x20000, [0x40000022]}) 13:14:44 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000240)={r1, 0x2}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x21, &(0x7f0000000280)={@local, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast2}, 0xc) lstat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000380)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x4000000004002, 0x0) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f00000002c0)=0x1ff) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) syz_open_dev$vivid(&(0x7f0000000340)='/dev/video#\x00', 0x0, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002780)={{{@in6=@mcast2, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000002880)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000028c0)={@remote, @multicast2}, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x7, 0x8}, &(0x7f0000001440)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000014c0)={r8, 0xffffffffffffffff}, 0xffffffffffffffd0) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x2d000}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000080)) 13:14:44 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xb}, 0x7a) 13:14:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x2a, @dev={0xfe, 0x80, [], 0x26}, 0x1000}}}, 0x84) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:44 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0xb}, 0x7a) 13:14:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000002f) [ 381.586724] syz-executor1 (17270) used greatest stack depth: 17672 bytes left 13:14:45 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000280)={0xffffffff, 0x0, 0x0, 0x1ff}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000500)={r1}) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffff9c, 0x0, 0x4, &(0x7f0000000400)='em0\x00', 0xffffffffffffffff}, 0x30) r3 = syz_open_dev$usbmon(0x0, 0x9af, 0x0) write$P9_RREADDIR(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0x0, 0x8, 0x8, 0x1, 0x0, 0x65, 0x40303, 0x1, 0x0, 0x0, 0x8001, 0x0, 0x0, 0xb3, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dd, 0x373, 0x100000000, 0x0, 0x0, 0x652f, 0x0, 0xfffffffffffffff8, 0x0, 0x1ff, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0, 0x9}, 0x10, 0x3, 0x1, 0x9, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000006c0), &(0x7f0000000700)=0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000140)=0x84, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000540)={0x0, 0xff, "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"}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000900)={r5, 0x6, 0x30}, &(0x7f0000000940)=0xc) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r3, 0x1686, 0x7}) syncfs(r2) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x1ff) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000480)={'icmp\x00'}, &(0x7f00000004c0)=0x1e) write$binfmt_elf32(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1b1) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) socket$inet6_udplite(0xa, 0x2, 0x88) 13:14:45 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0xb}, 0x7a) 13:14:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x201c0, [0x40000022]}) 13:14:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x100, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000340)="24000000100007031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) pread64(r0, &(0x7f0000000080)=""/70, 0x46, 0x0) 13:14:45 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000030) 13:14:45 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0xb}, 0x7a) [ 381.875256] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 381.912221] netlink: 'syz-executor1': attribute type 1 has an invalid length. 13:14:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x40000, [0x40000022]}) 13:14:45 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20000, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x501000, 0x0) ioctl(r1, 0x2, &(0x7f0000000080)="955fa5f8b0cc2d2fb72df77d20a9ef6f0127d8eb5e5a548f222c422866f072b57b0dd52d64213c0c0301dedaef7de3fc2f82d709c343e26ad6a2ce9c663b95e9301ea9e6dfe45c49e88dae84ec3d2575c1bbdd3192f607a462c87d2390226cc5714ae82802a51cbfdf5494b3a6b8f47ad9c771a06b99ebd7070c1022058c658aac4d19d271d6ab3342437c0b") setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x75, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000140)) 13:14:45 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000031) 13:14:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/dev/binder#\x00'}]}, 0x19) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:45 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0xb}, 0x7a) 13:14:45 executing program 1: clone(0x7ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000180)='coredump_filter\x00', 0xffffffffffffffff}, 0x30) r2 = syz_open_procfs(r0, &(0x7f0000000200)='nG\x00\x00\x00\x00\x00\x00\x04dFzI\xc7\xa8\xeeTi\xc6\x81p\xf6vO\xd6\xe2\xe6D\xd9\b\xc5\xb31A\x87\xd1\x94\xf5*\xb1\xce\xf3\x80\xf0\a\xad\x98\xd1\xe9\x9fi\xff\x9bh_\x9c\x06Q\x1b8\xd5\xc0\xc8\x15\xd6\xef\xb4\x9f\x17\xcc\xec\x80;\xa5\x9c\x06\xe1rl%\xb4\xd3\xb0\x1b\xa4\xd9\\y\xc0\x8c`\x8djA\x06Y\xa00xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000340), 0x10000014c) socket$rxrpc(0x21, 0x2, 0xa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) listen(r4, 0x0) ioprio_set$pid(0x2, r0, 0x8) r9 = add_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r9, &(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)='%\x00') ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000000)={0x87, 0x4, 0x3}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000040)) 13:14:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fchdir(r0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000001400)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0xa01, 0x0, 0x0, {{@in6=@mcast1, @in6=@remote}, {@in6=@ipv4={[], [], @remote}, 0x0, 0x2b}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc7539(ctr(serpent),sha384-ssse3)\x00'}}}]}, 0xfffffdb9}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 13:14:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x80000, [0x40000022]}) 13:14:46 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000032) 13:14:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0xb}, 0x7a) 13:14:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, 0xb}, 0x7a) 13:14:46 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000033) 13:14:46 executing program 4: r0 = socket$inet(0x10, 0x10000000003, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000a0a07121dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x180) [ 382.601830] device bridge_slave_1 left promiscuous mode [ 382.607339] bridge0: port 2(bridge_slave_1) entered disabled state 13:14:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x4d564b, [0x40000022]}) 13:14:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0xb}, 0x7a) [ 382.705453] device bridge_slave_0 left promiscuous mode [ 382.705600] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.836426] IPVS: ftp: loaded support on port[0] = 21 [ 383.004367] device hsr_slave_1 left promiscuous mode [ 383.037141] device hsr_slave_0 left promiscuous mode [ 383.086609] team0 (unregistering): Port device team_slave_1 removed [ 383.097685] team0 (unregistering): Port device team_slave_0 removed [ 383.109102] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 383.147635] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 383.264101] bond0 (unregistering): Released all slaves [ 383.448164] chnl_net:caif_netlink_parms(): no params data found [ 383.494595] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.502249] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.509241] device bridge_slave_0 entered promiscuous mode [ 383.516384] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.522918] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.529863] device bridge_slave_1 entered promiscuous mode [ 383.552000] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 383.561688] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 383.578750] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 383.586281] team0: Port device team_slave_0 added [ 383.591907] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 383.599070] team0: Port device team_slave_1 added [ 383.604521] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 383.611947] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 383.665417] device hsr_slave_0 entered promiscuous mode [ 383.730895] device hsr_slave_1 entered promiscuous mode [ 383.791259] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 383.798194] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 383.872005] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.878353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.885038] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.891501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.922358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.930161] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 383.942990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 383.950599] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.957995] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.971579] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 383.977641] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.987945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 383.996291] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.002713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.023852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 384.032455] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.038800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.046480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 384.062882] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 384.070293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 384.078162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 384.089050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.106879] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 384.113050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 384.120385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 384.145814] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 384.163948] 8021q: adding VLAN 0 to HW filter on device batadv0 13:14:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x40200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = fcntl$dupfd(r0, 0x406, r0) name_to_handle_at(r1, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="af000000fa5a0000108f3797500bc36cde9cc10d6711c0898120f76b4ff8082443daa1aae916b90d7db24053fa1c4e44de4984cb6bf68523c41636de08ca803f1652afbece7e9dd58ed748a8e6af506dd07b209edb56cf5f730007000000b6696308671b0ccc23e7361bd0ab5bc5dfd99f08524266915b77f3f806851a3f2f3ee808c1e2a7d9f2bfd3ac0ca855dc7015852d4d746c40c86940b8e70f42c1b63e744451f85fa3190a1bd5dab749410b"], &(0x7f0000000280), 0x1000) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000000)={{0x3, 0x6}, {0x6, 0x8000}, 0x7, 0x7, 0x17f2}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x40085112, &(0x7f00000000c0)={{0x7fffffff, 0xa}, {}, 0xfdfdffff}) fdatasync(r2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000002c0)=0x3) 13:14:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000034) 13:14:47 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0xb}, 0x7a) 13:14:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x80ffff, [0x40000022]}) 13:14:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = msgget(0x2, 0x4) msgrcv(r1, &(0x7f0000000580)={0x0, ""/107}, 0x73, 0x0, 0x2000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$tipc(r2, &(0x7f0000000440)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x3}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)="e4b0661b47d41ea85da3a9bf35a29c40e31ccba919bc57bcbc8a67d4130422b7cd8ebd459854fbe5a9cb97bc00124d3f73c65c2693c8d49c580581e6ab4cbc30784cda4a87a7", 0x46}, {&(0x7f0000000140)="f1c423b8e801efcc390510a6b3c6454df01cc2c3750076bc060236e08349d23b5201cc6c349e074bd8fca0d55f8145a70c97728462749935eef7e33ae364c0ca6115f508cd688c32c8a290e68029", 0x4e}, {&(0x7f0000000f00)="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", 0x1000}, {&(0x7f0000000040)="ae8f4cda10fe0dba4c2dcb2ff90d9ecd190189683973a6ee45b3b2189dcb1cc2a5afa166f8", 0x25}, {&(0x7f00000001c0)="758b54d09d4a21960e47093093adf40270f0889b6c5d6dfb748daaa0bc1af1c64b0a59c9e8cf05d7afcdbbf97c94294f6b3d7d9dfe297d4befb47d04177dbc167ba50b14cac58f9214346ebe09d40a2aa24dd67584c7aa8f", 0x58}, {&(0x7f0000000240)="4f6fbb31f77d16820e2f4f2c9bb3c65192f0203fcde388bcdfc8cd787a3a2be9553de6e267660221c47f1c85e5088a642d41072c18ed1f8acc797ae2fa6d9daa7dc4b98daa79b2965121d718ab909e1e56b69664162cda4fcb0c75c308045d7737892298a532319004e503efbedb5a4122579036e5f4ae2c06c3dd58bbde9db7040cbbf2ae629a6b3a46cdb197ac4fb9d1a3b80aece613f6298cb282b8dd6afff21e1dae0d8f132682758e4901fbad42240f229adfd892a7f282ef107703e7cbaa8eab0a4d4d650868b5d4461b3db8", 0xcf}], 0x6, &(0x7f00000003c0)="a05328a90a6fc59c597390f0e5db23e6f3d6ff5fed666393ae41018237b08584a0ad653369d33566d3dad3292cc35d3d81bab37708cccb0efb997c5c874341c8cbb1a6317d827e9f1be7fb94a1", 0x4d, 0x50}, 0x1) write(r2, &(0x7f0000000480)="2400000021002551075c0165ff0ffc0202586503c0100f6007e1000c0800030016000000bc0000008f3943793a5ea67658cb22d90000000000000059b97dc8f8b550e66a2bbf77c4931da84157f7a733686a22fd8169f6b6b4f464e0c05df670d851f785ea2b85d32b3583d87124da3bb0b9e2cc000000dcce1fb4ac2cbd48c8378a3ad82a5b83c01295723da595c4831f65123819e204853d48a5a6bd525801d5cae983cf4544a9c4c390f36e85787a8efc32e0015c85ead2b748bc6a5fefc4e53543f9f65e3d961a110af1acc08ce510c7a70723741b34981d1b182deb7904", 0xe0) [ 384.220100] binder_alloc: binder_alloc_mmap_handler: 17378 20005000-20008000 already mapped failed -16 [ 384.240419] binder_alloc: binder_alloc_mmap_handler: 17378 20005000-20008000 already mapped failed -16 13:14:48 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000035) 13:14:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0xb}, 0x7a) 13:14:48 executing program 1: r0 = socket$inet(0x2, 0xe, 0xfe) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRESDEC], 0x30) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070") r2 = syz_open_dev$dspn(&(0x7f00000006c0)='/dev/dsp#\x00', 0x745c, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000700)=[@in6={0xa, 0x4e22, 0x5c0, @empty, 0xfdb}, @in={0x2, 0x4e21, @local}], 0x2c) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='yeah\x00', 0x5) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0xffffffffffffff62}, 0x100) r3 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x80100) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f00000003c0)="d50340d076e7b3170843a57b7759366fe117c03f1b33040d9997c474f93691d813d5855c8146ddc05ab666a88c09269373bcf0536635b2c3d28d5463b2e43828d3a19e999b1c1b2d37505aa0faf4aa8a92bc930a07ec80f3d9047c636a727519581e4fcad4388ab2778b317f5553f0a3e82f9281dc1539b903061d56fde121dc5abf705240f1ab3b127429380a702726fd445d328e16bb00fa66518376cbb4b78e1e4c2ca413381a47094fe75edda3b75ef8b15105dc051da30cfb8753db2a19966269e4ce0e1b13514ae97afdd7624bc88e68cad9c2fb0047fae1690b984fbd89562e3b6e93d3859e6f18e81839fb6749201de5b42b51aa5070504740f8db") perf_event_open$cgroup(&(0x7f0000000800)={0x0, 0x70, 0x401, 0x3, 0x7, 0x101, 0x0, 0xfa, 0x2000, 0xd, 0x7, 0x8001, 0x8, 0x2, 0x7, 0x0, 0x2, 0x4, 0x328, 0x1, 0x3ff, 0x81, 0x80000001, 0x8000, 0x1, 0xba5, 0xb5, 0x0, 0x5, 0x3, 0x6, 0x9, 0x40, 0xc9c8, 0x81, 0xd4ff, 0x0, 0x1ff, 0x0, 0xffff, 0x5, @perf_config_ext={0x236a, 0x7}, 0x1404, 0x7fffffff, 0x6, 0x3, 0x1e, 0x8, 0x3f}, r2, 0xb, r2, 0xb) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f00000007c0)={0x4}) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000100)) socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) r5 = accept(r4, &(0x7f0000000280)=@ipx, &(0x7f0000000300)=0x80) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x7, 0x6, 0x8000, 0x401, 0x1}, &(0x7f0000000500)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000540)={r6, 0x6}, 0x8) 13:14:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x805, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000100)=0xffffffff80000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000340)={0x6c07, 0x3, 0x3ff, 0x5, 0x4}) futex(&(0x7f0000000080)=0x2, 0xf, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20800011}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="000826bd7000fcdbdf250f000000080004008100000008000500100000000800050000100000080004000500000048000300080001000200000014000600fe8000000000000000000000000000bb140002006772657461703000000000000000000014000600fe8000000000000000000000000000292c00020008000500ff07000008000800c2330000080007000300000008000900ffffffff08000700df000000"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x1) flistxattr(r1, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) fremovexattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.impure\x00') epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xd) unshare(0x40000000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x200000, 0x0) r3 = semget(0x3, 0x0, 0x2) semctl$SEM_STAT(r3, 0x2, 0x12, &(0x7f00000005c0)=""/208) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000080)=""/20) semtimedop(0x0, &(0x7f0000000140), 0x0, &(0x7f0000000200)={0x0, 0x989680}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, 0x0, &(0x7f00000001c0)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f00000002c0)={{0x0, 0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x40}) openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x92100, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r5, &(0x7f00000000c0)=""/11, 0xeb) [ 384.413147] IPVS: ftp: loaded support on port[0] = 21 [ 384.418492] binder_alloc: binder_alloc_mmap_handler: 17397 20005000-20008000 already mapped failed -16 13:14:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x1000000, [0x40000022]}) 13:14:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0xb}, 0x7a) [ 384.582572] QAT: Invalid ioctl [ 384.666640] QAT: Invalid ioctl 13:14:48 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x101000, 0x0) uname(&(0x7f0000000040)=""/51) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000140)=0x3, &(0x7f0000000180)=0x2) mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x2010, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000080)=0x1) socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r1, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x6f, &(0x7f0000000280), &(0x7f0000000240)=0x4) connect$vsock_dgram(r0, &(0x7f00000000c0), 0x10) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x222) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x2, 0x0) 13:14:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0xb}, 0x7a) 13:14:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x10100c0, [0x40000022]}) 13:14:48 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000036) 13:14:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, 0xb}, 0x7a) 13:14:48 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000037) 13:14:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0xb}, 0x7a) 13:14:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x14d564b, [0x40000022]}) [ 385.606266] QAT: Invalid ioctl [ 385.661056] QAT: Invalid ioctl [ 385.788230] binder_alloc: binder_alloc_mmap_handler: 17435 20000000-20004000 already mapped failed -16 13:14:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket(0x10, 0x3, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x20000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x1, 0x326f, 0x6, 0x2}) write(r1, &(0x7f0000000080)="240000001e0025eaa87865f51ef6bce90a04000200bff20182a9040c080004000b000000", 0x24) 13:14:49 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000038) 13:14:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe]}, 0xb}, 0x7a) 13:14:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x2000000, [0x40000022]}) 13:14:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000280)={0x5, 0x7, 0x1, 0xfffffffffffffffe, 0x1}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r2, &(0x7f0000000100)="64e88218c2990252cf7208f420efc32dbff4b68e19b41762bba4a5977716cd58974b83dbe3097c6a73ee5a036bb20d1d4ba4ce5f0c8974952a0fef932786c3e78db1eb", &(0x7f0000000180)=""/15}, 0x18) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000200)="365d2d32ead3167f998f8ade17392e23", 0x10) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000000)={0x1, 0xc2, 0x1, {0xa, @pix={0x4, 0x77e, 0x32525942, 0x5, 0xfffffffffffffab3, 0x10ca87dd, 0xb, 0x1, 0x1, 0x0, 0x1, 0x7}}}) 13:14:49 executing program 4: unshare(0x8020000) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000008c0)) r0 = syz_open_dev$usb(0x0, 0x4000000000008, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, 0x0, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000000)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x100) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "950839", "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"}}, 0x110) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, 0x0}, 0x10) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x1, 0x101400) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0}, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, 0x0) r4 = syz_open_procfs$namespace(r3, &(0x7f0000000280)='ns/mnt\x00') ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) setns(r4, 0x0) mknodat(r4, 0x0, 0x0, 0xffff) r5 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_security(0x11, r5, &(0x7f0000000a00)=""/230, 0xe6) clone(0x10062101, 0x0, 0x0, &(0x7f00000001c0), &(0x7f00000004c0)) setsockopt$inet6_dccp_int(r1, 0x21, 0x18, &(0x7f0000000080)=0x3, 0xeaf8cfe015b068b8) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, 0x0, &(0x7f0000000680)) 13:14:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}, 0xb}, 0x7a) 13:14:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x40002) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5eea, 0x40) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, 0x0, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, 0x0, &(0x7f0000000480)) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0) write$P9_RLINK(r3, &(0x7f00000001c0)={0x7}, 0x7) sendto$rxrpc(r3, &(0x7f0000000280)="50d0b7a029e8f5667f8a6f8552c4348da90ef1b03b2bc311467fe8e5cc209d5dc3dcbe2940cbd9df4ed53e1b6956adc8b7308e41afd570bc23e9e620f2fd0fe80e9a403ddf851445f34210d9ae073993f7557cebb7cc054e42240b220ba0eba9622df106ecfb86ea7dc7ff81ea3fb4fbe12c8cf4df533cc53f8bd8ca2dac43534d", 0x81, 0x20000800, 0x0, 0x0) close(0xffffffffffffffff) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fsync(r6) write$FUSE_ENTRY(r4, &(0x7f0000000640)={0x90, 0x0, 0x8, {0x0, 0x2, 0x0, 0x9, 0x9, 0x6, {0x1, 0x80000001, 0x0, 0x0, 0x0, 0x4, 0x200, 0x2, 0x7, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x100}}}, 0x90) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) 13:14:50 executing program 4: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x2000, 0x0) getgid() ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x0, 0x7, 0x9, 0x8001}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e21, 0x7fff, @dev={0xfe, 0x80, [], 0x27}, 0xc00}}, 0x0, 0x505e00e, 0x0, "d7f6c46ad8061de4095dd678133917a0431517076cf224fe868b5087deb4c806fdb07fb78a5e120a450c565db459ac2a0b533e757e6e50a5340ae895121015b0f26e03665f21694b3878570c3224e619"}, 0xd8) [ 386.488970] binder_alloc: binder_alloc_mmap_handler: 17481 20005000-20008000 already mapped failed -16 13:14:50 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000039) 13:14:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0xb}, 0x7a) 13:14:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x20100c0, [0x40000022]}) 13:14:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0xb}, 0x7a) 13:14:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x24d564b, [0x40000022]}) 13:14:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0xb}, 0x7a) 13:14:50 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000003a) 13:14:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x9, 0x5, 0x7, 0x6, 0x7, 0x100000000000000, 0x7, 0x100000001, 0x6, 0x1, 0x1, 0x5}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000000, 0x4000000000090012, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000040)={0xa2c5, 0x6, 0x4, 0x8000, 0x2, 0x5}) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) 13:14:50 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x600801) fgetxattr(r0, &(0x7f0000000040)=@random={'user.', '\x00'}, &(0x7f0000000140)=""/178, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='/exe\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf0\x02\x00\xf5\xab\xfb\x98E\xf9\xe1\x98Y\xc9i2\x06\xf2\xc6\v\x00\x00\x00\a*\xe1\xd6n\x97\x01#\xd8\x93\xd9t\xe5\xb9\xc3(\x00w\xb2\x13\x98#\xe5P\f\x92\xab[\x94\xda:}\xe1\x9f\x06;\xb7e\xb0+\xd5\xb6`\xfb\x7f\xa8\x98\xc6\xf5\xc66\x9c?60h\xd1\n\xf83\xf6G[\xbe\x8byg%[\x17v\a\xba\x10\x0flFTq\x822\xdb\xdad\xaa\x1fi\xcf\x9a\xb5\xb3\xea>\xd64R\xb7\xeb\xd3|\x9d\xaefN2.\b\xad\x8f`)\xfe\x8f\xd0\xb3Lq\x17H\x04q\xae\xca\n?\xc9\xec\xeb(P\x9c\xa8\xa8>O\x8b\x85\x13\x18\b\xbc\\\xfbL\xc2N\x19\x01v\x9c\bL\b\'\x12\xb4pfkm\xdd\xf7L\xedi9s\xba\x1d\xed\x8b\x10)l\xa9\xa3\xee\'\x13\xaa2\xf5\xact\x05\x95(\x11\xdb\xbd\xd1V\x94M\xef\xab\x8e[F\xeb\xb3\xd1\x0e!\xf1\x06\xa2r\xb9\xe2\x0f+W\x0f\xbe\xdf\x93\xb0Y') fgetxattr(r1, &(0x7f0000000100)=@known='security.capability\x00', 0x0, 0x0) 13:14:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0xb}, 0x7a) [ 387.157991] binder_alloc: binder_alloc_mmap_handler: 17530 20005000-20008000 already mapped failed -16 [ 387.250171] binder_alloc: binder_alloc_mmap_handler: 17530 20005000-20008000 already mapped failed -16 13:14:51 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000003b) 13:14:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x30100c0, [0x40000022]}) 13:14:51 executing program 4: unshare(0x24020400) mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', 0x0, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/167, 0xa7}], 0x1, &(0x7f0000000240)=[{&(0x7f00000005c0)=""/172, 0xac}], 0x1, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x1015452, &(0x7f0000008ff8)=0x3c) r4 = getpid() execve(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fcntl$setown(r2, 0x8, r4) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) tkill(r0, 0x16) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 13:14:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0xb}, 0x7a) 13:14:51 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) read(r0, &(0x7f0000000380)=""/217, 0xd9) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x200, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x5eb, 0x200) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7fffffff) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100), 0x4) syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x3, 0x85a1035adf4fb4ed) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x80000000, 0x10000, 0x4}, 0xc) r4 = epoll_create(0xdaf) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000400)) r5 = dup(r2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000080)=0x9, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x100082) r8 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000) pwritev(r8, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0xe}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0)={@empty, 0x41}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) mlockall(0x400000000003) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r7, r8, &(0x7f0000000240), 0x20000102000007) 13:14:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000000)={0x56, 0x7d, 0x2, {0x0, 0x4f, 0x8, 0x0, {0xc0, 0x1, 0x7}, 0x800000, 0x7, 0x6, 0x6, 0xd, '/dev/binder#\x00', 0x2, '*,', 0x0, '', 0xd, '/dev/binder#\x00'}}, 0x56) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0xb}, 0x7a) [ 387.537130] binder_alloc: binder_alloc_mmap_handler: 17552 20005000-20008000 already mapped failed -16 13:14:51 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000003c) 13:14:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0xb}, 0x7a) 13:14:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x34d564b, [0x40000022]}) [ 387.700676] binder_alloc: binder_alloc_mmap_handler: 17552 20005000-20008000 already mapped failed -16 13:14:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x4080000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x7, 0x1000, 0x100000000, 0x5, 0x6, 0x100000000, 0x0, {0x0, @in6={{0xa, 0x4e24, 0xa4, @empty, 0x7}}, 0x1, 0x8, 0x10000, 0x24000000, 0x2}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r2, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x1, @mcast2, 0x88}]}, &(0x7f0000000180)=0x10) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) r3 = getpid() getpgid(r3) 13:14:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0xb}, 0x7a) 13:14:51 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000003d) 13:14:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x44d564b, [0x40000022]}) [ 387.909814] binder_alloc: binder_alloc_mmap_handler: 17587 20005000-20008000 already mapped failed -16 [ 388.008479] binder_alloc: binder_alloc_mmap_handler: 17587 20005000-20008000 already mapped failed -16 13:14:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0xfffffdea) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) read(r1, &(0x7f0000000480)=""/197, 0x83) 13:14:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0xb}, 0x7a) 13:14:54 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000003e) 13:14:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) 13:14:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x70001c0, [0x40000022]}) 13:14:54 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) read(r0, &(0x7f0000000380)=""/217, 0xd9) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x200, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x5eb, 0x200) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7fffffff) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100), 0x4) syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x3, 0x85a1035adf4fb4ed) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x80000000, 0x10000, 0x4}, 0xc) r4 = epoll_create(0xdaf) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000400)) r5 = dup(r2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000080)=0x9, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x100082) r8 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000) pwritev(r8, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0xe}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0)={@empty, 0x41}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) mlockall(0x400000000003) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r7, r8, &(0x7f0000000240), 0x20000102000007) 13:14:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0xb}, 0x7a) [ 390.545455] binder_alloc: binder_alloc_mmap_handler: 17608 20006000-2000a000 already mapped failed -16 13:14:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x8010040, [0x40000022]}) 13:14:54 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000041) 13:14:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0xb}, 0x7a) 13:14:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000008, 0x20812, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) connect$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x10) 13:14:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0xb}, 0x7a) [ 390.846702] binder_alloc: binder_alloc_mmap_handler: 17639 20005000-20008000 already mapped failed -16 [ 390.894854] binder_alloc: binder_alloc_mmap_handler: 17639 20005000-20008000 already mapped failed -16 13:14:55 executing program 4: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66f7b0bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={0x0, 0x1ff}, &(0x7f00000003c0)=0x8) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0\x00') getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000b80)=ANY=[@ANYBLOB="e5000000ad47a45f01347d518186df24a80bb2050000003c118e27e62761dc012111f0f5676e991d44a24dd3f715553448d78339421ad97ba4865332b91012d99c715c494919671844eb96d42bb19b7d3c6799dafafa9787decbc17260b8ca2721a2f9172e1617f228aee915a4dd7f157100355509abbe236f596c6f3739e4d647819bd5fab7fac7509e5d0bce9e19e351f7a83ba01925e8a0a43bf14ea5dbf04081c4c221c9b706efbf458ad246d8201aa3ad5e7526cbc124bb3008b7de5bbdbfe8f9ede0392116096f432d367d4f61239ba67409ff1d25dc507c5f0e3550d2afde00ef7669e1ca4899f0e84c884344819acbbb74487b697e931d0a4153870b605b1769175f26abfa1e21cbaaf423e5d49fd2f5f64eab37baa68c23d96599e382d0ea5c7daa70663bb5363b543acbfc8cb5a9b6e8b6ec74e5050c40"], 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000180)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x90, 0x5}, 0xc) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x4800) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb0f4}, 0x100) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000001c0)=0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x2a1, 0x0, 0x0, &(0x7f0000002b80)=""/62, 0x3e}}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x4, 0xb0) pread64(r1, &(0x7f0000000cc0)=""/4096, 0x1000, 0x0) msgctl$IPC_RMID(0x0, 0x0) 13:14:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xa010000, [0x40000022]}) 13:14:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, 0xb}, 0x7a) 13:14:55 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000042) 13:14:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000000)={0xd913, 0x7, 0x2, {0x0, 0x989680}, 0xfffffffffffffffa, 0x6}) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) read(r0, &(0x7f0000000380)=""/217, 0xd9) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x200, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x5eb, 0x200) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7fffffff) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100), 0x4) syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x3, 0x85a1035adf4fb4ed) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x80000000, 0x10000, 0x4}, 0xc) r4 = epoll_create(0xdaf) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000400)) r5 = dup(r2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000080)=0x9, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x100082) r8 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000) pwritev(r8, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0xe}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0)={@empty, 0x41}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) mlockall(0x400000000003) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r7, r8, &(0x7f0000000240), 0x20000102000007) 13:14:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0xb}, 0x7a) [ 391.521219] binder_alloc: binder_alloc_mmap_handler: 17656 20005000-20008000 already mapped failed -16 [ 391.589990] binder_alloc: binder_alloc_mmap_handler: 17656 20005000-20008000 already mapped failed -16 13:14:55 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000043) 13:14:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, 0xb}, 0x7a) 13:14:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0xb0201c0, [0x40000022]}) 13:14:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = semget(0x2, 0x1, 0x0) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000040)=""/17) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xc0040, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000]}, 0xb}, 0x7a) [ 391.882905] binder_alloc: binder_alloc_mmap_handler: 17688 20005000-20008000 already mapped failed -16 [ 391.971349] binder_alloc: binder_alloc_mmap_handler: 17688 20005000-20008000 already mapped failed -16 13:14:55 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000044) 13:14:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, 0xb}, 0x7a) 13:14:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x10000000, [0x40000022]}) 13:14:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r1, 0x1) 13:14:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) [ 392.400586] binder_alloc: binder_alloc_mmap_handler: 17710 20005000-20008000 already mapped failed -16 [ 392.436528] binder_alloc: binder_alloc_mmap_handler: 17710 20005000-20008000 already mapped failed -16 13:14:56 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) read(r0, &(0x7f0000000380)=""/217, 0xd9) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x200, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x5eb, 0x200) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7fffffff) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100), 0x4) syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x3, 0x85a1035adf4fb4ed) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x80000000, 0x10000, 0x4}, 0xc) r4 = epoll_create(0xdaf) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000400)) r5 = dup(r2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000080)=0x9, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x100082) r8 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000) pwritev(r8, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0xe}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0)={@empty, 0x41}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) mlockall(0x400000000003) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r7, r8, &(0x7f0000000240), 0x20000102000007) 13:14:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000]}, 0xb}, 0x7a) 13:14:56 executing program 4: socketpair$unix(0x1, 0x9, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1, 0x80002, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000040)='%d') r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x800) 13:14:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x100001c0, [0x40000022]}) 13:14:56 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000045) 13:14:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L-', 0x5}, 0x28, 0x1) 13:14:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0xb}, 0x7a) [ 392.666197] binder_alloc: binder_alloc_mmap_handler: 17733 20005000-20008000 already mapped failed -16 13:14:56 executing program 4: socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getpgrp(0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x10000000258, 0x0, 0x4000009f, 0x7f], [0xc1]}) 13:14:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x11000000, [0x40000022]}) 13:14:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0xb}, 0x7a) 13:14:56 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000046) 13:14:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000040)={0xe, 0x4, {0x57, 0x4, 0x1, {0x6, 0x81}, {0x101, 0x8}, @cond=[{0x3ff, 0x4, 0x8, 0x3, 0x1000, 0x3}, {0x7, 0xa6, 0x58c, 0x3, 0x200, 0x603cb0d1}]}, {0x55, 0x80, 0x1, {0x0, 0x25e}, {0xe8d, 0x8}, @period={0x5d, 0x7, 0x2, 0xfb, 0x7, {0x9, 0x5, 0x2, 0x9}, 0xa, &(0x7f0000000000)=[0x100000000, 0x8001, 0x40, 0x101, 0x9, 0xffff, 0x2, 0x4, 0x1, 0x8]}}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80400300}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000200)={0x1, 0x0, 0x2, 0x5}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000240)={0x8, r2, 0x10000, 0x5}) pipe(&(0x7f0000000100)) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) [ 392.949487] kvm [17754]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 13:14:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001ff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x100000000000001}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000180)) ptrace(0x10, r2) rt_sigqueueinfo(r2, 0x2e, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffa86}) ptrace$poke(0x4209, r2, &(0x7f00000000c0), 0x70effd) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)=0x450, 0x4) 13:14:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0xb}, 0x7a) 13:14:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:57 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000047) 13:14:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x12000000, [0x40000022]}) 13:14:57 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10041, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xfc, r1, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x55}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2384}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x2400c050) r2 = getpid() fcntl$lock(r0, 0x27, &(0x7f0000000240)={0x0, 0x3, 0x8000, 0x2, r2}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x8000}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r3, 0x5, 0x200}, &(0x7f0000000340)=0xc) r4 = shmget$private(0x0, 0x3000, 0x52e, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_LOCK(r4, 0xb) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000380)={0x100000000000000, 0x0, 0x9, 0x8, 0x20}) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f00000003c0)={"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"}) getpeername$unix(r0, &(0x7f00000007c0), &(0x7f0000000840)=0x6e) ppoll(&(0x7f0000000880)=[{r0, 0x80}], 0x1, &(0x7f00000008c0)={0x0, 0x989680}, &(0x7f0000000900)={0x80}, 0x8) r5 = eventfd(0x400) ftruncate(r0, 0x8) mq_open(&(0x7f0000000940)='security\x00', 0x40, 0x2, &(0x7f0000000980)={0x9, 0x4, 0x99cd, 0x80000001, 0x0, 0x7, 0x1, 0x8}) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000009c0)={0x4, 0x1, 0x6}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000a00)={r3, 0x3}, &(0x7f0000000a40)=0x8) prctl$PR_GET_DUMPABLE(0x3) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000a80)) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000ac0)=0x7ff) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000b00)={r6, @in6={{0xa, 0x4e20, 0x9, @remote, 0x80000000}}}, &(0x7f0000000bc0)=0x84) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40106614, &(0x7f0000000c00)={0x0, @speck128}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000c40)={0x7, 0x0, [{0x996, 0x0, 0xffffffffffffffff}, {0xbf7, 0x0, 0x7fffffff}, {0x8e0, 0x0, 0x3137}, {0x174, 0x0, 0x10000}, {0xa2d, 0x0, 0x1f}, {0x0, 0x0, 0x80000000}, {0x8a2, 0x0, 0x1}]}) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000cc0)=0x3207) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000d00)) r7 = syz_open_dev$usb(&(0x7f0000000d40)='/dev/bus/usb/00#/00#\x00', 0x0, 0x4002) ioctl$PPPIOCGUNIT(r7, 0x80047456, &(0x7f0000000d80)) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000dc0)) 13:14:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="040000db32da652755fa15292d0700000810"], 0xc) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x10000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000500)) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f00000004c0)={0xa0, 0x8, &(0x7f00000003c0)="f458706ad348a41959ae80ba180d825e83cda06bf634ca0e8e430911d1e18c773add9e6c194978279683aec34913ec457813fe59a5e9fba51b2514cd9620dc332526f69e9b666569f8018fc26d280d3fb32f12cbd1fd76f4c8c7d629048c4f39dbe766f18570490bb53bc8cd16ca1a9d6841fc7a3a8ee470b393f12bab109070be9b5a8a02a76d9a8127d49b6cdfeb7aefd4cafd89d54310efc332cbf0c8cf40cc76cf296ede26c6e23b33ffc234e9905ff8eac7aded7e325b20d81693b4b8f1339f240c033946ddfa08d990a2df6904d0ac6dea515c1f68336274594f57e7", {0x5, 0x1, 0x20385655, 0x8, 0x6, 0x401, 0xf, 0x3}}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xcc, r3, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x93}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3981}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20040005}, 0x804) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000000)=0x40, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000100)={0x1, {{0xa, 0x4e20, 0x2, @remote, 0x9}}}, 0x88) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:14:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0xb}, 0x7a) 13:14:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r0, &(0x7f0000000080), 0x10000000000001b0, 0x47) read(r1, &(0x7f0000000000)=""/30, 0xfffffe4c) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r3}}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:14:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001ff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x100000000000001}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x0, 0x0, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000180)) ptrace(0x10, r2) rt_sigqueueinfo(r2, 0x2e, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffa86}) ptrace$poke(0x4209, r2, &(0x7f00000000c0), 0x70effd) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)=0x450, 0x4) 13:14:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x120101c0, [0x40000022]}) 13:14:57 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000048) 13:14:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, 0xb}, 0x7a) 13:14:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="d6b8267b36f8ba5eabc388c5145f6734b22d204eaea7bc09add82ffd18a6de3e63a05115d90b090dc871b68b75a52cc73f9ddc0a5860abe1540200f0256db2ee23ec750c3205b8710f01d0de4967980200000000000000259ff786b0e9e195ec1f8127c1509e3ff84377fc1c60b025c67082ca98a715"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:14:57 executing program 4: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x80000000002, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getuid() setreuid(r0, r1) r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x17, &(0x7f0000000040)=r2, 0x52d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$kcm(r2, &(0x7f0000001700)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @local, 0x7}, 0x80, &(0x7f0000000100)=[{&(0x7f00000006c0)="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", 0x505}], 0x1}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x140000000000000, 0x8001, 0x2, 0xfffffffffffffffa, 0xa288, 0x401, 0x0, 0x7, 0x8, 0x100, 0x40, 0x400, 0x0, 0x4, 0x6, 0xffffffff], 0x100000, 0x40500}) 13:14:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0xb}, 0x7a) 13:14:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x130101c0, [0x40000022]}) 13:14:57 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100)={0x1, [0x100000001]}, &(0x7f0000000140)=0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0xf0ffff}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0xff8e}}, 0x0) 13:14:58 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r1 = memfd_create(&(0x7f0000000300), 0x0) write(r1, &(0x7f0000000540)='ic', 0x2) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x444040, 0x0) write$FUSE_DIRENT(r3, &(0x7f0000000580)=ANY=[@ANYRESHEX=r2, @ANYBLOB="8960a02ac10260c826dfa87d37a2ab2f58d5c846a5c9dbd34e9cae38995633eaec7a4a4a4845585a754b33428b616b3baa0665a47f2fe1668159b7b156d72fa1186a73fbb775546c7dad9a08610a56a3a62f9557a7054f80098362697f9886cdaf52a2d7b208489e879f84b6ca044a47bb3a8947fef0f1aa91fb76cdd84d30fe61c580aa969d7da14ea9d33026d6a006c2769d1c5cd3e032257aaa02246fb69d9e77f38c87baa350dc6c15b3d9d6573b15e3db9540feb8405e6b1af8e50c2f1cf65dfc1d2ca26d3184260bbe"], 0xde) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) getitimer(0x0, &(0x7f0000000080)) getsockopt$sock_buf(r0, 0x1, 0x800000000019, 0x0, &(0x7f0000000040)) 13:14:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0xb}, 0x7a) 13:14:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xc, 0x9) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000000c0)={0x7f, 0x47, "4c7834ef9247ea8a1b947593c1f7f0f3aa9b82daeeac9c3ad5547946a5b0e2ae5c2961534ee4bddcc5c97336e55adae54e9fa8ce7d62745baf69ca03bdb699bee318a673eba4cc"}) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x80123, 0x2}) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000040)=0x101, 0x4) 13:14:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x150001c0, [0x40000022]}) 13:14:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x80000001, 0x80, 0x1, 0x0, 0x5, 0x2, 0x3e, 0x3f, 0x358, 0x38, 0x1a0, 0x7, 0x8, 0x20, 0x2, 0x7ff, 0x69d, 0x27}, [{0x0, 0x1, 0x100, 0x8, 0x8000, 0xfffffffffffeffff, 0xfffffffffffffff8, 0x6}], "3a1a383a8f04edde647cafe36473e4fa433d2ee91c489901fe7c42ca16187587c1d7e21f926dd63a6aa4373cd3158e85fdb0c661ed078efc0dd4cec86384dc4a1d185c55125fec7ff10ddf1d753ef23a813bff9275cb16bee265ae40f3384c565266e7404f9e3c6dcc8aad3fdf7ceefb3846e014488f8c5e8c2889f67b94a9813585c5b218aed5fd2ed5de5a2160ec26ef14634c3b979d0578e5a2767b79659d01f33cb98fecdf31fb56efd7c92a49c3942d6c74ad767505d005b925295c49301949c49ac5c1040e30ff5586447cc5e713501a78a46184fdb619f23f880813dbcd8c651df3618c4d0f6a8339d1d7", [[], [], [], [], [], []]}, 0x746) 13:14:58 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000049) 13:14:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0xb}, 0x7a) 13:14:58 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) syz_open_procfs(r1, &(0x7f0000000100)='net/fib_trie\x00') syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x4, 0x2110, r0, 0x0) mremap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x40) 13:14:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0xdaf, 0x80182) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8001, 0x8000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000200)=0xe8) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) write$FUSE_ATTR(r3, &(0x7f0000000300)={0x78, 0x0, 0x5, {0x100, 0x9, 0x0, {0x2, 0x5, 0x1, 0x1, 0x2, 0x2, 0x400, 0x3, 0x4, 0x8, 0x80000001, r4, r5, 0x4bb670df, 0x101}}}, 0x78) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 13:14:58 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000004a) 13:14:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x17000000, [0x40000022]}) 13:14:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0xb}, 0x7a) [ 394.888461] input: syz1 as /devices/virtual/input/input8 [ 394.975652] input: syz1 as /devices/virtual/input/input9 13:14:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0xb}, 0x7a) 13:14:58 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000580)={0x53, 0x0, 0x5b, 0x0, @buffer={0x0, 0x34, &(0x7f0000000380)=""/52}, &(0x7f00000003c0)="a244ca7ef1cc2f22213a433295b36be9a14ae3380ddfcd0157670b6160a9106b6744a104cc6ab3c107057b389c22ffd36f8ce22e87cea621708ad8f5f3b0914573778f45a5dd2c60c49a26179276bbb00e2652eaa9325a4b9cd2f0", &(0x7f0000000440)=""/229, 0x3, 0x1, 0x0, &(0x7f0000000540)}) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x18000, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000001c0)={0x7, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}]}) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) sendto$inet6(r2, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000006000000, 0xea03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9050000]}}, 0x1c) r3 = gettid() timer_create(0x5, &(0x7f0000000600)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000180)}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r3, 0x401104000000016) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) [ 395.108599] IPVS: ftp: loaded support on port[0] = 21 13:14:58 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000004b) 13:14:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = msgget(0x0, 0x4) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000180)=""/100) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0xffff}]}}) [ 395.238169] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 395.612589] chnl_net:caif_netlink_parms(): no params data found [ 395.678941] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.689809] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.700488] device bridge_slave_0 entered promiscuous mode [ 395.715559] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.726752] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.738361] device bridge_slave_1 entered promiscuous mode [ 395.775588] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 395.789578] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 395.827621] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 395.838420] team0: Port device team_slave_0 added [ 395.848540] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 395.859110] team0: Port device team_slave_1 added [ 395.868789] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 395.879632] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 395.953438] device hsr_slave_0 entered promiscuous mode [ 395.991129] device hsr_slave_1 entered promiscuous mode [ 396.031208] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 396.038246] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 396.058340] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.064737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.071438] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.077798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.149136] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 396.155369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.165581] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 396.175245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 396.184826] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.192051] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.200371] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 396.213637] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 396.219734] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.230206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 396.238793] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.245223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.264772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 396.272819] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.279197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.295158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 396.303886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 396.318428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 396.329260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 396.339854] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 396.347084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 396.354686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 396.362751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 396.376696] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 396.384398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 396.398606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.449277] binder_alloc: binder_alloc_mmap_handler: 17905 20005000-20008000 already mapped failed -16 13:15:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x3) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0xb}, 0x7a) 13:15:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x170101c0, [0x40000022]}) 13:15:00 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000004c) 13:15:00 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x20000, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$l2tp(r0, &(0x7f0000001300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x4, 0x1, {0xa, 0x4e22, 0x7, @remote, 0x7}}}, 0x32) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x181, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x400000000000027, 0x0) pipe2$9p(&(0x7f00000002c0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 396.499376] binder_alloc: binder_alloc_mmap_handler: 17905 20005000-20008000 already mapped failed -16 13:15:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, 0xb}, 0x7a) [ 396.632840] binder: 17920:17921 ioctl 5606 3 returned -22 13:15:00 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000004d) 13:15:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x1b000000, [0x40000022]}) [ 396.768949] binder_alloc: binder_alloc_mmap_handler: 17920 20005000-20008000 already mapped failed -16 13:15:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0xb}, 0x7a) [ 396.856915] binder: 17920:17924 ioctl 5606 3 returned -22 [ 396.991116] binder_alloc: binder_alloc_mmap_handler: 17920 20005000-20008000 already mapped failed -16 [ 397.911667] device bridge_slave_1 left promiscuous mode [ 397.917303] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.973190] device bridge_slave_0 left promiscuous mode [ 397.978685] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.119124] device hsr_slave_1 left promiscuous mode [ 398.189850] device hsr_slave_0 left promiscuous mode [ 398.276264] team0 (unregistering): Port device team_slave_1 removed [ 398.306148] team0 (unregistering): Port device team_slave_0 removed 13:15:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000002c0)={0x3, 0x200, 0x3ff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) inotify_init1(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000540), 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000340)=[{&(0x7f0000000580)="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", 0xffffffffffffffcb}], 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000240)="df", 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000300)=0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000400)={&(0x7f0000000040), 0xc, 0x0}, 0x800) 13:15:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000004e) 13:15:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, 0xb}, 0x7a) 13:15:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x6280, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000100)={0x0, 0x1, 0xfffffffffffffffb, &(0x7f00000000c0)=0x101}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x005\xab\xe1\xe8\r\x90>\rqz\xc1\x88\x9aE\xe5\x81\xc9\xe1J\\\x8f\x95\xf5\xd2\x96\x8a\xe8\xc7g\xe9\xd1\x8f\xd6\x9a') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r3, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000280), 0x8) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)=0x4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x1b0001c0, [0x40000022]}) 13:15:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f00000008c0)='/dev/loop#\x00', 0x2, 0x402) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x4, &(0x7f0000000080)={0x0, 0xe, 0x1, @thr={&(0x7f0000000500)="b0fba4eaa27280b305c2d63e2d7b26079e96a5a5e3d568a5f24e305e56ae826e8ff0a34dc9ceeb77a94182104f3421a9802de44a7a2afd81d092d82d0c6e4959db9d90d5ae7bb5423bcef580a73deeb8697f0df0f3ce9f969b91a20329b792d02436436f707ebade0727983049459c2fd8f14425f1921853f11d6791d288c91197c0ac57871ced1dcfe95eb292b7c6c3141b4c2e3dc3f5661ec4fb82fd7606c3a390b5471c38ff096319434d0524cc3e1187bae04e9f385c4cee8cc1a80d929c9b932aa994d03ebafaa45d9cd8bc866a02b1e91f554c2f85d6", &(0x7f0000000600)="95abc7f1050f923286a54ac30acfeb5958e6214450ca4be48210da621118267b77aaf278bc50f4f98e9fd289533bb9d854a32d36c9f90983c03f9b1a4ea295205863fec0c6db4f97d622896195c91817712bcd76a94dbcf253483e5f9f015da6e4393300e99177df84b39a014253af74f1a72c0e4e91bb442ec29c1923cd449ba7f900d5c280cb5df5ff91292f661bb5f5c70850ab3a31f2899683e986e2146cf8698085632fed39a9f9df7e7f0521138d0585951e"}}, &(0x7f00000006c0)=0x0) timer_gettime(r2, &(0x7f0000000700)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x7, 0x0, [{0x1f000, 0xfb, &(0x7f0000000100)=""/251}, {0x100000, 0xd, &(0x7f0000000000)=""/13}, {0x0, 0x1000, &(0x7f0000001080)=""/4096}, {0x0, 0xc6, &(0x7f0000000300)=""/198}, {0x4, 0x31, &(0x7f0000000040)=""/49}, {0x2000, 0x83, &(0x7f0000000200)=""/131}, {0x110002, 0x1000, &(0x7f0000002080)=""/4096}]}) ioprio_get$uid(0x3, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000000c0)=0x3ff, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105518, &(0x7f0000001000)) syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x5, 0x100) [ 398.335317] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 398.458738] bond0 (unregistering): Releasing backup interface bond_slave_0 13:15:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000]}, 0xb}, 0x7a) 13:15:02 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) utimes(&(0x7f0000000040)='./file0\x00', 0x0) unlink(&(0x7f0000000540)='./file0\x00') execveat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000140)=':vboxnet1!self-eth1keyringproccgroup\x00', &(0x7f0000000180)='n\x00', &(0x7f00000001c0)=']\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', &(0x7f0000000280)='/dev/snd/pcmC#D#p\x00'], &(0x7f0000000400)=[&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', &(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', &(0x7f00000003c0)='-em1\x00'], 0x1100) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1, 0x8000) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f00000000c0)={0x2000, 0xf000, 0x1f, 0x2, 0x5}) 13:15:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000004f) 13:15:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x1e010000, [0x40000022]}) [ 398.567305] binder_alloc: binder_alloc_mmap_handler: 17956 20005000-20008000 already mapped failed -16 13:15:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0xb}, 0x7a) [ 398.764829] binder_alloc: binder_alloc_mmap_handler: 17956 20ffa000-20ffe000 already mapped failed -16 13:15:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x1f0001c0, [0x40000022]}) [ 398.890154] bond0 (unregistering): Released all slaves 13:15:03 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x2e, &(0x7f0000001a40)=ANY=[@ANYBLOB="2b9e342f791173af428e82d606cd13fa6abbadc38355acd9b3d10303b80b4a5be8fb886a99b13bc789fb99e5472056eda5043d53a1044e147cd9289e8d7e59ce051528216bab4c3cc6c56fe90ebb782f410cc0a5b4b5e2dc4568ec242ca4d1cebe195e85fe548d1a5a30629b80e6841e08186f2da3c669aa0ea08bc7bf67738c76d9e1f59a00320a346df5619c4f4cf29216ad76bf9c83b99fc61d4c9985c7d35abcf4e7b295207c41bd3beb5929b3f9251558fcac118352fff5bf37cfbac1f1c7200ffed4ff31a708ad5a85c4ef3dd8f20000cfbcc230a4bcbd83e3838a71c2d099f2846583f3dc8c565509e3a1f58e29b080da72e02f9c3b1cac3839e325fe7027d8f5920e84993f94bd23e30364882d4add99ae784f0b3411e31ecfe0b6f0a2a00abc875706a4cd8f9a509db1e14d5a1db6109fe6efdd384f4ed4ad8b62b8ca76a4b8056fb5ce59ba8b8619d4429baf9520ae088a1a1167638a9a36f09c20deba94cabcfa15ff435dcf45c3ea9021"], 0x0}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20000, 0x0) getdents64(r2, &(0x7f0000000740)=""/4096, 0x1000) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r1, 0x0, 0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x3, 0x19) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000200)) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r5, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) openat$cgroup_subtree(r2, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000440)=""/67) socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r5, 0x1) setuid(r3) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000580)={{{@in=@dev, @in=@multicast2}}, {{@in=@broadcast}}}, &(0x7f0000000680)=0xe8) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000019c0)={@remote, 0x0}, &(0x7f0000001a00)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="08191d9fa338549573493bfb75bc84d6b1a3794dd8c57b98e25dffc02500722fcec30f8fbe1e517b1300000000000007"], 0x0, 0xb, 0x0, 0x0, 0x1000000000000000, 0xffffffffffffffff, [], r6}, 0x48) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-control\x00', 0xa00, 0x0) getpeername$packet(r7, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000540)=0x14) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/24, &(0x7f0000001840)=0x18) 13:15:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0xb}, 0x7a) 13:15:03 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000050) 13:15:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000000)={0x10001}) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x40000000080012, r1, 0x0) 13:15:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x221001c0, [0x40000022]}) 13:15:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000005700)={&(0x7f0000000040), 0xc, &(0x7f00000056c0)={&(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYRES64=r2, @ANYRES16=r0, @ANYRES16=0x0, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYPTR, @ANYRES32, @ANYRES64=r0, @ANYRESHEX=r3, @ANYRESDEC=r1, @ANYRESHEX=r2, @ANYRES64=r2, @ANYBLOB="994f2ef7b99c7fec8b617966a09594c5cee95104e92582bdf41a084e6800b3e4578829147775885eb0", @ANYRESDEC=r3], @ANYRESOCT=r2], @ANYRES32=r4, @ANYBLOB="000000000000000008001d0000000000"], 0x3}}, 0x0) 13:15:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f00000005c0)=""/81, 0x51}], 0x1, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) set_mempolicy(0x0, 0x0, 0x4) io_setup(0x400, &(0x7f0000000180)) openat$ppp(0xffffffffffffff9c, 0x0, 0xcc0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) utime(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x7f}) socketpair$unix(0x1, 0x11000000000005, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\x9e\xd5T\xfa\aBJ\xde\xe9\xcb\xc6\x99\xec,\xa5v\xe5\x00\x00\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xd0\xcfsw\v\xd4$hG\xa1\x91NO\xb0\xaa\x9b\x15\xea\xa9K\xcd\x0ep\x0e\xd6;D3\x8e\x84\xadN\xc2\xf1\x1fo*\xdb\x8d\xc2\xfd\xb1\x821DoC\x14.\xbep\v\"1\xe8\xfc\xee\xd6\xb2*7<\x94\tgZ\xc8\xd0\xb503\x12?\xb3\x03}f$\x1a\xaf\xe0\xf8\x80\xe7\xa5\x1d\x1b\x03j\xde1\xd2TM%\x81\xfe\x86S\xd0\xcf\xf5Ci\xdf\x8c/\xce!\xdc\xb1\xcb\x96Vi\xf9\xa7SE\xac4y\xcdQ\xdc}\xe3d\xc9\xc2r\xc8>\xd9\xe6f\xca%\xaa\xd2\xe7\xa2n=lb\xd0\xf8\xb9\x06\\\xfc\xa3\x11\xc0m\aD\xdb&Z\xa0\xe4\x86p|Q\xfd\x10\x8c\fl\xca\xe6\xffB\'J\xf9M0\xfc\xe8\x83o\xf9\xd0\v\xdd') ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, 0x0) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x801c581f, 0x80000707000) 13:15:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xb}, 0x7a) 13:15:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x2000) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r1, r1, 0x0, 0x6d, &(0x7f0000000100)="d243b6f3815226c26dabd78ac18049cde7c346c2e392ed8d9d6ce00d6453c4d30f29946cd2ba780b0ac4d18b16c6a6c7f9cd046ccd2ed3b3ecfc974b5f881c23f2fdf907f0c2d53a4d31b964c67bdb1b09a94b91eab894126c2b1719c781ba0fd4ce953422836d265f84c96aa6", 0xbe, 0x5, 0x0, 0x100000001, 0x42d, 0x3, 0x7, 'syz1\x00'}) getsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000040)=""/44, &(0x7f0000000080)=0x2c) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) write$P9_RWRITE(r2, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0x7fff}, 0xb) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000240)=0x428, 0x4) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x2a000000, [0x40000022]}) 13:15:03 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000051) 13:15:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0xb}, 0x7a) 13:15:03 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x2e, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20000, 0x0) getdents64(r2, &(0x7f0000000740)=""/4096, 0x1000) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r1, 0x0, 0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x3, 0x19) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x5) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000200)) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r5, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) openat$cgroup_subtree(r2, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000440)=""/67) socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r5, 0x1) setuid(r3) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000580)={{{@in=@dev, @in=@multicast2}}, {{@in=@broadcast}}}, &(0x7f0000000680)=0xe8) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000019c0)={@remote, 0x0}, &(0x7f0000001a00)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="08191d9fa338549573493bfb75bc84d6b1a3794dd8c57b98e25dffc02500722fcec30f8fbe1e517b1300000000000007"], 0x0, 0xb, 0x0, 0x0, 0x1000000000000000, 0xffffffffffffffff, [], r6}, 0x48) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-control\x00', 0xa00, 0x0) getpeername$packet(r7, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000540)=0x14) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/24, &(0x7f0000001840)=0x18) 13:15:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0xb}, 0x7a) [ 399.835913] binder_alloc: binder_alloc_mmap_handler: 18034 20005000-20008000 already mapped failed -16 13:15:03 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000052) 13:15:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000000)={0x200, 0x29, 0x8, 0x0, 0x0, [{r1, 0x0, 0x8}, {r0, 0x0, 0x2}, {r1, 0x0, 0x1ff}, {r1, 0x0, 0x4}, {r0, 0x0, 0x3}, {r1, 0x0, 0x4}, {r1, 0x0, 0x5}, {r0, 0x0, 0xffffffff}]}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000140)={0x8000000000000, 0x0, [], {0x0, @reserved}}) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xb}, 0x7a) 13:15:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x2a1001c0, [0x40000022]}) 13:15:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f00000005c0)=""/81, 0x51}], 0x1, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) set_mempolicy(0x0, 0x0, 0x4) io_setup(0x400, &(0x7f0000000180)) openat$ppp(0xffffffffffffff9c, 0x0, 0xcc0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) utime(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x7f}) socketpair$unix(0x1, 0x11000000000005, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\x9e\xd5T\xfa\aBJ\xde\xe9\xcb\xc6\x99\xec,\xa5v\xe5\x00\x00\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xd0\xcfsw\v\xd4$hG\xa1\x91NO\xb0\xaa\x9b\x15\xea\xa9K\xcd\x0ep\x0e\xd6;D3\x8e\x84\xadN\xc2\xf1\x1fo*\xdb\x8d\xc2\xfd\xb1\x821DoC\x14.\xbep\v\"1\xe8\xfc\xee\xd6\xb2*7<\x94\tgZ\xc8\xd0\xb503\x12?\xb3\x03}f$\x1a\xaf\xe0\xf8\x80\xe7\xa5\x1d\x1b\x03j\xde1\xd2TM%\x81\xfe\x86S\xd0\xcf\xf5Ci\xdf\x8c/\xce!\xdc\xb1\xcb\x96Vi\xf9\xa7SE\xac4y\xcdQ\xdc}\xe3d\xc9\xc2r\xc8>\xd9\xe6f\xca%\xaa\xd2\xe7\xa2n=lb\xd0\xf8\xb9\x06\\\xfc\xa3\x11\xc0m\aD\xdb&Z\xa0\xe4\x86p|Q\xfd\x10\x8c\fl\xca\xe6\xffB\'J\xf9M0\xfc\xe8\x83o\xf9\xd0\v\xdd') ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, 0x0) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x801c581f, 0x80000707000) 13:15:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="87f0ef00bf913e6d69242733161808822d8e9d2ad4a56f4ea1f8a338c7683baa", 0x20}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1}}], 0x1, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x4200) write$P9_RVERSION(r2, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.u'}, 0x15) 13:15:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0xb}, 0x7a) 13:15:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000053) 13:15:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x2c000000, [0x40000022]}) [ 400.384662] binder_alloc: binder_alloc_mmap_handler: 18063 20005000-20008000 already mapped failed -16 13:15:04 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7f3a, 0x301481) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xf, &(0x7f0000000080)=0x7, 0x4) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7) ioctl(r2, 0x0, &(0x7f0000000900)) syz_open_dev$dmmidi(&(0x7f0000000480)='/dev/dmmidi#\x00', 0x0, 0x0) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000500)=""/26) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000003c0)) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, &(0x7f0000000600)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x10) select(0x40, &(0x7f0000000280), &(0x7f00000002c0), 0xffffffffffffffff, &(0x7f0000000300)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000140)=0x7, 0x4) get_mempolicy(&(0x7f0000000340), &(0x7f0000000380), 0x1000, &(0x7f0000ffb000/0x3000)=nil, 0x6) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000200)={0x4f}, 0x4) 13:15:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x1012}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ix6_\x81ti0\x00', 0x403}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 13:15:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0xb}, 0x7a) 13:15:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x9, 0x7}) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000740)={0x0, 0x1000, "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"}) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x2c1001c0, [0x40000022]}) 13:15:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000054) 13:15:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0xb}, 0x7a) [ 400.727794] binder_alloc: binder_alloc_mmap_handler: 18098 20005000-20008000 already mapped failed -16 13:15:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@profile={'changeprofile ', ':]proc(\x00'}, 0xf) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x521600, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000000c0)) syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x100) mount(&(0x7f0000000040)=@nullb='\nu\n:d]:.,[:\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 13:15:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0xb}, 0x7a) 13:15:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x34000000, [0x40000022]}) [ 400.897550] binder_alloc: binder_alloc_mmap_handler: 18098 20005000-20008000 already mapped failed -16 13:15:04 executing program 1: socket$inet6(0xa, 0x805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x2, 0x2) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000340)=0xffffffff80000001) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000500)={0x6c07, 0x0, 0x9, 0x0, 0x5}) futex(&(0x7f0000000080)=0x2, 0x0, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.impure\x00') epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xd) unshare(0x40000000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = semget$private(0x0, 0x4, 0x82) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f00000008c0)=""/208) semctl$GETPID(0x0, 0x0, 0xb, 0x0) unshare(0x4000000) gettid() getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000005c0)=""/94, 0x0) fstat(r1, &(0x7f0000000ac0)) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffe) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000004c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x10000, &(0x7f0000000540)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x2) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000740)={0xb, 0xd9, 0xfa00, {&(0x7f0000000640), r3, 0x80}}, 0xffffffffffffff47) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ptmx\x00', 0xfffffffffffffffd, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r4, &(0x7f00000000c0)=""/11, 0xeb) 13:15:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000055) [ 400.976010] libceph: resolve ' [ 400.976010] u [ 400.976010] ' (ret=-3): failed [ 401.014766] libceph: parse_ips bad ip ' [ 401.014766] u [ 401.014766] :d]:.,[' 13:15:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000080)=@profile={'changeprofile ', ':]proc(\x00'}, 0xf) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x521600, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000000c0)) syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x100) mount(&(0x7f0000000040)=@nullb='\nu\n:d]:.,[:\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 13:15:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0xb}, 0x7a) 13:15:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0xfffffffffffffffe, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000000)=r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x4001) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000056) 13:15:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x3a000000, [0x40000022]}) [ 401.253750] libceph: resolve ' [ 401.253750] u [ 401.253750] ' (ret=-3): failed [ 401.271191] libceph: parse_ips bad ip ' [ 401.271191] u [ 401.271191] :d]:.,[' 13:15:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, 0xb}, 0x7a) [ 401.410597] IPVS: ftp: loaded support on port[0] = 21 13:15:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0xb}, 0x7a) [ 401.484600] binder_alloc: binder_alloc_mmap_handler: 18156 20005000-20008000 already mapped failed -16 13:15:05 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x301200, 0x0) r2 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x80000, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x10100, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000001c0)={0x1, 0x4, [{r2, 0x0, 0x10000fffff000, 0x1000000}, {r3, 0x0, 0x1000000000000, 0x5000}, {r4, 0x0, 0xfffffffff0000000, 0x2000}, {r5, 0x0, 0xfffff000, 0x10000}]}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 13:15:05 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000057) 13:15:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0xb}, 0x7a) [ 401.660013] binder_alloc: binder_alloc_mmap_handler: 18156 20000000-20004000 already mapped failed -16 [ 401.756206] input:  as /devices/virtual/input/input10 [ 401.784802] input: failed to attach handler leds to device input10, error: -6 [ 401.881428] input:  as /devices/virtual/input/input11 [ 401.911929] input: failed to attach handler leds to device input11, error: -6 [ 402.417591] IPVS: ftp: loaded support on port[0] = 21 13:15:06 executing program 1: socket$inet6(0xa, 0x805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x2, 0x2) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000340)=0xffffffff80000001) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000500)={0x6c07, 0x0, 0x9, 0x0, 0x5}) futex(&(0x7f0000000080)=0x2, 0x0, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.impure\x00') epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xd) unshare(0x40000000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = semget$private(0x0, 0x4, 0x82) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f00000008c0)=""/208) semctl$GETPID(0x0, 0x0, 0xb, 0x0) unshare(0x4000000) gettid() getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000005c0)=""/94, 0x0) fstat(r1, &(0x7f0000000ac0)) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffe) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000004c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x10000, &(0x7f0000000540)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x2) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000740)={0xb, 0xd9, 0xfa00, {&(0x7f0000000640), r3, 0x80}}, 0xffffffffffffff47) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ptmx\x00', 0xfffffffffffffffd, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r4, &(0x7f00000000c0)=""/11, 0xeb) 13:15:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0xb}, 0x7a) 13:15:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x3b000000, [0x40000022]}) 13:15:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000080)={@empty, @initdev}, &(0x7f00000000c0)=0x8) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x46) 13:15:06 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000058) 13:15:06 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf32(r0, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x5e30, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x38, 0x1c8}, [{0x0, 0x0, 0x761c583a, 0x0, 0x0, 0x6}], "d94341dc83a6a57013e37587bfc19ca5d55aa810dff1bde26e59d4ee2a89a1e7776d56e8082b1e864fdc72fae28e5fd2dcc14ca3b520e8e1f0da23ff7b3e425a87604ec42e86b25a52d0dc33437489e4d96567d6fd4f83ed9edf51e31974ac", [[], [], [], []]}, 0x4b7) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x2, 0x0, "9340ecdfd1004228ded046d986f662ec551c8f2d1ab48a55f21194404439e6503be3ff49b02b6e457590ae3d442307eb18049f82e408432537cdc540d1db0033", "c55d52918bcf7bb85dc692afed7f2ab1be8d730e13ba74beb930083c196f780a"}) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4600010000000000040000000000003e000000000000000000380000000000000000000000000020000000000000000000000000ff0100000000000000000000000000000008000500000000000000000000000000dcd22cd830a0b2dfb284f65d996c39550c551257a02ed03c8eb492c34f90a8a59b7699e38d4d0be528b75034bd7d9f105005f64d649be114b2288c34fb7ddc637b9d0946"], 0x9c) preadv(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/58, 0x3a}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000240)=""/68, 0x44}], 0x3, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x6004) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 13:15:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0xb}, 0x7a) 13:15:06 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000059) 13:15:06 executing program 0: prctl$PR_SET_TIMERSLACK(0x1d, 0x1) r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x80000) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000080)={0x8, 0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x92000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x10000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x41}, &(0x7f0000000140)=0x8) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000009, 0x4010, r0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x3f000000, [0x40000022]}) 13:15:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0xb}, 0x7a) [ 402.973365] binder_alloc: binder_alloc_mmap_handler: 18218 20005000-20008000 already mapped failed -16 13:15:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, 0xb}, 0x7a) [ 403.063210] binder_alloc: binder_alloc_mmap_handler: 18218 20000000-20004000 already mapped failed -16 [ 403.088859] IPVS: ftp: loaded support on port[0] = 21 13:15:07 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf32(r0, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x5e30, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x38, 0x1c8}, [{0x0, 0x0, 0x761c583a, 0x0, 0x0, 0x6}], "d94341dc83a6a57013e37587bfc19ca5d55aa810dff1bde26e59d4ee2a89a1e7776d56e8082b1e864fdc72fae28e5fd2dcc14ca3b520e8e1f0da23ff7b3e425a87604ec42e86b25a52d0dc33437489e4d96567d6fd4f83ed9edf51e31974ac", [[], [], [], []]}, 0x4b7) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x2, 0x0, "9340ecdfd1004228ded046d986f662ec551c8f2d1ab48a55f21194404439e6503be3ff49b02b6e457590ae3d442307eb18049f82e408432537cdc540d1db0033", "c55d52918bcf7bb85dc692afed7f2ab1be8d730e13ba74beb930083c196f780a"}) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4600010000000000040000000000003e000000000000000000380000000000000000000000000020000000000000000000000000ff0100000000000000000000000000000008000500000000000000000000000000dcd22cd830a0b2dfb284f65d996c39550c551257a02ed03c8eb492c34f90a8a59b7699e38d4d0be528b75034bd7d9f105005f64d649be114b2288c34fb7ddc637b9d0946"], 0x9c) preadv(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/58, 0x3a}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000240)=""/68, 0x44}], 0x3, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x6004) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 13:15:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000005a) 13:15:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x40000000, [0x40000022]}) 13:15:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0xb}, 0x7a) 13:15:07 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf32(r0, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x5e30, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x38, 0x1c8}, [{0x0, 0x0, 0x761c583a, 0x0, 0x0, 0x6}], "d94341dc83a6a57013e37587bfc19ca5d55aa810dff1bde26e59d4ee2a89a1e7776d56e8082b1e864fdc72fae28e5fd2dcc14ca3b520e8e1f0da23ff7b3e425a87604ec42e86b25a52d0dc33437489e4d96567d6fd4f83ed9edf51e31974ac", [[], [], [], []]}, 0x4b7) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x2, 0x0, "9340ecdfd1004228ded046d986f662ec551c8f2d1ab48a55f21194404439e6503be3ff49b02b6e457590ae3d442307eb18049f82e408432537cdc540d1db0033", "c55d52918bcf7bb85dc692afed7f2ab1be8d730e13ba74beb930083c196f780a"}) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4600010000000000040000000000003e000000000000000000380000000000000000000000000020000000000000000000000000ff0100000000000000000000000000000008000500000000000000000000000000dcd22cd830a0b2dfb284f65d996c39550c551257a02ed03c8eb492c34f90a8a59b7699e38d4d0be528b75034bd7d9f105005f64d649be114b2288c34fb7ddc637b9d0946"], 0x9c) preadv(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/58, 0x3a}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000240)=""/68, 0x44}], 0x3, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x6004) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 403.719503] binder_alloc: binder_alloc_mmap_handler: 18234 20005000-20008000 already mapped failed -16 13:15:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000005b) 13:15:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe]}, 0xb}, 0x7a) 13:15:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2000, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'team_slave_1\x00', 0x1}, 0x18) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x100000e, 0x9001a, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x14, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000040)={0x400}, 0x1) 13:15:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x4000009f, [0x40000022]}) 13:15:07 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000900)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) stat(0x0, &(0x7f00000002c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000040)={0x4}) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000100), &(0x7f00000000c0)=0x2d7) sendmsg$rds(r2, &(0x7f0000001f00)={&(0x7f00000003c0)={0x10, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/73, 0x49}, {&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/23, 0x17}], 0x5, &(0x7f0000001bc0), 0x8}, 0x0) 13:15:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}, 0xb}, 0x7a) 13:15:07 executing program 1: statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=""/242) r0 = open(&(0x7f0000002440)='./file0\x00', 0x0, 0xa2) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000002480)='trusted.overlay.upper\x00', &(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0x107, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x402000, 0x0) recvfrom$unix(r1, &(0x7f0000000340)=""/118, 0x76, 0x2, 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="06deb58e4c41c49137d5bae1d2bf20dd6f096b9c4345e1a9fce1d4b6eb8cc1b4409741726a5b423899b175081a6695adcde8285a34060f37a5ba1f33e25eed4c6ec641f8ce707fcfceaf3fb4731d2193828a5859", 0x54, 0x8000, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) r3 = semget$private(0x0, 0x200000000001, 0xffffffffffffffff) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000003c0)={0x1, 0x0, 0x2080, {0x2000, 0xf000, 0x1}, [], "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", "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"}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002580)) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000002500)=@get={0x1, &(0x7f00000024c0)=""/12}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000002600)={0xffffffffffffffff, 0x80, 0x800, r0}) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000080)) getsockopt$inet6_buf(r1, 0x29, 0x2f, &(0x7f0000002780)=""/4096, &(0x7f0000002540)=0x1000) semctl$SETVAL(r3, 0x2, 0x10, &(0x7f0000000040)=0x4) 13:15:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x400000b0, [0x40000022]}) 13:15:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000005c) 13:15:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0xb}, 0x7a) 13:15:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000000080), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x0, 0x4}}, 0x20) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x44) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000000c0)) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0xb}, 0x7a) 13:15:08 executing program 1: r0 = inotify_init() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = dup(r1) ioctl$VT_WAITACTIVE(r0, 0x5607) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)=0x1) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000200), &(0x7f0000000240), 0x0, 0xfffffffffffffffe) flistxattr(r2, &(0x7f00000008c0)=""/249, 0xf9) write$P9_RLERROR(r2, &(0x7f0000000240)={0x13, 0x7, 0x1, {0xa, '/dev/full\x00'}}, 0x13) keyctl$setperm(0x5, 0x0, 0x3) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000580)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @multicast2}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev}, 'veth1_to_bond\x00'}) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000280)={'filter\x00', 0x97, "94394ce2449fb4232bcae4ff14e956274b70ce6c2a357c969bc6c9a66a72682766d2f0bfd6a11721696756731ff10be465728d5991b542c0144df71a45fa2ad1aca709ce6c8ea4888042bb5b9f0a32f528909afbc0c4b75d3beeea16a0a650864020f09693d146c0dc382ea8fb7f26f26dff8dec7e228479c4bc629ca9192ceaaa9fe0c583c40b04596ad0cb852f72c80f6ccbd637d0e1"}, &(0x7f0000000340)=0xbb) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0xc5) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000000c0)) ioctl$TIOCSBRK(r3, 0x5427) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 404.406311] binder_alloc: binder_alloc_mmap_handler: 18283 20005000-20008000 already mapped failed -16 13:15:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x400000b7, [0x40000022]}) 13:15:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0xb}, 0x7a) 13:15:08 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000005d) 13:15:08 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000900)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) stat(0x0, &(0x7f00000002c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000040)={0x4}) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000100), &(0x7f00000000c0)=0x2d7) sendmsg$rds(r2, &(0x7f0000001f00)={&(0x7f00000003c0)={0x10, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/73, 0x49}, {&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/23, 0x17}], 0x5, &(0x7f0000001bc0), 0x8}, 0x0) 13:15:08 executing program 1: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file1\x00') fchdir(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) getcwd(0x0, 0xffffffffffffff6f) 13:15:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x400, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000280)={0x3, 0xafb, &(0x7f00000000c0)="f6c76d8829973b4c259eb54bd7d496c2ad7f524ba8b84372b4087c0960a8b2a24667a74bb725ae9eeb590d837b121ee732e51801af03a2c0ae270bf283b24d7deb5c2c6a48e3d3c528d295c6d86b61bd24120f2466b5daf8a7baf5a2899467c6db12e114c89da34866d588be9302651033fdedd3f2dfca4bd12dcc2f27774b24f71c", &(0x7f0000000180)="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", 0x82, 0xff}) r1 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x100, 0x1) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000040)=0x3a3) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/101, 0x65) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0, 0x9001f, r1, 0xfffffffffffffffd) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80014, r1, 0x0) 13:15:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0xb}, 0x7a) 13:15:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x40000100, [0x40000022]}) 13:15:08 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000005e) 13:15:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0xb}, 0x7a) 13:15:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0xa7e) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, 0x0, 0x4000005) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) pipe(&(0x7f0000000380)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') prctl$PR_GET_SECCOMP(0x15) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r1, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x3e8, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:15:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x8000}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={r2, 0x3, 0x1, [0xc6c5]}, &(0x7f00000000c0)=0xa) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:08 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000005f) 13:15:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x40000108, [0x40000022]}) 13:15:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0xb}, 0x7a) 13:15:09 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000900)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) stat(0x0, &(0x7f00000002c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000040)={0x4}) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000100), &(0x7f00000000c0)=0x2d7) sendmsg$rds(r2, &(0x7f0000001f00)={&(0x7f00000003c0)={0x10, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/73, 0x49}, {&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/23, 0x17}], 0x5, &(0x7f0000001bc0), 0x8}, 0x0) 13:15:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x7530}}, &(0x7f0000000040)) 13:15:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0xb}, 0x7a) 13:15:09 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000060) 13:15:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x40010000, [0x40000022]}) 13:15:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0xb}, 0x7a) 13:15:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x400101c0, [0x40000022]}) 13:15:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0xa7e) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, 0x0, 0x4000005) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) pipe(&(0x7f0000000380)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') prctl$PR_GET_SECCOMP(0x15) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r1, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x3e8, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 13:15:10 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x3) unshare(0x8000800) syncfs(0xffffffffffffffff) r0 = accept4(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f00000000c0), &(0x7f0000000100)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="000000d7eeb31d08985b6c7b3f09619a8e3c98f0c48db68ebdb887ad8cfb257a0245f3c5e0c7d8a8a98cf00f8e02cbf13a6f036e2f2cde93e1162924e6b04483dce062f40761a2b2da77b70a9507b5fd4f24dac0dbbc26697931f98974ae5ef8052a3256f480af8f7abb9e99d51a4db05ddf7488acd72b49d111fceae21af430e1c0f83600866cd51a7fcf6e86a559ad0cc0b975979fe3c4cee9f48a47d703faf3fcc683acf535b8dd12571f20fbe46580545d2cf405f69f08666c2521ad544a5516623766bdba6825371446d09c87c9000000000000000000000000000000000000"], 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) sendmsg(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)='+', 0x1}], 0x1}, 0xc100) writev(r2, &(0x7f0000000200)=[{&(0x7f0000001440)="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", 0xbd0}], 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffe9a, &(0x7f0000000140)='\')\x00'}, 0x30) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) set_mempolicy(0x8000, &(0x7f0000000400)=0xffffffffffffffc0, 0x7) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e21, 0x7f8, @mcast2, 0x1df}, {0xa, 0x4e23, 0xfff, @empty, 0x16fec0000}, 0x7ff, [0x97, 0x1f, 0x7f, 0xfffffffffffffffd, 0x7ff, 0x101, 0x6, 0x6]}, 0x5c) open$dir(&(0x7f0000000140)='./file0\x00', 0x408c0, 0x1) syz_execute_func(&(0x7f0000000300)="c442d19c26f33e2664dd4e0066470fd7f0460fba3e0064260ff68d00000000c4228592443400c461b1f58677ba00000f38cac20fd53ec442192bdb") write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000280), 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r5 = fcntl$dupfd(r0, 0x2001000000002, r4) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) ptrace$cont(0x3f, r3, 0x1fd, 0x3) 13:15:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x410101c0, [0x40000022]}) 13:15:10 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x41c002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000200)='L', &(0x7f0000000240)=""/145}, 0x18) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000340)=0x3) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x20000000000000, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000000)={0x0, 0xd7, 0xfffffffffffffffa, 0x2, 0x7, 0x6, 0x1f, 0x3ff, {0x0, @in={{0x2, 0x4e22, @remote}}, 0x7, 0x3, 0xa2, 0x4, 0x32}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e22, @broadcast}}}, 0x84) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x1) 13:15:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0xb}, 0x7a) 13:15:10 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000061) 13:15:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0xb}, 0x7a) 13:15:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000000)={0x80, 'syz1\x00'}) 13:15:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x48000000, [0x40000022]}) 13:15:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0xb}, 0x7a) 13:15:10 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000062) 13:15:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0xb}, 0x7a) 13:15:11 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0xffffffffffffffe7, 0x4f565559, 0x0, 0x0, 0x0, @stepwise}) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000280)) 13:15:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r3 = dup2(r1, r1) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000280)={0x4, {{0xa, 0x4e1e, 0x1, @rand_addr="2d292a11d4236ae751728f8afc9c382f", 0x6}}}, 0x88) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r2, 0x408, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb74f}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4800) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000340)) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1501000000000000000001000000000000000c410000001400146287d38b2706d4381900f304726f6164"], 0x30}}, 0x0) 13:15:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, 0xb}, 0x7a) 13:15:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x4b564d00, [0x40000022]}) 13:15:11 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000063) 13:15:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0xb}, 0x7a) 13:15:11 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) seccomp(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x45, 0x0, 0x0, 0x4}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000a80)='./file0\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8) ioctl$FIBMAP(r0, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000600), 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000880)={'mangle\x00'}, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bind$xdp(r2, &(0x7f0000000000)={0x2c, 0x4, r3, 0x29, r2}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) 13:15:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) ioctl$sock_proto_private(r1, 0x89e2, &(0x7f0000000000)="ba5d7470064ca3af3e8819908d9e51e620fbe56d3b28ade4ca8619180a17c56f50139f736ecf423c454fd48c17a73c9a5ffafd444ad6cf1166e0ae401470c95eb6ddb730b23166fbce1a772ff785288b1e53f5ee76d6c121af6c95f84d8f6536256332306c71f548a1842e596759624f959fecd8ae0db5d88e41ce0a470e68e5446ba12166d0973d740a93aa0e4c06832bcd68eb62cb6e49302ddaaeb69bbce046d181d9e81f898a4eada8f01728ec10fc9a8f593c1b09493f35dd08adb8e11f3b2bfb013a") mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:11 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) seccomp(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x45, 0x0, 0x0, 0x4}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000a80)='./file0\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8) ioctl$FIBMAP(r0, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000600), 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000880)={'mangle\x00'}, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bind$xdp(r2, &(0x7f0000000000)={0x2c, 0x4, r3, 0x29, r2}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) 13:15:11 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000064) 13:15:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x30000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', r2}) uname(&(0x7f00000000c0)=""/88) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r4 = socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) listen(r4, 0x1) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_OVERLAY(r5, 0x4004560e, &(0x7f0000000080)=0x93a) 13:15:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x4b564d01, [0x40000022]}) 13:15:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, 0xb}, 0x7a) 13:15:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000]}, 0xb}, 0x7a) 13:15:12 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) seccomp(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x45, 0x0, 0x0, 0x4}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000a80)='./file0\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8) ioctl$FIBMAP(r0, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000600), 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000880)={'mangle\x00'}, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bind$xdp(r2, &(0x7f0000000000)={0x2c, 0x4, r3, 0x29, r2}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) 13:15:12 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000065) 13:15:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, 0xb}, 0x7a) 13:15:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x4b564d02, [0x40000022]}) 13:15:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000]}, 0xb}, 0x7a) [ 408.709226] IPVS: ftp: loaded support on port[0] = 21 [ 408.983798] chnl_net:caif_netlink_parms(): no params data found [ 409.028065] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.034638] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.042945] device bridge_slave_0 entered promiscuous mode [ 409.050321] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.056837] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.064200] device bridge_slave_1 entered promiscuous mode [ 409.085134] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 409.094798] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 409.120388] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 409.129087] team0: Port device team_slave_0 added [ 409.140336] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 409.148771] team0: Port device team_slave_1 added [ 409.160058] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 409.169015] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 409.237518] device hsr_slave_0 entered promiscuous mode [ 409.290937] device hsr_slave_1 entered promiscuous mode [ 409.341304] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 409.348410] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 409.365662] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.372069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.378770] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.385235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.427311] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 409.434537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.443833] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 409.453633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 409.462015] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.469098] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.477350] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 409.489290] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 409.495920] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.509240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 409.517649] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.524072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.531607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 409.539282] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.545650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.562399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 409.570143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 409.579903] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 409.590426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 409.603806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.614412] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 409.620446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 409.628085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 409.652270] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 409.662300] 8021q: adding VLAN 0 to HW filter on device batadv0 13:15:13 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) accept4$tipc(r0, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x80000) r1 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r1, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r1, 0x0) 13:15:13 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000066) 13:15:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x4b564d03, [0x40000022]}) 13:15:13 executing program 1: unshare(0x400) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x8001, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x5452, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000380)=""/238) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) prctl$PR_CAPBSET_READ(0x17, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) clone(0x802102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2f6465762f6e754a6c623000a3d0354c817e177657ef82fe5a4b30201ddc4f626df0a5a376d90ec9e3f7db6e23b7797bdb7eb740b71779e358ca8b79d79d462d5cbe34f6b8f86f9b5808ff341b7b575ba4004288de7807274c2a650a269df2e47d82985161486343e4f8ddf95157aa07660490357b107b8cee24f5cc3a46720705e39ef839969903d4b907711acdc34b0b21ce8e3ba3754c103681043a9c4493da65b681bcaf2fee6e0deb329c685c07ae13be764901a5644fbb6dc8e754d689c8584c2ab720d53cd426b94b160d30699051b4f995"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80) connect$inet(0xffffffffffffffff, 0x0, 0x0) 13:15:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0xb}, 0x7a) 13:15:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x30000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', r2}) uname(&(0x7f00000000c0)=""/88) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r4 = socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) listen(r4, 0x1) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_OVERLAY(r5, 0x4004560e, &(0x7f0000000080)=0x93a) [ 409.700505] binder_alloc: binder_alloc_mmap_handler: 18503 20005000-20008000 already mapped failed -16 [ 409.718418] binder_alloc: binder_alloc_mmap_handler: 18503 20005000-20008000 already mapped failed -16 13:15:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0xb}, 0x7a) [ 409.841865] protocol 88fb is buggy, dev hsr_slave_0 [ 409.847477] protocol 88fb is buggy, dev hsr_slave_1 13:15:13 executing program 1: unshare(0x400) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x8001, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x5452, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000380)=""/238) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) prctl$PR_CAPBSET_READ(0x17, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) clone(0x802102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2f6465762f6e754a6c623000a3d0354c817e177657ef82fe5a4b30201ddc4f626df0a5a376d90ec9e3f7db6e23b7797bdb7eb740b71779e358ca8b79d79d462d5cbe34f6b8f86f9b5808ff341b7b575ba4004288de7807274c2a650a269df2e47d82985161486343e4f8ddf95157aa07660490357b107b8cee24f5cc3a46720705e39ef839969903d4b907711acdc34b0b21ce8e3ba3754c103681043a9c4493da65b681bcaf2fee6e0deb329c685c07ae13be764901a5644fbb6dc8e754d689c8584c2ab720d53cd426b94b160d30699051b4f995"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80) connect$inet(0xffffffffffffffff, 0x0, 0x0) 13:15:13 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000067) [ 409.926835] binder_alloc: binder_alloc_mmap_handler: 18520 20005000-20008000 already mapped failed -16 [ 409.961016] protocol 88fb is buggy, dev hsr_slave_0 [ 409.966717] protocol 88fb is buggy, dev hsr_slave_1 13:15:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x4b564d04, [0x40000022]}) 13:15:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0xb}, 0x7a) [ 410.080780] protocol 88fb is buggy, dev hsr_slave_0 [ 410.085910] protocol 88fb is buggy, dev hsr_slave_1 [ 410.130772] protocol 88fb is buggy, dev hsr_slave_0 [ 410.135890] protocol 88fb is buggy, dev hsr_slave_1 [ 410.172291] device bridge_slave_1 left promiscuous mode [ 410.177845] bridge0: port 2(bridge_slave_1) entered disabled state 13:15:13 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000068) 13:15:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x400101004, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0xb}, 0x7a) [ 410.263241] device bridge_slave_0 left promiscuous mode [ 410.291734] bridge0: port 1(bridge_slave_0) entered disabled state 13:15:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, 0xb}, 0x7a) [ 410.492642] binder_alloc: binder_alloc_mmap_handler: 18554 20005000-20008000 already mapped failed -16 13:15:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x550001c0, [0x40000022]}) 13:15:14 executing program 1: unshare(0x400) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x8001, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x5452, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000380)=""/238) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) prctl$PR_CAPBSET_READ(0x17, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) clone(0x802102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2f6465762f6e754a6c623000a3d0354c817e177657ef82fe5a4b30201ddc4f626df0a5a376d90ec9e3f7db6e23b7797bdb7eb740b71779e358ca8b79d79d462d5cbe34f6b8f86f9b5808ff341b7b575ba4004288de7807274c2a650a269df2e47d82985161486343e4f8ddf95157aa07660490357b107b8cee24f5cc3a46720705e39ef839969903d4b907711acdc34b0b21ce8e3ba3754c103681043a9c4493da65b681bcaf2fee6e0deb329c685c07ae13be764901a5644fbb6dc8e754d689c8584c2ab720d53cd426b94b160d30699051b4f995"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80) connect$inet(0xffffffffffffffff, 0x0, 0x0) 13:15:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x30000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', r2}) uname(&(0x7f00000000c0)=""/88) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r4 = socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) listen(r4, 0x1) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_OVERLAY(r5, 0x4004560e, &(0x7f0000000080)=0x93a) 13:15:14 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000069) 13:15:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x501000) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000040)={0x0, 0x7, {0x57, 0x5e31, 0xffffffff, {0x2}, {0x1}, @cond=[{0x4, 0x200, 0x0, 0x5}, {0x1, 0x4, 0xfff, 0xffff, 0x3, 0x6}]}, {0x57, 0x4, 0x7fff, {0x101, 0x81}, {0x7, 0x9}, @rumble={0x5, 0x96}}}) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0xb}, 0x7a) 13:15:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0xb}, 0x7a) [ 410.814274] binder_alloc: binder_alloc_mmap_handler: 18575 20005000-20008000 already mapped failed -16 [ 410.876497] device hsr_slave_1 left promiscuous mode 13:15:14 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7fffffff, 0x2c0000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x0, 0x2, [0x7, 0x401]}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r1, &(0x7f0000000100)=0x4) r2 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r2, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r2, 0x0) 13:15:14 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000006a) 13:15:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x580001c0, [0x40000022]}) [ 410.943792] device hsr_slave_0 left promiscuous mode 13:15:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0xb}, 0x7a) [ 411.052053] team0 (unregistering): Port device team_slave_1 removed [ 411.113833] team0 (unregistering): Port device team_slave_0 removed 13:15:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0xb}, 0x7a) [ 411.162930] binder_alloc: binder_alloc_mmap_handler: 18598 20005000-20008000 already mapped failed -16 [ 411.191051] bond0 (unregistering): Releasing backup interface bond_slave_1 13:15:14 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000006b) [ 411.240853] protocol 88fb is buggy, dev hsr_slave_0 [ 411.245962] protocol 88fb is buggy, dev hsr_slave_1 [ 411.289218] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 411.338492] binder_alloc: binder_alloc_mmap_handler: 18598 20005000-20008000 already mapped failed -16 [ 411.546281] bond0 (unregistering): Released all slaves 13:15:15 executing program 1: unshare(0x400) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x8001, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x5452, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000380)=""/238) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) prctl$PR_CAPBSET_READ(0x17, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) clone(0x802102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2f6465762f6e754a6c623000a3d0354c817e177657ef82fe5a4b30201ddc4f626df0a5a376d90ec9e3f7db6e23b7797bdb7eb740b71779e358ca8b79d79d462d5cbe34f6b8f86f9b5808ff341b7b575ba4004288de7807274c2a650a269df2e47d82985161486343e4f8ddf95157aa07660490357b107b8cee24f5cc3a46720705e39ef839969903d4b907711acdc34b0b21ce8e3ba3754c103681043a9c4493da65b681bcaf2fee6e0deb329c685c07ae13be764901a5644fbb6dc8e754d689c8584c2ab720d53cd426b94b160d30699051b4f995"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80) connect$inet(0xffffffffffffffff, 0x0, 0x0) 13:15:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x60050000, [0x40000022]}) 13:15:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0xb}, 0x7a) 13:15:15 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000006c) 13:15:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x8, 0x8) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x30000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', r2}) uname(&(0x7f00000000c0)=""/88) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r4 = socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) listen(r4, 0x1) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_OVERLAY(r5, 0x4004560e, &(0x7f0000000080)=0x93a) 13:15:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0xb}, 0x7a) [ 411.696354] binder_alloc: binder_alloc_mmap_handler: 18626 20005000-20008000 already mapped failed -16 13:15:15 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000006d) 13:15:15 executing program 1: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000008) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3ff, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 13:15:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x61050000, [0x40000022]}) [ 411.832299] binder_alloc: binder_alloc_mmap_handler: 18626 20005000-20008000 already mapped failed -16 13:15:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, 0xb}, 0x7a) 13:15:15 executing program 0: setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.opaque\x00', &(0x7f00000000c0)='/dev/binder#\x00', 0xd, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x121000, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) 13:15:15 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000006e) 13:15:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0xb}, 0x7a) [ 412.156421] binder_alloc: binder_alloc_mmap_handler: 18657 20005000-20008000 already mapped failed -16 13:15:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x70050000, [0x40000022]}) 13:15:15 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000006f) 13:15:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, 0xb}, 0x7a) 13:15:16 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80033f, 0x20000000209, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000010c0)=@buf) r3 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x9}) 13:15:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x8000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000005c0)=0x0) fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) r6 = gettid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe8) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = gettid() stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000001cc0)=[0xee00, 0x0, 0xee00, 0xee00, 0x0]) openat$full(0xffffffffffffff9c, &(0x7f0000001f40)='/dev/full\x00', 0x80, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001d00)={0x0, 0x0}) fstat(r1, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() sendmmsg$unix(r2, &(0x7f0000001ec0)=[{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f00000000c0)="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", 0xfe}, {&(0x7f00000001c0)="d21ea81394a1aa5c984bf9941eb1d3cb9a1fc7bf62cedee04bb590b897459484c9cd44e179cf9149b8370692ee49ede662cc0fbba634c27861", 0x39}, {&(0x7f0000000200)="ea3dec7274061a2b6de3ca089772c46460e385ff96ffd9e96dfd5ab8dabd6d2af3c7e8de3be212bb80679ac52a8d70ab6231f885d89d7c24f39b7e877e100eb44b4450a3fa5a9a49801f4864c6c61b44f74aa2f14f5c36fb794c2e198a85704d0405bdb7a098059926c94937cbae4b908ecc69bb7af0050494d6d3a806af702ac0960ab902416213f5f255366dac44cedab274d6b4f8052cca722f111fb7f05748822c2cc1274498f5ef79f4d9c2", 0xae}, {&(0x7f00000002c0)="1b05da4df86b07f57a26bc0b1b27b99417b2e5e0d7ddf345ee87fcaa9fac1b3fb5f6677b7d03a155c04de918b50b5b651bea7daf47874a254b9cd1a587c2317264210429f46f561537406a5bff985ad61acf23d44fa63fad789cfb97852d6b", 0x5f}, {&(0x7f0000000340)="0c4241557dd2360c3a6ae0ae56985f96ac9603194e4258503eee295c62677aa1ae70e49ab7bd8fa982de59007579ca70481c7e2878607d3f6ee22bdc027972159379d1f4421afd2ea14663be46f1f0d8be7b431112dd6ece9433fc20b6d7abfb37baf9f602fae07a3d31eb7848818c66617fcdf91ef8933f563801678e46d9c04ed748ae5e6643896d583285ae0adccafc789effa9dee914a48990bdefb124b677309324b82a4da5a981af30d42d0e230c02888adb92", 0xb6}, {&(0x7f0000000400)="e5cad0b9360728f6c4dcc9c6a0bf6034697ddea3a7c943a9f6baa3430674367d85c4d014813c5336a4207c2983c35aba56723f7ef076b06ffab5f8e78b23526c7f", 0x41}, {&(0x7f0000000480)="56dbf2f4c9e8b951632291ce9596f289d645ba892beb55e91e7d93a5856475cc076b2a31cb5ec27c1d20389bf37fe2f4a7fcff6b7bb4c513874ed862b9e4ecefbf67b0d2142b3acead23f6a080dddac63f66e4899994fc6125e506c5130bc81f2a77f06ebe552c7f0f3827a951a027147dc08a3719cdb5776a94a6a4cba297da7a7a123ffffbf1", 0x87}], 0x7, &(0x7f0000000940)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x20, 0x1, 0x1, [r1, r0, r0]}], 0x78, 0x4}, {&(0x7f00000009c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000000a40)="145ee8b87218fdb8347cf1809e9af550fd6766bcee61b2e05e88a70ac39e08c0d2cca6dcff3feb1e3b6e42b2323eccac35072f8cabaa6c66ab5a90c0dae8f2e8da7852a8e8c7b9f2de23b6b05458c900295feb0adb4bc7b93461523fc2098e8a8421bb6be747491e", 0x68}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="7a3bcb46f28e77695d584d5687c86d15eec01dc98c2b5682f09b9f880ae3d0cf7bef59986e9153a2468949ade86d1b29b36241921201c2419d58d5e3853e8060a42fcc041cea8b6e6064795197494d2c28df08e2044964698fd96f3f9e556044aca0b1338414f2a4d8b019232c8fc2c01f6361999cfbdaaa85dcf40733e8ccce7dc9ced18746ba103988dc194f35a74228b5f8091996091173590b8f350792d629fddf4d3d87d6e8cf9b2d284402ffeaa7e106ca8bad95a10a152acfab9e5b06dabdfa382a53aaa878917a36a9325be86365f54b32", 0xd5}], 0x3, &(0x7f0000001dc0)=[@cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x38, 0x1, 0x1, [r1, r1, r1, r1, r0, r1, r1, r1, r1]}, @rights={0x28, 0x1, 0x1, [r1, r1, r0, r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x28, 0x1, 0x1, [r1, r0, r0, r0, r1, r0]}], 0xc8, 0x800}], 0x2, 0x80) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x71050000, [0x40000022]}) 13:15:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80033f, 0x20000000209, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000010c0)=@buf) r3 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x9}) 13:15:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000]}, 0xb}, 0x7a) 13:15:16 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000070) 13:15:16 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80033f, 0x20000000209, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000010c0)=@buf) r3 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x9}) 13:15:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x72050000, [0x40000022]}) 13:15:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) eventfd2(0x3f, 0x1) 13:15:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0xb}, 0x7a) 13:15:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0x0, 0x80000) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x74010000, [0x40000022]}) 13:15:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$assume_authority(0x10, r1) 13:15:16 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000071) 13:15:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0xb}, 0x7a) 13:15:16 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") dup3(r1, r0, 0x0) 13:15:16 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80033f, 0x20000000209}) 13:15:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x75010000, [0x40000022]}) 13:15:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xb}, 0x7a) 13:15:17 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") dup3(r1, r0, 0x0) 13:15:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)) r1 = mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000009, 0x8010, r0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={r1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@request_death={0x400c630e, 0x2, 0x1}, @free_buffer={0x40086303, r3}], 0x56, 0x0, &(0x7f0000000080)="8ed213cf79ffeff57d256725b55c6484dcfdf9cc2b3fb2cc8f746827f6501d07c1b48ed4b5e0c459073f689f1b5c9626cefdcace073876b1e8c675fbc46b911102c7339048cc9b966fac61efa5a297a32cef0489a72c"}) r4 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x10000) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:17 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) 13:15:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000072) 13:15:17 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") dup3(r1, r0, 0x0) [ 413.485739] binder: 18761:18762 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 413.552044] binder: 18761:18762 BC_FREE_BUFFER u0000000000000000 no match 13:15:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0xb}, 0x7a) 13:15:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080), 0x4) 13:15:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x76010000, [0x40000022]}) 13:15:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@dev={0xfe, 0x80, [], 0xb}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x100000000, 0x4e20, 0x7, 0x2, 0x20, 0x80, 0x87, r2, r3}, {0x5, 0x10001, 0x4, 0x2, 0x9, 0x5, 0x80000000, 0xee4}, {0xffff, 0x2, 0x465ab8d8, 0x973}, 0xffffffffffff8228, 0x6e6bbf, 0x80, 0x1, 0x2}, {{@in=@remote, 0x4d3, 0xff}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x10}, 0x3500, 0x3, 0x0, 0x80, 0x1, 0x0, 0x9}}, 0xe8) mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x80012, r1, 0xffffffffffffffff) 13:15:17 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") dup3(r1, r0, 0x0) 13:15:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000073) 13:15:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0xb}, 0x7a) 13:15:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000001c0)={0x115000, &(0x7f0000000180), 0x8, r1, 0x9}) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x7f, "3987a656e375ad94f496f4c72ded1b535359b1e5f4aac940f66f55cde5df9d5c7bd4e115eff50ef30f4c763ae15339d2aea0cfe63cbd1ee7a506c2ad60c764a007064c2e4dac370595f5f3b543fd4a0b3b0b9a9b6e55da60818cce919eec34ca279354dca955fee491b43b656be8cec58e0cffd37952fa9630246615c583e7"}, &(0x7f00000000c0)=0x87) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r3, 0xfffffffffffffff9}, 0x8) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:17 executing program 4: 13:15:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xb}, 0x7a) 13:15:17 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r1, r0, 0x0) 13:15:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x79010000, [0x40000022]}) 13:15:17 executing program 4: 13:15:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) getuid() mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000074) 13:15:17 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r1, r0, 0x0) 13:15:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0xb}, 0x7a) 13:15:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x7a010000, [0x40000022]}) 13:15:17 executing program 4: 13:15:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) dup3(r0, r0, 0x80000) 13:15:17 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r1, r0, 0x0) 13:15:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0xb}, 0x7a) 13:15:18 executing program 4: 13:15:18 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000075) 13:15:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x200) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x86) openat$cachefiles(0xffffffffffffff9c, 0x0, 0xfffffffffffffffa, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0xb}, 0x7a) 13:15:18 executing program 4: 13:15:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x7b010000, [0x40000022]}) 13:15:18 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") dup3(0xffffffffffffffff, r0, 0x0) 13:15:18 executing program 4: 13:15:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0xb}, 0x7a) 13:15:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") dup3(r0, 0xffffffffffffffff, 0x0) 13:15:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:18 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000076) 13:15:18 executing program 4: 13:15:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0xb}, 0x7a) 13:15:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x7f040000, [0x40000022]}) 13:15:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x89b1, 0x8000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000100)=r2, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000001300)={0xcd7, 0x0, 0x9, 0xb2, &(0x7f0000000140)=""/178, 0x1000, &(0x7f0000000200)=""/4096, 0xc8, &(0x7f0000001200)=""/200}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000001340)=""/27) mmap$binder(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) 13:15:18 executing program 4: 13:15:18 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") dup3(r1, r0, 0x0) 13:15:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, 0xb}, 0x7a) 13:15:18 executing program 4: 13:15:18 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000077) 13:15:18 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") dup3(r1, r0, 0x0) 13:15:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0xb}, 0x7a) 13:15:18 executing program 4: 13:15:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x800000c0, [0x40000022]}) 13:15:18 executing program 4: 13:15:18 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") dup3(r1, r0, 0x0) 13:15:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x4, 0x918, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, &(0x7f0000000080), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x11, 0x8, 0x1a, '\x00', 'syzkaller1\x00', 'lo\x00', 'vcan0\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0xd8, 0x108, 0x140, [@mac={'mac\x00', 0x10, {{@local, 0x1}}}, @m802_3={'802_3\x00', 0x8, {{0x8e, 0x8}}}]}, [@common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}]}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffe}}}}, {{{0x9, 0x4, 0x0, 'batadv0\x00', 'ifb0\x00', 'vlan0\x00', 'veth1\x00', @random="aaee5147d8e8", [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @random="639fe30b416b", [0x98e96eecae7426ef, 0x0, 0xff, 0xff, 0xff], 0x70, 0x1d0, 0x220}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x200, 'system_u:object_r:initrc_var_run_t:s0\x00'}}}]}, @common=@log={'log\x00', 0x28, {{0xa463, "6e9ca095fd9b907cf91368a57b642a60376153682d0e63bacc085f52eb15"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{{{0xd, 0x40, 0x6f658f1591ae69de, 'gretap0\x00', 'ipddp0\x00', 'ipddp0\x00', 'nr0\x00', @dev={[], 0x25}, [0xff, 0xff, 0xff, 0x0, 0xff], @broadcast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0xd0, 0x138, 0x1b0, [@m802_3={'802_3\x00', 0x8, {{0xf0, 0x8001, 0x0, 0x4}}}, @state={'state\x00', 0x8, {{0x9}}}]}, [@common=@dnat={'dnat\x00', 0x10}, @common=@STANDARD={'\x00', 0x8}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x8000, 0x101, 0x27b1, 0x1, 0x0, "fd1f31b4825e2280fcb47f40f7a68554532ba84637d2c90a73ade501555a29de275876130c0e440c24e26241a126a5aa639542d45da6469124eb7499ae030866"}}}}]}, {0x0, '\x00', 0x3, 0x0, 0x1, [{{{0x9, 0x20, 0xf5, 'sit0\x00', 'lo\x00', 'ip6gre0\x00', 'dummy0\x00', @remote, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0xff], 0x2e0, 0x318, 0x348, [@realm={'realm\x00', 0x10, {{0xaa3, 0xc06d, 0x1}}}, @bpf0={'bpf\x00', 0x210, {{0x25, [{0x8001, 0x4, 0x1, 0x1}, {0xffff, 0x10000, 0x2eb7cce, 0x100}, {0xcc, 0x6, 0x7, 0x8452}, {0x80000001, 0x7, 0x6, 0x928f}, {0x1000, 0x800, 0x728d, 0x7f}, {0x7, 0x7, 0x7, 0xb1}, {0x7f, 0x40, 0x0, 0xff}, {0x8, 0x8, 0xffffffffffffff16, 0x9}, {0x401, 0x1, 0x6, 0x200}, {0x6, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffd}, {0x5, 0x7f, 0x1, 0x1}, {0x9, 0x8000, 0x81, 0x8}, {0x2, 0x0, 0x4, 0x9}, {0x9, 0x80000001, 0x7}, {0x3, 0x7fff, 0xfffffffffffffffe, 0x100000000}, {0x0, 0x5, 0x9, 0x8}, {0x6, 0x3, 0x1f, 0x7fff}, {0x1, 0xffffffffffffff51, 0x80, 0x139f}, {0x200, 0xd84, 0x8, 0x4}, {0x3, 0x1, 0x4}, {0x0, 0xfffffffffffffffc, 0xfff, 0x7f}, {0x3, 0x28f, 0x1, 0x7}, {0xffffffffffffffff, 0x5d, 0x10000, 0x200}, {0xfffffffffffffff8, 0x3, 0xb13c, 0x51e}, {0xf19, 0x80000001, 0x5, 0x7}, {0xce5f, 0x9, 0x5, 0x10001}, {0xfff, 0x3, 0x4, 0x1}, {0x9, 0x5, 0x9, 0x1}, {0x101, 0x9, 0x3, 0x8}, {0x0, 0xffffffffffffa15b, 0x7c, 0x6}, {0x5, 0x2, 0x20, 0x80}, {0x5de, 0x3f, 0x80000001, 0xbc7}, {0x4, 0x1, 0x1, 0x1f}, {0xbaf, 0xffffffffffffff98, 0x7f, 0x80}, {0x0, 0x5, 0x2, 0x40000000000}, {0x95f, 0x7, 0x1ff, 0x2}, {0x4, 0x10000, 0x2, 0x7bbb}, {0xe00000000000000, 0x6, 0xbacc, 0x3}, {0x10001, 0x9, 0x3, 0x2}, {0x81, 0x1f, 0x6, 0xef97}, {0x200, 0x5, 0x101, 0x3}, {0x1, 0x8, 0x8, 0x2}, {0x3, 0x1, 0x1, 0x9}, {0xfffffff800000000, 0x3, 0xaad, 0x6}, {0xfffffffffffffff7, 0x7, 0x1, 0x7ff}, {0x3, 0x1f, 0x3, 0x4}, {0x7, 0x0, 0x3, 0x6258c240}, {0x5, 0x1, 0x8, 0x6}, {0x3, 0x91f3, 0x100, 0x4000000000000000}, {0x5, 0x542c, 0x5, 0xffff}, {0x13, 0xa38, 0x45, 0x3}, {0x4831, 0x3, 0x6}, {0x8, 0x0, 0x4, 0x5}, {0x0, 0x400, 0x23, 0x80}, {0x4, 0x800, 0x3, 0x9}, {0x0, 0xff, 0x3f, 0x8}, {0x100000001, 0x7, 0x0, 0x7c}, {0x5, 0x2, 0xce1, 0xfff}, {0x4, 0x9200000000000000, 0x9, 0x7}, {0x15, 0x7ff, 0x6c, 0x9}, {0x10000, 0x4, 0xb46, 0x1}, {0x8, 0xff, 0x1, 0x7}, {0x80000001, 0x3, 0x2, 0x90}, {0x80, 0x0, 0x6, 0x8}], 0x3}}}]}, [@common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xffffffffffffffff}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}]}, 0x990) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$cont(0x3f, r2, 0x2, 0x8) 13:15:19 executing program 4: 13:15:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0xb}, 0x7a) 13:15:19 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") dup3(r1, r0, 0x0) 13:15:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x80040000, [0x40000022]}) 13:15:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000078) 13:15:19 executing program 4: 13:15:19 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f023c123f3188a070") dup3(r1, r0, 0x0) 13:15:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0xb}, 0x7a) 13:15:19 executing program 4: 13:15:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000079) 13:15:19 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f023c123f3188a070") dup3(r1, r0, 0x0) [ 416.302114] IPVS: ftp: loaded support on port[0] = 21 [ 416.489163] chnl_net:caif_netlink_parms(): no params data found [ 416.526563] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.534130] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.541491] device bridge_slave_0 entered promiscuous mode [ 416.548253] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.554817] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.562262] device bridge_slave_1 entered promiscuous mode [ 416.579699] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 416.588968] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 416.609312] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 416.616780] team0: Port device team_slave_0 added [ 416.622350] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 416.629462] team0: Port device team_slave_1 added [ 416.634870] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 416.642373] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 416.703764] device hsr_slave_0 entered promiscuous mode [ 416.741142] device hsr_slave_1 entered promiscuous mode [ 416.819527] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 416.826557] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 416.842495] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 416.881519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.889432] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 416.903226] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 416.909346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 416.917258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 416.929322] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 416.935778] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.944072] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 416.951119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 416.958939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 416.966768] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.973146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.982228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 416.997616] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 417.004741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 417.013093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 417.021596] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.027945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.037643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 417.045147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 417.048854] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 417.059229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 417.078458] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 417.085471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 417.093716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 417.102242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 417.113356] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 417.120281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 417.128065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 417.144288] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 417.154366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 417.162628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 417.172583] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 417.179334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 417.188134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 417.200453] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 417.206642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 417.218929] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 417.228712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.262526] binder_alloc_mmap_handler: 8 callbacks suppressed [ 417.262540] binder_alloc: binder_alloc_mmap_handler: 18959 20005000-20008000 already mapped failed -16 [ 417.281157] device bridge_slave_1 left promiscuous mode [ 417.294340] bridge0: port 2(bridge_slave_1) entered disabled state 13:15:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ustat(0x7, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x0, 0x3, 0x7}}}, 0x18) 13:15:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0xb}, 0x7a) 13:15:20 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80033f, 0x20000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) flistxattr(r2, 0x0, 0x0) 13:15:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x80050000, [0x40000022]}) 13:15:20 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f023c123f3188a070") dup3(r1, r0, 0x0) 13:15:20 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000007a) [ 417.305605] binder_alloc: binder_alloc_mmap_handler: 18959 20005000-20008000 already mapped failed -16 [ 417.351772] device bridge_slave_0 left promiscuous mode [ 417.357321] bridge0: port 1(bridge_slave_0) entered disabled state 13:15:21 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) dup3(r1, r0, 0x0) 13:15:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0xb}, 0x7a) 13:15:21 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x80033f, 0x20000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) flistxattr(r2, &(0x7f0000000080)=""/25, 0x19) 13:15:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x810000c0, [0x40000022]}) 13:15:21 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000007b) 13:15:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, 0xb}, 0x7a) [ 417.592602] binder_alloc: binder_alloc_mmap_handler: 18981 20005000-20008000 already mapped failed -16 [ 417.749001] binder_alloc: binder_alloc_mmap_handler: 18981 20005000-20008000 already mapped failed -16 13:15:21 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000080)) r1 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r1, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r1, 0x0) openat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) 13:15:21 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) dup3(r1, r0, 0x0) 13:15:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) dup2(r3, r0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000840)={'nat\x00', 0x0, 0x3, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f00000008c0)=0x78) dup2(r1, r2) ftruncate(r2, 0xffffffffffffff87) 13:15:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0xb}, 0x7a) 13:15:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x820000c0, [0x40000022]}) [ 417.818862] device hsr_slave_1 left promiscuous mode 13:15:21 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000007c) [ 417.882946] device hsr_slave_0 left promiscuous mode 13:15:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe]}, 0xb}, 0x7a) 13:15:21 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) dup3(r1, r0, 0x0) [ 417.935957] team0 (unregistering): Port device team_slave_1 removed [ 417.986282] binder_alloc: binder_alloc_mmap_handler: 19016 20005000-20008000 already mapped failed -16 [ 418.033829] team0 (unregistering): Port device team_slave_0 removed 13:15:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}, 0xb}, 0x7a) 13:15:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x830000c0, [0x40000022]}) 13:15:21 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) dup3(r1, r0, 0x0) 13:15:21 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000007d) [ 418.098774] binder_alloc: binder_alloc_mmap_handler: 19016 20000000-20004000 already mapped failed -16 [ 418.131427] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 418.180349] binder_alloc: binder_alloc_mmap_handler: 19016 20005000-20008000 already mapped failed -16 [ 418.238103] bond0 (unregistering): Releasing backup interface bond_slave_0 13:15:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000000)={0x95b5, "80cda9fac45877c47de8461548737163665358030bd0fdac7ea6c99f083da98f", 0x2, 0x410, 0x8, 0xfffffffffffffffe, 0x8, 0x2, 0x100000000, 0xffffffffffffffe1}) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x90012, r0, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 13:15:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0xb}, 0x7a) [ 418.414114] binder_alloc: binder_alloc_mmap_handler: 19057 20005000-20008000 already mapped failed -16 [ 418.469524] bond0 (unregistering): Released all slaves 13:15:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000500)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r1}}, 0x18) 13:15:22 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000007e) 13:15:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x840000c0, [0x40000022]}) 13:15:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0xb}, 0x7a) 13:15:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000040), 0x0, 0x20004000, &(0x7f00000000c0)={0x11, 0xf7, r2, 0x1, 0x3}, 0x14) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth1\x00', 0x2}) r3 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(r3, &(0x7f0000000100), r3, &(0x7f0000000140)=0x1, 0xe3, 0x5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000180)={'gre0\x00', 0x2}) mmap$binder(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x2, 0x81c, r0, 0x0) 13:15:22 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) dup3(r1, r0, 0x0) 13:15:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0xb}, 0x7a) 13:15:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x86010000, [0x40000022]}) 13:15:22 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000082) 13:15:22 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000010, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:15:22 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) dup3(r1, r0, 0x0) 13:15:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0xb}, 0x7a) 13:15:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r0, 0x0) 13:15:22 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) accept4$tipc(r0, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x80000) r1 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r1, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r1, 0x0) 13:15:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x87010000, [0x40000022]}) 13:15:22 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c12") dup3(r1, r0, 0x0) 13:15:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0xb}, 0x7a) 13:15:22 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000083) [ 419.058530] binder: 19108:19110 ioctl 660c 0 returned -22 [ 419.090250] binder: 19108:19110 ioctl 81009431 20000000 returned -22 13:15:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0xb}, 0x7a) [ 419.233279] binder: 19108:19121 ioctl 660c 0 returned -22 13:15:22 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c12") dup3(r1, r0, 0x0) 13:15:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x87050000, [0x40000022]}) [ 419.275224] binder: 19108:19121 ioctl 81009431 20000000 returned -22 [ 419.309484] binder_alloc: binder_alloc_mmap_handler: 19113 20005000-20008000 already mapped failed -16 13:15:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0xb}, 0x7a) 13:15:23 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000084) 13:15:23 executing program 0: syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x804) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x4000400, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x13f, 0xb}}, 0x20) 13:15:23 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c12") dup3(r1, r0, 0x0) 13:15:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaa8d9c000700bbfe8000000000000000000000000000aa0000000000089078"], 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x200000) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x8001}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x6800000000000000, 0x60, &(0x7f00000001c0)={0x0, 'bridge_slave_0\x00'}, 0x18) 13:15:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0xb}, 0x7a) 13:15:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x8b000000, [0x40000022]}) 13:15:23 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188") dup3(r1, r0, 0x0) [ 419.707324] x_tables: duplicate underflow at hook 4 13:15:23 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000085) 13:15:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0xb}, 0x7a) 13:15:23 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188") dup3(r1, r0, 0x0) 13:15:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaa8d9c000700bbfe8000000000000000000000000000aa0000000000089078"], 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x200000) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x8001}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x6800000000000000, 0x60, &(0x7f00000001c0)={0x0, 'bridge_slave_0\x00'}, 0x18) 13:15:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x900d0000, [0x40000022]}) 13:15:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0xb}, 0x7a) [ 419.913699] x_tables: duplicate underflow at hook 4 13:15:23 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9200000000, 0x200) r1 = syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000080)={{0x20, 0x5, 0x4, 0x4, 0x7, 0x2}, 0x40000000ff}) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffff9, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x400) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f00000000c0)={@empty, @multicast2, @local}, 0xc) fallocate(r2, 0x0, 0x0, 0x4fc) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x90012, r1, 0x0) mmap$binder(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x80012, r1, 0x0) 13:15:23 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188") dup3(r1, r0, 0x0) 13:15:23 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0x81785501, &(0x7f00000008c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x12}) 13:15:23 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000086) 13:15:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0xb}, 0x7a) 13:15:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x91040000, [0x40000022]}) 13:15:23 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a0") dup3(r1, r0, 0x0) [ 420.172220] binder_alloc: binder_alloc_mmap_handler: 19195 20005000-20008000 already mapped failed -16 13:15:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xaf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\x06\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00') socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x7, @mcast1, 0x401}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x3ff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, 0x100000001}, @in6={0xa, 0x4e23, 0x7ff, @loopback, 0x4}], 0x64) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000140)=0x6) syz_open_dev$mouse(&(0x7f0000000440)='/dev/input/mouse#\x00', 0x0, 0x4000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) capset(&(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000640)={&(0x7f0000000600)='./file0\x00'}, 0x10) 13:15:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0xb}, 0x7a) 13:15:24 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a0") dup3(r1, r0, 0x0) 13:15:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000087) 13:15:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x98010000, [0x40000022]}) 13:15:24 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, 0xb}, 0x7a) 13:15:24 executing program 0: timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12}, &(0x7f0000000580)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/114, 0x72}], 0x1) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000000132, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r2, 0x0) r3 = gettid() tkill(r3, 0x1000000000016) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000140)={0x2, 0x3, 0x7, 0x6, 0x9, [{0x81, 0x7fffffff, 0x3, 0x0, 0x0, 0xa}, {0x3, 0x5062c3bb, 0x8, 0x0, 0x0, 0x2500}, {0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x100}, {0x96, 0xc000000000, 0x6, 0x0, 0x0, 0xc00}, {0x8e, 0x4, 0x65a3, 0x0, 0x0, 0x100}, {0x8, 0x7, 0x1ff, 0x0, 0x0, 0x100}, {0x39, 0x2, 0x100000001, 0x0, 0x0, 0x4}, {0x6, 0xffffffff7fffffff, 0x80, 0x0, 0x0, 0x1080}, {0x8c7b, 0x7483, 0x401, 0x0, 0x0, 0x2000}]}) 13:15:24 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a0") dup3(r1, r0, 0x0) 13:15:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xaf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\x06\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00') socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x7, @mcast1, 0x401}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x3ff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, 0x100000001}, @in6={0xa, 0x4e23, 0x7ff, @loopback, 0x4}], 0x64) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000140)=0x6) syz_open_dev$mouse(&(0x7f0000000440)='/dev/input/mouse#\x00', 0x0, 0x4000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) capset(&(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000640)={&(0x7f0000000600)='./file0\x00'}, 0x10) 13:15:24 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0xb}, 0x7a) 13:15:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000088) 13:15:24 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") dup3(0xffffffffffffffff, r0, 0x0) 13:15:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x99010000, [0x40000022]}) 13:15:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xaf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\x06\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00') socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x7, @mcast1, 0x401}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x3ff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, 0x100000001}, @in6={0xa, 0x4e23, 0x7ff, @loopback, 0x4}], 0x64) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000140)=0x6) syz_open_dev$mouse(&(0x7f0000000440)='/dev/input/mouse#\x00', 0x0, 0x4000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) capset(&(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000640)={&(0x7f0000000600)='./file0\x00'}, 0x10) 13:15:24 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, 0xb}, 0x7a) 13:15:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') close(r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r4, &(0x7f0000000200)="eb5f9e80ee2a8ded10676ae1745b8b475110d2af812c234ba4fba558e30618d5a4409e1d7cbdf2be24f74f6695afe5e8410030e9591a52878ff656ea8507884b67ae56ade55a27de49caa2f0706f98b650538c6edd84b15b51699d1054c747886ffbc5c2f5fe812aa428a5432c26aa181087fb016641e06ccca9411bf471fd256c1377267c9c547b6849a6b50fe5a3926ddcd17bd320dec5be6c6b6771cc1a5f4fc50aabb11612b21881c9fc98b0124c3bb7558ef1", &(0x7f0000000040)=""/123}, 0x18) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={0x0, 0xfffffffffffff000, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000180000000000000f00ffffebffffff0000000000000000"], 0x20}}, 0x0) 13:15:24 executing program 1: openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") dup3(r0, 0xffffffffffffffff, 0x0) 13:15:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000089) 13:15:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x9e000000, [0x40000022]}) 13:15:24 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000]}, 0xb}, 0x7a) 13:15:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0xefff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x1, 0x4, 0x5, 0x0, 0x6, 0x4, 0xd, 0x71, 0x0, 0x80, 0x9, 0x1, 0x0, 0x3, 0x4, 0x80, 0x3ff, 0x401, 0x8fe}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000480), r4, 0x1}}, 0x18) r5 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x9, 0x200) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f00000000c0)='./file0\x00', r5}, 0x10) 13:15:24 executing program 1 (fault-call:3 fault-nth:0): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") dup3(r1, r0, 0x0) 13:15:24 executing program 0: r0 = socket$inet(0x2, 0x3, 0x81) sendmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000024"], 0xd}}], 0x1, 0x0) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="d7d2c3e439decfafc340400488a9046d74ae884b980243dabd7858028d399121148ab126f4c37e728a51e85e150f900c49e6c7d539a47219e6e35f0925ad5eb60187b7ba835f39ed41c15ac06635c6ce730588847f55e0b88e9336f95210bd78dbcee60d9d6920c8c427505d699cece514832223f9afa19f446fed92be7fc76bc32b4a32a2e427d8c88bb1d2438c6620695a2a49d400cfd9832eba715537cc3e1244d503d980d84e7f01758646dc9765505789651425ea1e67cf72c5fd103f074e63e15fbb", 0xc5}], 0x1, &(0x7f00000004c0)=[{0x90, 0x10a, 0x5, "417487915efbce5d5d662d57a2bd62736022d9bac322c85055681988ca80b8d9ae0c33efaf6aa4c215d7711cedb56ff713c404ab5d0a552403f39ec71118719aaf5065dca06609445ffd5620e70af26efb903c2e462628770929d1ccc7f63d2780e5efe64a0854c1189872e68fcdca12b30260b30574ea86120e22f1fc146fa6"}, {0x88, 0x19f, 0x3ff, "defeed2dc4744d809f90177197c9605b1f68a3e946c9c29e2524fe04cbc2002122a368d4bceff5f4ef81f03c3e7205cb84586be26fe64bf08e047df1348a2b19ea073f9d46dd50bd4604fe6bcc4756cf97b85999f9dd719ce354ced92ef97a9297a2d9a4ba5f6967997b49de24615c715e"}, {0x68, 0x118, 0x1, "ba4c2c816e98a5699eb861963fe03590e423c555c81c8039e02616f656fef777ce64ccf74bfce184b146e56a72a957315632206cbbd067fe904be18d7cda075347fc1315273e3c8cce800f057ced90e81b"}, {0x40, 0x10f, 0x9, "bd1d70b316887093b3402382857991b79f68762c9f66143dcaca96e6a0b7f3a17d30c367a8aa095d8987abfa58e7"}, {0xc0, 0x0, 0x231, "4ddcbd45ac44dba9ce745fe95bb9620839f81270bc2f57244e74fa768d9b15208a47a9919f2d97b1ed771e93aa96806a99afe495df67e3d5272b5d5aaebf0c29fb293e561bb7c3c27aa538af4ea421dc2cf96205952a14ccfe4f62a2c03a40a0c694f2e667e3506b767c1ab2fc13dabc126ebd991b15b0f259cbb2a0957bfd007afd15d0c57e8aeb24454fc59bd51d6b316f93a6811142efe9d90febabdeb2bed55b7a092a2fc05549a6"}, {0x1010, 0x109, 0x0, "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"}], 0x1290}}, {{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000480)}}], 0x2, 0x0) 13:15:24 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, 0xb}, 0x7a) 13:15:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x100000000000008a) [ 421.293964] raw_sendmsg: syz-executor0 forgot to set AF_INET. Fix it! 13:15:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x9f000040, [0x40000022]}) 13:15:25 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") dup3(r1, r0, 0x0) 13:15:25 executing program 0: syz_emit_ethernet(0x4c, &(0x7f0000000000)={@random="59cc9ee6e8e1", @remote, [], {@llc={0x4, {@llc={0x8e, 0xf6, "1736", "dbc97f7d19cfc39582396a93f655b89170638f1778d2864cd47553e17ef7e0b05e6fca8c123582f139711796e814efe0662f402f269cd071cb64"}}}}}, &(0x7f00000000c0)) [ 421.482513] ------------[ cut here ]------------ [ 421.487572] kernel BUG at arch/x86/kvm/x86.c:357! [ 421.492522] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 421.497893] CPU: 0 PID: 19305 Comm: syz-executor3 Not tainted 5.0.0-rc1+ #21 [ 421.505068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.514897] RIP: 0010:kvm_spurious_fault+0x9/0x10 [ 421.519774] Code: e8 ec 1b 76 00 41 bd 03 00 00 00 5b 44 89 e8 41 5c 41 5d 5d c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 c7 1b 76 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 49 89 d6 41 55 41 54 [ 421.538672] RSP: 0018:ffff88804caef170 EFLAGS: 00010212 [ 421.544065] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9000be4f000 [ 421.551326] RDX: 00000000000000b6 RSI: ffffffff810bdb99 RDI: 0000000000000007 [ 421.558601] RBP: ffff88804caef170 R08: ffff888054a18180 R09: fffff520015ab047 [ 421.565885] R10: fffff520015ab046 R11: ffffc9000ad58237 R12: 0000000000000000 [ 421.573145] R13: ffff88804cc6c000 R14: ffff88804caef240 R15: ffff8880955ac000 [ 421.580413] FS: 00007fce6750d700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 421.588631] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 421.594504] CR2: ffff88804caef240 CR3: 000000004f4b7000 CR4: 00000000001426f0 [ 421.601785] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 421.609057] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 421.616313] Call Trace: [ 421.618895] vmx_vcpu_load+0x4e9/0x1030 [ 421.622881] ? perf_log_itrace_start+0x570/0x570 [ 421.627642] ? find_get_context.isra.0+0x6c0/0x6c0 13:15:25 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='/dev/dlm-monitor\x00'], &(0x7f0000000480)=[&(0x7f0000000300)='/dev/dlm-monitor\x00', &(0x7f0000000340)='/dev/uhid\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='keyringppp1&[\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='^\x00']) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000640)={0x0, 0x1f, 0x80000000, 0x400, 0x401, 0xffffffff}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000900)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xc, r3}) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.origin\x00', &(0x7f0000000600)='\x00', 0x1, 0x2) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000004c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3000, 0x1}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x100000000}, &(0x7f0000000500)=0x8) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000540)={r4, 0x2}, &(0x7f0000000580)=0x8) dup3(r1, r0, 0x0) 13:15:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000]}, 0xb}, 0x7a) [ 421.628544] kobject: 'loop1' (00000000094c3ab0): kobject_uevent_env [ 421.632570] ? vmx_handle_exit+0x1840/0x1840 [ 421.632583] ? add_lock_to_list.isra.0+0x450/0x450 [ 421.632598] ? check_preemption_disabled+0x48/0x290 [ 421.632613] ? check_preemption_disabled+0x48/0x290 [ 421.658492] ? finish_task_switch+0x1e9/0xac0 [ 421.658729] kobject: 'loop1' (00000000094c3ab0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 421.662999] ? find_held_lock+0x35/0x120 [ 421.663014] ? finish_task_switch+0x1e9/0xac0 13:15:25 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_IOCTL(r0, &(0x7f0000000040)={0x1fd, 0x0, 0x2, {0x7, 0x0, 0xfffffffffffffffa, 0x7f}}, 0xfffffffffffffd1f) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000002c0)={0x18, 0x0, 0x4}, 0x18) 13:15:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0xb}, 0x7a) [ 421.663031] ? _raw_spin_unlock_irq+0x28/0x90 [ 421.663048] kvm_arch_vcpu_load+0x241/0x970 [ 421.663065] ? print_usage_bug+0xd0/0xd0 [ 421.693960] ? kvm_arch_dev_ioctl+0x5e0/0x5e0 [ 421.698461] ? trace_hardirqs_off_caller+0x300/0x300 [ 421.703570] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.709122] ? check_preemption_disabled+0x48/0x290 [ 421.709417] kobject: '0:50' (000000009253c219): kobject_add_internal: parent: 'bdi', set: 'devices' [ 421.714194] vcpu_load+0x37/0x80 [ 421.714212] kvm_arch_vcpu_ioctl+0x15c/0x3ba0 [ 421.714225] ? finish_task_switch+0x1a8/0xac0 [ 421.714239] ? __switch_to_asm+0x34/0x70 [ 421.714251] ? __switch_to_asm+0x40/0x70 [ 421.714264] ? __switch_to_asm+0x34/0x70 [ 421.714279] ? preempt_notifier_register+0x200/0x200 [ 421.714296] ? kvm_arch_vcpu_put+0x430/0x430 [ 421.736397] kobject: 'loop5' (000000007d96396c): kobject_uevent_env [ 421.739830] ? mark_held_locks+0x100/0x100 [ 421.739844] ? __switch_to_asm+0x40/0x70 [ 421.739859] ? __schedule+0x89f/0x1e60 [ 421.739874] ? add_lock_to_list.isra.0+0x450/0x450 [ 421.780881] ? pci_mmcfg_check_reserved+0x170/0x170 [ 421.785925] ? try_to_wake_up+0xf9/0x1480 [ 421.790067] ? find_held_lock+0x35/0x120 [ 421.794124] ? try_to_wake_up+0xf9/0x1480 [ 421.798282] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 421.803380] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 421.808478] ? lock_acquire+0x1db/0x570 [ 421.812447] ? kvm_vcpu_ioctl+0x1a4/0x12d0 [ 421.816726] ? ___might_sleep+0x1e7/0x310 [ 421.820886] ? lock_release+0xc40/0xc40 [ 421.824855] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 421.829952] ? try_to_wake_up+0xf9/0x1480 [ 421.834135] ? kvm_vcpu_ioctl+0x1a4/0x12d0 [ 421.838379] ? __mutex_lock+0x622/0x1670 [ 421.842451] ? kvm_vcpu_ioctl+0x1a4/0x12d0 [ 421.846712] ? fixup_owner+0x250/0x250 [ 421.850615] ? mutex_trylock+0x2d0/0x2d0 [ 421.854697] ? do_raw_spin_unlock+0xa0/0x330 [ 421.859123] ? do_raw_spin_trylock+0x270/0x270 [ 421.863745] ? mark_held_locks+0x100/0x100 [ 421.867996] ? __lock_acquire+0x572/0x4a30 [ 421.872232] ? get_futex_key+0x2050/0x2050 [ 421.876465] ? perf_trace_lock+0x12f/0x750 [ 421.880722] ? add_lock_to_list.isra.0+0x450/0x450 [ 421.885651] ? mark_held_locks+0x100/0x100 [ 421.889906] kvm_vcpu_ioctl+0x9d5/0x12d0 [ 421.893971] ? kvm_vcpu_block+0x1010/0x1010 [ 421.898290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.903823] ? lock_downgrade+0x910/0x910 [ 421.907968] ? kasan_check_read+0x11/0x20 [ 421.912131] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 421.917402] ? rcu_read_unlock_special+0x380/0x380 [ 421.922331] ? __fget+0x499/0x710 [ 421.925788] ? iterate_fd+0x4b0/0x4b0 [ 421.929596] ? lock_release+0xc40/0xc40 [ 421.933571] ? kvm_vcpu_block+0x1010/0x1010 [ 421.937899] do_vfs_ioctl+0x107b/0x17d0 [ 421.941875] ? ioctl_preallocate+0x2f0/0x2f0 [ 421.946280] ? __fget_light+0x2db/0x420 [ 421.950244] ? fget_raw+0x20/0x20 [ 421.953700] ? put_timespec64+0x115/0x1b0 [ 421.957847] ? nsecs_to_jiffies+0x30/0x30 [ 421.961999] ? do_syscall_64+0x8c/0x800 [ 421.965971] ? do_syscall_64+0x8c/0x800 [ 421.969939] ? lockdep_hardirqs_on+0x415/0x5d0 [ 421.974517] ? security_file_ioctl+0x93/0xc0 [ 421.978919] ksys_ioctl+0xab/0xd0 [ 421.982365] __x64_sys_ioctl+0x73/0xb0 [ 421.986250] do_syscall_64+0x1a3/0x800 [ 421.990162] ? syscall_return_slowpath+0x5f0/0x5f0 [ 421.995099] ? prepare_exit_to_usermode+0x232/0x3b0 [ 422.000109] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 422.004951] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 422.010146] RIP: 0033:0x457ec9 [ 422.013348] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 422.032238] RSP: 002b:00007fce6750cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.039938] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 422.047232] RDX: 0000000020000280 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 422.054524] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 422.061793] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce6750d6d4 [ 422.069057] R13: 00000000004c0a85 R14: 00000000004d24e8 R15: 00000000ffffffff [ 422.076323] Modules linked in: [ 422.079546] ------------[ cut here ]------------ [ 422.084293] kernel BUG at arch/x86/kvm/x86.c:357! [ 422.089131] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 422.094504] CPU: 0 PID: 19305 Comm: syz-executor3 Tainted: G D 5.0.0-rc1+ #21 [ 422.103061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.112407] RIP: 0010:kvm_spurious_fault+0x9/0x10 [ 422.117248] Code: e8 ec 1b 76 00 41 bd 03 00 00 00 5b 44 89 e8 41 5c 41 5d 5d c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 c7 1b 76 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 49 89 d6 41 55 41 54 [ 422.136139] RSP: 0018:ffff8880ae607c78 EFLAGS: 00010006 [ 422.141491] RAX: ffff888054a18180 RBX: ffff88808d843810 RCX: ffffffff8139cb1a [ 422.148751] RDX: 0000000000010000 RSI: ffffffff810bdb99 RDI: 0000000000000007 [ 422.156024] RBP: ffff8880ae607c78 R08: ffff888054a18180 R09: ffffed1015cc5ba9 [ 422.163283] R10: ffffed1015cc5ba8 R11: ffff8880ae62dd47 R12: 1ffff11015cc0f94 [ 422.170555] R13: ffff8880ae607cc0 R14: ffff8880ae607d20 R15: ffff8880566af000 [ 422.177863] FS: 00007fce6750d700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 422.186096] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.191970] CR2: ffff8880ae607cc0 CR3: 000000004f4b7000 CR4: 00000000001426f0 [ 422.199262] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 422.206521] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 422.213776] Call Trace: [ 422.216348] [ 422.218493] loaded_vmcs_init+0xcb/0x320 [ 422.222547] ? find_msr_entry+0x170/0x170 [ 422.226690] ? sched_clock+0x2e/0x50 [ 422.230413] ? check_preemption_disabled+0x48/0x290 [ 422.235425] __loaded_vmcs_clear+0x2c1/0x520 [ 422.239826] ? check_preemption_disabled+0x48/0x290 [ 422.244830] ? loaded_vmcs_init+0x320/0x320 [ 422.249140] ? pvclock_read_flags+0x160/0x160 [ 422.253623] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.259151] ? check_preemption_disabled+0x48/0x290 [ 422.264173] ? rcu_softirq_qs+0x20/0x20 [ 422.268143] flush_smp_call_function_queue+0x1bb/0x640 [ 422.273410] ? loaded_vmcs_init+0x320/0x320 [ 422.277723] ? smp_call_function_any+0x1c0/0x1c0 [ 422.282471] ? sched_clock_cpu+0x1b/0x1b0 [ 422.286623] ? check_preemption_disabled+0x48/0x290 [ 422.291631] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.297158] ? check_preemption_disabled+0x48/0x290 [ 422.302171] generic_smp_call_function_single_interrupt+0x13/0x2b [ 422.308395] smp_call_function_single_interrupt+0x117/0x640 [ 422.314101] ? smp_call_function_interrupt+0x640/0x640 [ 422.319384] ? trace_hardirqs_off+0x310/0x310 [ 422.323886] ? task_prio+0x50/0x50 [ 422.327432] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 422.332969] ? check_preemption_disabled+0x48/0x290 [ 422.337983] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 422.342832] call_function_single_interrupt+0xf/0x20 [ 422.347924] [ 422.350154] RIP: 0010:oops_end+0x61/0xf0 [ 422.354250] Code: 00 00 00 c7 05 9c bd 62 08 ff ff ff ff e8 37 9c 1e 00 83 2d b8 65 6c 09 01 74 36 48 83 3d b6 cf 65 08 00 74 53 48 89 df 57 9d <0f> 1f 44 00 00 e8 e5 a3 1e 00 be 02 00 00 00 48 c7 c7 c0 16 99 8a [ 422.373167] RSP: 0018:ffff88804caeef98 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff04 [ 422.380860] RAX: 0000000000040000 RBX: 0000000000000286 RCX: ffffc9000be4f000 [ 422.388159] RDX: 0000000000040000 RSI: ffffffff814b4d49 RDI: 0000000000000286 [ 422.395423] RBP: ffff88804caeefb0 R08: ffff888054a18180 R09: fffffbfff14b7b60 [ 422.402698] R10: fffffbfff14b7b5f R11: ffffffff8a5bdafb R12: ffff88804caef0c8 [ 422.409969] R13: 000000000000000b R14: ffffffff8844ec20 R15: 0000000000000000 [ 422.417239] ? add_taint+0x29/0x70 [ 422.420782] die+0x3e/0x48 [ 422.423630] do_trap+0x101/0x230 [ 422.426992] do_error_trap+0xd6/0x200 [ 422.430800] ? kvm_spurious_fault+0x9/0x10 [ 422.435040] do_invalid_op+0x37/0x50 [ 422.438741] ? kvm_spurious_fault+0x9/0x10 [ 422.442966] invalid_op+0x14/0x20 [ 422.446426] RIP: 0010:kvm_spurious_fault+0x9/0x10 [ 422.451257] Code: e8 ec 1b 76 00 41 bd 03 00 00 00 5b 44 89 e8 41 5c 41 5d 5d c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 c7 1b 76 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 49 89 d6 41 55 41 54 [ 422.470148] RSP: 0018:ffff88804caef170 EFLAGS: 00010212 [ 422.475500] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9000be4f000 [ 422.482756] RDX: 00000000000000b6 RSI: ffffffff810bdb99 RDI: 0000000000000007 [ 422.490012] RBP: ffff88804caef170 R08: ffff888054a18180 R09: fffff520015ab047 [ 422.497273] R10: fffff520015ab046 R11: ffffc9000ad58237 R12: 0000000000000000 [ 422.504532] R13: ffff88804cc6c000 R14: ffff88804caef240 R15: ffff8880955ac000 [ 422.511816] ? kvm_spurious_fault+0x9/0x10 [ 422.516549] vmx_vcpu_load+0x4e9/0x1030 [ 422.520520] ? perf_log_itrace_start+0x570/0x570 [ 422.525272] ? find_get_context.isra.0+0x6c0/0x6c0 [ 422.530197] ? vmx_handle_exit+0x1840/0x1840 [ 422.534606] ? add_lock_to_list.isra.0+0x450/0x450 [ 422.539549] ? check_preemption_disabled+0x48/0x290 [ 422.544559] ? check_preemption_disabled+0x48/0x290 [ 422.549569] ? finish_task_switch+0x1e9/0xac0 [ 422.554071] ? find_held_lock+0x35/0x120 [ 422.558152] ? finish_task_switch+0x1e9/0xac0 [ 422.562638] ? _raw_spin_unlock_irq+0x28/0x90 [ 422.567143] kvm_arch_vcpu_load+0x241/0x970 [ 422.571493] ? print_usage_bug+0xd0/0xd0 [ 422.575548] ? kvm_arch_dev_ioctl+0x5e0/0x5e0 [ 422.580063] ? trace_hardirqs_off_caller+0x300/0x300 [ 422.585166] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.590711] ? check_preemption_disabled+0x48/0x290 [ 422.595765] vcpu_load+0x37/0x80 [ 422.599123] kvm_arch_vcpu_ioctl+0x15c/0x3ba0 [ 422.603607] ? finish_task_switch+0x1a8/0xac0 [ 422.608097] ? __switch_to_asm+0x34/0x70 [ 422.612194] ? __switch_to_asm+0x40/0x70 [ 422.616247] ? __switch_to_asm+0x34/0x70 [ 422.620303] ? preempt_notifier_register+0x200/0x200 [ 422.625427] ? kvm_arch_vcpu_put+0x430/0x430 [ 422.629828] ? mark_held_locks+0x100/0x100 [ 422.634080] ? __switch_to_asm+0x40/0x70 [ 422.638137] ? __schedule+0x89f/0x1e60 [ 422.642137] ? add_lock_to_list.isra.0+0x450/0x450 [ 422.647060] ? pci_mmcfg_check_reserved+0x170/0x170 [ 422.652070] ? try_to_wake_up+0xf9/0x1480 [ 422.656221] ? find_held_lock+0x35/0x120 [ 422.660273] ? try_to_wake_up+0xf9/0x1480 [ 422.664416] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 422.669510] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 422.674612] ? lock_acquire+0x1db/0x570 [ 422.678578] ? kvm_vcpu_ioctl+0x1a4/0x12d0 [ 422.682817] ? ___might_sleep+0x1e7/0x310 [ 422.686959] ? lock_release+0xc40/0xc40 [ 422.690926] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 422.696024] ? try_to_wake_up+0xf9/0x1480 [ 422.700185] ? kvm_vcpu_ioctl+0x1a4/0x12d0 [ 422.704417] ? __mutex_lock+0x622/0x1670 [ 422.708482] ? kvm_vcpu_ioctl+0x1a4/0x12d0 [ 422.712737] ? fixup_owner+0x250/0x250 [ 422.716630] ? mutex_trylock+0x2d0/0x2d0 [ 422.720708] ? do_raw_spin_unlock+0xa0/0x330 [ 422.725113] ? do_raw_spin_trylock+0x270/0x270 [ 422.729712] ? mark_held_locks+0x100/0x100 [ 422.733957] ? __lock_acquire+0x572/0x4a30 [ 422.738183] ? get_futex_key+0x2050/0x2050 [ 422.742408] ? perf_trace_lock+0x12f/0x750 [ 422.746638] ? add_lock_to_list.isra.0+0x450/0x450 [ 422.751559] ? mark_held_locks+0x100/0x100 [ 422.755892] kvm_vcpu_ioctl+0x9d5/0x12d0 [ 422.759947] ? kvm_vcpu_block+0x1010/0x1010 [ 422.764261] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.769787] ? lock_downgrade+0x910/0x910 [ 422.773926] ? kasan_check_read+0x11/0x20 [ 422.778062] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 422.783344] ? rcu_read_unlock_special+0x380/0x380 [ 422.788285] ? __fget+0x499/0x710 [ 422.791745] ? iterate_fd+0x4b0/0x4b0 [ 422.795532] ? lock_release+0xc40/0xc40 [ 422.799512] ? kvm_vcpu_block+0x1010/0x1010 [ 422.803839] do_vfs_ioctl+0x107b/0x17d0 [ 422.807806] ? ioctl_preallocate+0x2f0/0x2f0 [ 422.812222] ? __fget_light+0x2db/0x420 [ 422.816187] ? fget_raw+0x20/0x20 [ 422.819630] ? put_timespec64+0x115/0x1b0 [ 422.823778] ? nsecs_to_jiffies+0x30/0x30 [ 422.827949] ? do_syscall_64+0x8c/0x800 [ 422.831926] ? do_syscall_64+0x8c/0x800 [ 422.835896] ? lockdep_hardirqs_on+0x415/0x5d0 [ 422.840474] ? security_file_ioctl+0x93/0xc0 [ 422.844876] ksys_ioctl+0xab/0xd0 [ 422.848325] __x64_sys_ioctl+0x73/0xb0 [ 422.852206] do_syscall_64+0x1a3/0x800 [ 422.856101] ? syscall_return_slowpath+0x5f0/0x5f0 [ 422.861030] ? prepare_exit_to_usermode+0x232/0x3b0 [ 422.866048] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 422.870889] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 422.876072] RIP: 0033:0x457ec9 [ 422.879257] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 422.898147] RSP: 002b:00007fce6750cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.905845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 422.913106] RDX: 0000000020000280 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 422.920374] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 422.927634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce6750d6d4 [ 422.934908] R13: 00000000004c0a85 R14: 00000000004d24e8 R15: 00000000ffffffff [ 422.942195] Modules linked in: [ 422.945388] ---[ end trace f1f78fd08dbaac6e ]--- [ 422.950136] RIP: 0010:kvm_spurious_fault+0x9/0x10 [ 422.954982] Code: e8 ec 1b 76 00 41 bd 03 00 00 00 5b 44 89 e8 41 5c 41 5d 5d c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 c7 1b 76 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 49 89 d6 41 55 41 54 [ 422.973874] RSP: 0018:ffff88804caef170 EFLAGS: 00010212 [ 422.979251] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9000be4f000 [ 422.986507] RDX: 00000000000000b6 RSI: ffffffff810bdb99 RDI: 0000000000000007 [ 422.993768] RBP: ffff88804caef170 R08: ffff888054a18180 R09: fffff520015ab047 [ 423.001029] R10: fffff520015ab046 R11: ffffc9000ad58237 R12: 0000000000000000 [ 423.008289] R13: ffff88804cc6c000 R14: ffff88804caef240 R15: ffff8880955ac000 [ 423.015559] FS: 00007fce6750d700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 423.023945] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.029817] CR2: ffff8880ae607cc0 CR3: 000000004f4b7000 CR4: 00000000001426f0 [ 423.037086] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 423.044345] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 423.051604] Kernel panic - not syncing: Fatal exception in interrupt [ 423.059100] Kernel Offset: disabled [ 423.062726] Rebooting in 86400 seconds..