acda3eae15add927ffa3ee0626ca007a869d84967"}, {0xa0, 0x117, 0xffffffffffffff00, "26ccdddb471e1908ba2c9237140f4507f1c1731499f77674eba5b4adabb08ad54090378c52e2744295a147b2e0d0cd9cc05126b2d2e336a7086637b5aca9aabccf0da8c461f14d0b36c6a1ebf096cd17a712927c1cdba2a89f89435ad6fddb344961ce56b80990b69c588e27d75569701de37d7ec2c7dc5bde593241676111ece381cf07ae2f71b5460c7dce4f4691"}, {0x108, 0x108, 0x10001, "e67e7f0f8988bbc81699b937f1e3c70cb846c64ef8c05b87924458d8fae1da4c2bd21d916e6e407a6d08a20d9120eb234c3a60b3b4886510180e8b7454e443e63db2fd848e55e7d4577b8d868d55632aec2ce0dd5a67a165bea0c15d33b0359b85a92e4722cbfd3b6ccd05d077e12b3183f1c5f94a5862175b3bce8f199d106f8e86790942b460a5daf558126d7e618d3ef25be4b01da6d7ccabaaaa0de44d7e682b0b20121e04f8669dce53d8a32c4c7b852b9df42b5cfd5a4697896028321b1c20cebb6fede6b1bac8d85c327d99c322afc885ab90fcb33820eb175d924446434f2455a2d17c3e353e5859d306a20ada9bb58b"}, {0x50, 0x13f, 0x4, "6a3748634381ed68902f44a106ad9b1de61de67226df4c502046079c19b36a98f570373e53962af85b5ec1ce4ecf1dc7e0d2afed4fd24bba3461a9f262aa"}, {0xd8, 0xff, 0x4026, "65e2391fc2138d9cd115baef3a6235ccfb9923fcad5e4f876c8fd87604747ee4aa9d9e46f4ef30a50fe9ba6c59516d8c661e6d15b4544aea9aefe1699c4bd00b86eea7168a3d2917c15279cb0e9ccb2f3fc25fd94c28879bff01b55f2ba5e8ed46b91f70d475f95b8656e31ffe7e78949ce20b8d465d2d1af83ad9a165b0911a55c552313013c360af59c554c04fd11d224e71cd5f525aec2034408b03605af2338cf92320f2f26222a3f107218f01db6cdac087445f4796571a87531352205c84d87a12e70c82"}, {0xe0, 0x116, 0x6, "cde4618398f91a6648407c9855e1d7e2602a418ac001658d1bbcd258f2d4b73d1a008f377ed9cdb531bc57807a2ceaa8b67030f93baf20a97d950991095ed022bc4c60b82e4b9c4964e7af73272c46fdd9b3dfea4aa51eab0ffed4304ffe555830d570bcd8635e701f7cf25d79eb7259b0b359cec868dcb0fab2fe6ddef03014f1c4a0a59b199311eb19cd07529cf22e5a2cef3fb7a78f2801bda176bc5e561e88cc634db8f640f797f223e8f07560a4c520d4d08691b68f325476a7317e4ea18ae34bcc3a73c723068a4f1e662ecd"}, {0x100, 0x11f, 0x200, "351044a7719cb704433211f75b8940c05bfa332e28e860ec25398ba494b1601edc737b5277a1f949cd56fa699015bd98fbfb88d293f09329094489171a806167afb2731b29a37a66e062d3e2cc50fa2ab2c5db5947f49c45c245223e7823de5c95a0eb2137d8c06f6473f884ecff83722239a2712969e77e9e4b320e6f4434ff946d33e2168c1e77dfbadd5dfea629cc8caebf23a600f2389daa124bc0f2c8ad92db9564bc5aa87682b1b7c939899e1ef069b796f62ae363b829b56426a60808698768edc87d289c9d072ffcb8da34a6ea3b4300bb2712573de89b4fe0515f7d3a5e01c6c333368825d1"}, {0x1010, 0x197, 0x0, "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"}], 0x1548}, 0x9}], 0x1, 0x7735ff53af33cf64) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) syz_emit_ethernet(0x40, &(0x7f0000000100)={@broadcast=[0xff, 0xe0], @broadcast, [{[], {0x8100, 0x8be7, 0x10001}}], {@generic={0x0, "2857599245cde46f1c29a14151f85551bf23f1f4ac56c89eaf188a93435c84482c55808064e02c2d7973b2ba9b6b"}}}, 0x0) 13:04:51 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) dup(r0) r1 = dup(0xffffffffffffffff) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000000000000000100008000000000020000000001000000000000211c81000000626b57692e4f"], 0x38) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0x0, 0x7f, 0xffff}]}, 0x10) 13:04:51 executing program 2: capset(&(0x7f0000000080)={0x24020019980330}, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}) sched_setattr(0x0, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x7ff}, 0x0) [ 273.464738] binder: 9090:9091 ioctl c0306201 0 returned -14 [ 273.479870] binder: 9090:9091 ioctl c0306201 200000c0 returned -11 13:04:51 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x4010, r0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x800, 0x0) r2 = signalfd4(r1, &(0x7f0000000040)={0x3}, 0x8, 0x80000) ioctl(r2, 0x9, &(0x7f00000000c0)="5eabf524fc34393a51f69246de647fdf6b646649ad26ce90139542e22f62a27352c340bb3da6c23610956998b526adbce96abead4203c8eaa082456bc57011bbcef83ff4d185934d52685c42741ce9ddf164b8970f9dd293b6be43d4") 13:04:51 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) r0 = syz_init_net_socket$ax25(0x3, 0x7, 0xcf) sched_setattr(0x0, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) capset(&(0x7f00000000c0)={0x19980330, r1}, &(0x7f0000000100)={0x400000000, 0x8000, 0x8, 0x4, 0x0, 0x2}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0xc0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x80080, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f00000001c0)={0x7, [0x9, 0x2, 0x5, 0x8, 0x80000000, 0x1f0000000, 0x4, 0x7, 0x800, 0x7, 0x5, 0x1ff, 0x3, 0x81, 0x3, 0xffffffffffffff04, 0x745, 0x200, 0x8, 0x6, 0x2, 0x69fd571d, 0x6, 0xe58c, 0xba, 0x3, 0xb467, 0x2, 0x8, 0x4, 0x8, 0x8, 0xe6c4, 0x7f, 0x6, 0x1000, 0x9c, 0x4, 0x4, 0x2, 0x401, 0x4, 0x6, 0xfff, 0x9, 0xced, 0x4, 0x59], 0x9}) 13:04:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:04:51 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x0) sendto(r0, 0x0, 0xffffffffffffffbc, 0xfffffffffffffffe, 0x0, 0x0) 13:04:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0xffffffff, 0x400000) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000280)={0x2, &(0x7f0000000040)=""/149, &(0x7f0000000180)=[{0x9, 0x13, 0x9, &(0x7f0000000100)=""/19}, {0x0, 0x4f, 0x20, &(0x7f0000000200)=""/79}]}) r3 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc0105303, &(0x7f0000dc5f98)) 13:04:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 274.244759] binder: 9112:9115 ioctl c0306201 0 returned -14 [ 274.266610] binder: 9112:9115 ioctl c0306201 200000c0 returned -11 13:04:52 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x7}, 0x10000) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x80000000400000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='bdevvmnet1\x00', r0}, 0x10) 13:04:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x123ba582, 0x101100) sendmmsg$nfc_llcp(r1, &(0x7f0000004180)=[{&(0x7f0000000040)={0x27, 0x1, 0x0, 0x2, 0x6, 0xffffffff80000000, "322036ec811f4cde770fdc17aa289a268c0b6a64599fe515d2b743fbbe997ed7195f2a7043ed3f4fa55cc81148b709cd06156b6e4c6f16aab42332841883d8", 0x4}, 0x60, &(0x7f0000001280)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="98e073d5bed684fc29f16e0e3a693402c2370b9557a12adf7be46ec4034a3e643202eb239de6b71f0906185be80c86c2bfe4d391adff0bb3db9f8a531129a64133244b7071c003fbd016119ba36bf0d9ca1385ec8ae6e59973ea103830b9be4e58cc69335b8742c326abc4d17128f57a1061f0171bc22106f16a652dcfcee324c32bd5a26e9330a24286faa293d28c7412138a828db7a09e82461a8df9126bfdedfe2f29177c89bf0c991342d943e56417d47ac9f0a593b04ca9f198aeef897b5d23378a8d789bc97108605609b8", 0xce}], 0x2, &(0x7f00000012c0)={0x28, 0x103, 0x77f, "e02c8dbc9cb9c6c71fa4bf858019269de0cc1cc1"}, 0x28, 0x40000d0}, {&(0x7f0000001300)={0x27, 0x0, 0x1, 0x5, 0x1, 0x5, "4778eba17ec093802471b64da84657ed7cc025d8490461e1e62324c0c3f6ef800ac63ffa7b4da34215fe4bfe3f7fa0a1aac9642700e5c3bdcceeaeed4237ef", 0xe}, 0x60, &(0x7f0000001840)=[{&(0x7f0000001380)="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", 0xfb}, {&(0x7f0000001480)="41c8189f5b51725976419dac6c5585330d9e7660c8788ad75eb5f285336467868a6d87048cbaa703b9ceb901a505a007a8c2723eb71c2fb761aad9621ab27e4e4c9cba4b22dc4f5a468d90bed74036e39a104dc282751e798509dd7c12ed3805089ab7d6b68e57a88e7ac284926602f19dd575ebcb7e2b50c4ddc9ba99c84545341ca6a21e826fb81a7ea30bbf03912a831529b6e269c361d6", 0x99}, {&(0x7f0000001540)="577c99df0d0853154c3cb110fe20924aa2019631f0302d02cbe479e47f94a8c87c9c07c27c7bc9a62c98d1ea13d639f35b10ff05e52f6c422d2557f334502bfc4b6d767ecd63c1a4cb5df56eb2d79eefd55e927b79235a1b68407487cff33ad9ed5d4e1feeed9485261418c15cd3a0f057683260b6aef175ded883b9d261e31b6d00d5a9a4c3ec1fa720660697848d3c8a94454daaae2e4afa7b3ab1c9f8c8344e4948b505f3c1b1bd57bdd980c5d1d948de6f4a3dfa89fd83121e8e34bbee", 0xbf}, {&(0x7f0000001600)="23f4de166a01490f966f3909501d45b2bf8684070e1695acc063a2aa4d36779a0311883c023e08583993f601ac0ac72810e630692de74d0dd7237fc5d0f7b7bcb807045b8665a3a2307ee58727039bd643707139fb0ffbcdd5b1c221c2e131d17d64b571967e5d4dc5", 0x69}, {&(0x7f0000001680)="58cf9f2ea1812697a0a9821326db", 0xe}, {&(0x7f00000016c0)="bbf7cef275ab55f7470b", 0xa}, {&(0x7f0000001700)="50f4787f7eaef1c0c4499cbc7d9876b2e829fed79462bb125bd3fca6e65d368dd274384c54373e00778cb9d54e5781aab7c501ae1b9dd04fe3520a02eca57f174814e68972460eb2ea3068ac3448b67ba1452ab75d04ecb916ee6a3e92b081b545c7f885b7d8e8676de8ad6b2bc3c6d852e20b6cafed77b113569ae54ef66b94d0d2675ba5719d30935576337ad3e6f5242c8e8381ac384af40c0b9ad13db07a315cacf33c17a1abd4fb7bb95a370f9a3dd064c6bd46775c82ebb550c39c681db01083a837ed9f5218521d08dbc21cb687c20339f0d3dc", 0xd7}, {&(0x7f0000001800)="0fb19d5275632c84a5544733c21b392a5c61fd899e890fb3c8f297e474d69ecd3abf2bf2cc41591e", 0x28}], 0x8, &(0x7f00000018c0)={0xf0, 0x10c, 0x7, "675699b3d0fc188effc9175ee9f92ea975d37b73a0d92a94ab4388d5c88a6042b6217b3cb5e95cfaba7c4132e56d20419480f1b95dbe1aa2b57f4f9538274399b367741131f6e9c4dc16acd434092ab669523f340016ef7f66dd700ad37f073750a97fa0e5e306f8d755016ed37f448522abf2d363d4e14d2e5f04cb78bdd2af3df5b4edd45c7a1b42f47f741e53e0da7e79b1681818c7fae2f9225705150cef7a72fa91fb3d85cca79f95ac3911181190600faaaca42c90b5570ce83963e12b9dd89f616f125ae27d6982546617713156bfd7df49ebb05a6053193fa5"}, 0xf0, 0x4000000}, {&(0x7f00000019c0)={0x27, 0x0, 0x2, 0x6, 0x2, 0x1, "b587cd03154b062a15ce857790fdd1113aaf7be14dc2ee7d9d4fa63f89ff38c42759b6cee06b96955ca572578f4a1cda0633154f922dc4794adce48add2152", 0x31}, 0x60, &(0x7f0000001f40)=[{&(0x7f0000001a40)="8f4d0a7697a0b5b81ae9a8e0f490e0e7aa8825b36952cd7fdd9f925116c963d102da39d917f031b5940ac5e2cbf51d210670630ed6bc2b01ee3ce7ada1ee00a43130806906b71e3ceaf852dc3d601b6a2d06725d2ba9670a5c7bc3a469c51d058111d16461e9b697c134416b7f49d325ed398f4d01d7fcd7f164726c7b59991cdda40bf1f2372fce75fc6f40fa06e1af8a75d2e0b5ce3afe6655824d5b61f624fb4e6c5eb310e20ed8e875ba6ef73390", 0xb0}, {&(0x7f0000001b00)="d3f5c49ccad15a65ef817bd691054d8ff51c78233520c65c8ad24cbc25caa84fee1915719897d485f1b78e22828b94284875c4ac2c310cef3ceaa4d83472c974793b04bcb4d9", 0x46}, {&(0x7f0000001b80)="6be1c058607bef8cdb17a7c5d555dab7556c3925261a22154f4970921f71835bb1f0a96ee773a0849c628076f5b01b06f2eff4f77d46620fa1a151746bb5850297b55118dc82b196f444dc6d956f2ea00b5f08a259b08016a22efbb7ef526c640e344adf4644b3479134d41e73aebaf8a57fb59c6b5e81db37e0f0eee86bb3e2516250cbfd433afd21811b81", 0x8c}, {&(0x7f0000001c40)="46cf503be64a3ca8d76aaf0ade0c6bb15c145681fdf27ff447fe09af147ce007ea667328f007f571c464c91dd1884be207b5ab7c003896aff30c06ddae5b3169109c26a867475c5a782f7f5a4fd2f965bdfae4a79ea233", 0x57}, {&(0x7f0000001cc0)="3187a3ee56ac653ba23e7ce3dfad67eed42362454086aa59d9ef1d80ca05dedef63ad949655c9e1d868a8bfca147a414a81bbc11dc80f086dbe4ca22f72b5cc4cb2bbd550eef20ab5730326d2037c7dd533060e28c", 0x55}, {&(0x7f0000001d40)="6446844199206942b7f1e3a1302fcfde7b3f2e392f9f9d4bedd8d82a35fbdc51371098f0642718b757e716a0983261f4ee1cf4686cf71c995eb4b1bd06ffd0c10850b776a53798cc699685f8ad4d7fd76e84573b615111b94d820abee14bf834cff46d17cba6af8f88ecf4d75f48eebd2fc1af0365dc20f165130b8f408470af8378a901d859d2ad1a60df06cab6625189d16a39c8e4b1cb09ddce13cd9de5693642850b524d4caf5e4ed0", 0xab}, {&(0x7f0000001e00)="60c4dc9432147513e172902feef870a408c631c73acb503d6178d0e3fb4abbfaf4a18d6ae637c79efaa27bc10b34af55dd1af3188fd98b9764", 0x39}, {&(0x7f0000001e40)="3b836d67523c4200ae7372e644723563c292da00a6aecddabcc69668ad8c8a7f626dd1c8301c8398b94db6135c6dff6bca8481bc9bb19fd4a0aa28bc7ab5f3b2ae2e05ed50488b5c37b21279766127e9068724f3e3519e5d036708f0937e1ad5a961d90cf1c0b5ffcdfed9b4d93a1ddd023a7db0e534288661daedf7465696ba187aed8157583d724e1e98e149de8a3fdc4644c35623070f07f3b7ad6d54c58386b9493829f0651fe40783b391b39e09494abaac07c5a155cead74c60532e78ad76c6a136d35a51c8cc2b42ab7fcb93d5b3cfc9e4eb645d987b108bd11", 0xdd}], 0x8, &(0x7f0000001fc0)={0x58, 0x11f, 0x1, "2dc2b0a01e8da27de7baab017f291c3d9ebff104c25a5feb3404c6e47787b035e82b6137e4e1a2e19e163c76fad852193f403b48ed4abd9b74fe5681afedc5a2f47b21090ba1"}, 0x58, 0x10}, {&(0x7f0000002040)={0x27, 0x1, 0x2, 0x3, 0x9, 0x3fce, "e53f1476449f3b81d0cb239fcfcee7ae7bb735a751b756073940671e42f7912b007e32694d8f617457c091798b43342f6ee44d76c9d28e69d563b245b098a0", 0x30}, 0x60, &(0x7f0000002780)=[{&(0x7f00000020c0)="d347cc0976418cb91af932411d968a3f1c80fa4a2301f7983a83754af8912fff868053b5f248b8b863483c2a1233586964b93fe8ad14ba84eb5b7e78f4dded8d29ae77fd2c33ec53710b8ef49923a6880fc2bd8c75a835fc90133a7288c76b619886b4df4e3deadb832927464866b23981b3253248d3f16e49ef3dcc16f518f57f89cca6e9d1c2be47066c0f27160dd9d6762764aa37809ce81dae73f1d8e0224e376c14b30d6485be3acd3aca055cd857ea08000c3331f20132b62cdbc8f11522e173a64f771a151cf36c153d96618c4d5b586610e889fed76e3beec087f77b7ab0f7fcf68500ef04fe", 0xea}, {&(0x7f00000021c0)="01e94df44036e7dd9ce93bc7115deaa087762bbc12", 0x15}, {&(0x7f0000002200)="2804685cf756a2426380647e5161a1b3d81a99abdbae310e1b6f3f19569dd84d5e7fa77d6eabfcacd27e2745dc160dcd6d353a0fbc85af7930cb39b242447fc4f4597eda0e638d80e8949afb7e73fa84e67d247d6170aed9a1a65a1ac360c6d5bf62e20455b48f40353b3167cb6d3eb6bba7fe48b9cf44d30b1adcf07d6d628e85d08fbcff341753c7fed5066aab7052b8d21ec9c3f68ede5753227b010cc9d0f165434d893b3c166ec09bcd4fb79630f1ab2476c2fc2899b539609f3b6290b1411c5c54391698cfbd670851", 0xcc}, {&(0x7f0000002300)="f869b65a5065e1b7d3d90b5fe2ce0b452bb2dc0520e07adc0844da8b6ccd58d0b2266520c926395b0557f4b61d1711e6ab694bdeaff33eb369cf65e569fe9fa5c9e19e49079778266d650350", 0x4c}, {&(0x7f0000002380)}, {&(0x7f00000023c0)="7f6c5001e2e8727639b237aa829e577fc7cc37dee302bd3d4b0a6a790b85f21be3ff0c9d255b122b767cd25308e460396cfe36204d5f05f4d268e2c787ea3c11a0971eafa28d4564e1c2da150d84c7cc579c657aa0ad217034c2b1ba805f876f730b4685e3e1782c747f9530661b774809bbeb3a7829f4405527837e68d7a33f0b432958b88fb284e062e4388d827206edf55688fbc30381d05921812f05d31bcc2f4d9e09458f4ceebb14c46eaa63a2af654b91052c8de7b2e7911d3ec51dbb28fe60bc7509cee1b2e1d60a33b57dac4fc522cf546cb5e86728c3d9e20cdd16ac245b97600460622f", 0xe9}, {&(0x7f00000024c0)="181d19dc5b4c1066201a7c5be487c7dca5ef1ce4f6bb3d74adb6bdcff250ab8bcc11c5e2e756", 0x26}, {&(0x7f0000002500)="a26f69f1b4632ea77823576fccca6613f804a68a3f4aa061e921dc56aa116a88c6e38857328f92ddd40c64a1c9f58dc290c3855851b944693ac257ab4b72cce1b1a8b5a3fa1977ed5ae34774d50b10764c7f9f987a9ec8c84ecdbda982c7cc345c12446627c1d9b02b0fd0c7e4ca4fc8f81189db50a5f778edbe216489a59907913059defa2545fe6241d5e8f14b0b183cf93fb338258ebfe6c07b1914e81ce2dd50aa28df398126fc2f33326c6580a958f48cbdb9513c8e917df0d9f1c1564b536021032de2e3d404a6e2ef9d4e5e0b6bdb768334787a7013fd893a23e758bffab99ac2cf8602b6c95e3638af8527fe", 0xf0}, {&(0x7f0000002600)="63351fa3299d59d33e46211e2c818fc82ed51eb6d0f8c3a2e707375568f8e749f55e82bcfe599f897839f204c2194ff95ca8565c870c526dbb069e4f1df295486ec0312e37a7b5abaea8616eb430f6c6d58bb7ba21c22441c3fb4c55b55328e268daa59b1645daaa13abb3ef133489cba902f4aa4dba69b0bcb61fed28478889c0387bc9be10647ccffd0418aecdece4f1bd172de1b4ff5eb8823847264cf5111cb90f33c9c62f99724e6bebb939ac2d0165f2a5ee475533876099ccfe5b0ac529be109f9d9e4539ef1ea7ddaa9d9949b44137ba1432d08933024a79e6fdd84084e766", 0xe3}, {&(0x7f0000002700)="0b94d8452549210eedabcfa5b5a77f432ecab888c1f19d4f46a855d793f5ad196b0e9b84418b538cd789cbf5535e69475981d29f039727fa6242aa05df526c4ea413670ad68c", 0x46}], 0xa, 0x0, 0x0, 0x4000}, {&(0x7f0000002840)={0x27, 0x0, 0x2, 0x1, 0x401, 0x2c9, "d61e548bab66eb1d0f257100e816811683cbe7a40b989e883df824bd1a97cb084d143a9c4977de12c6e818da130bf4a355946f96c05bcd20a8b40bd0dfbb50", 0x3b}, 0x60, &(0x7f0000002c80)=[{&(0x7f00000028c0)="72524436ab018068a30caaaa2b4f1af9cf02990c3531fd8eac0ea36e7d5fe23838d845a7a02dbaf3bb04ffb64e2cce29119f70edea97c0cbac6f0c1db96d6fd5bc2675995938b0a7d3533413d89c510b1757b73baa2c65d2a71bf38624513d861a4ea0e3f433758d40bf47dfa1a5a4cfeef96f888f59baf1dc4d9e7a0005eae4471995431c32e2f0e737327393f64feb881b66708ce8b357133193b0b668e2f79c946583ea33a777", 0xa8}, {&(0x7f0000002980)="6f952d904ec2bd3e4fcbff8438d7d6215e40f36bae407db1b0efdac7747727caf2880a4990b53a2ebd3538e77b8e898c13d0f4f036df6eb378198707a7b3c315836ae3d4e0381137bb62502a61e6dc51c6f91d3e9a49533ea0ec7f0300537624afa7343ff79e3827d0ed6523438ce5d0a6f780046d21b26a73b2d047426857214f226d7216c10482479b4b7a755d6cc0b6d63c5515b29a60a868b456d12f283f0a22d21c3cc1a01832b187", 0xab}, {&(0x7f0000002a40)="310cb74c20c39e012973704bddf62c02408d42f2100a7632484f05d69a22bce37446a7786da4ffd9b3222d982ef65836163cbc21ddaf887d91cdd67ad74614c1706a35bd0ddc4dc3c89f4ed6fc4df962a809d9d6ff8af0e447630a3892b3eba6911d343187cadf956a1315e2c0ac9ea3e672a6a0cb46f785ca48a7034e430ecdf9f969f51f3243f3f7e4349c87a4351fa2f096ea5cb50e172ee06cb07e50e318ff72e953beeb", 0xa6}, {&(0x7f0000002b00)="56348ad1cacb4995961d32b786d8e8c423753ec39d578bffdd0fccb659b1f7874ea9e670300ae7987d6e2e3478282b3c49367c00e481dfb2cf0061e8558bf1d50f77ebf0dfe90c1dc78ed77ef060e59256b074c0522146366e0495e97a8e8f06d6c33432efbd7150db3706661992a09a35a8a2486ba33aa5af0ba1d548434f78eff033918edec1e22a95d44797b59f49a00cc559f9a2c84233f62a91b26baff32a270e2a7e1967f58443d10f19f3a47b04497b3ccff415", 0xb7}, {&(0x7f0000002bc0)="2b1485a53e852b583dae1ff4abed70bed9d556b9d804f3a26e9db289ec416072ab8baf8e101a0d65d9e53e2a4500", 0x2e}, {&(0x7f0000002c00)="450aba5e5a67711c50deb866b353a6fecc5351a27cb1cba058f61748c36e0816e40cadb59a0622330f09a2a26bf3d6119d65c7569a74134f0537157f55f1651a15470fec264484e1ceecbf9374ac4e631e6a5896deb462be83a79845f43539", 0x5f}], 0x6, &(0x7f0000002d00)={0x70, 0x0, 0x557, "e3c1ab15193ab42433432f77c1a6976ae51639d5e119c7b7d6c42858757ba241f7d2b80ad33a450b0ee879e98bd3fb5cf4d17914ec0a47d2bf8b3bad06eb4b829801d2295c4950fff208c11b2b29cb074c56c946ce740cc725dcae289025"}, 0x70, 0x800}, {&(0x7f0000002d80)={0x27, 0x1, 0x1, 0x570cf1b8f47c8247, 0x9, 0x1f, "d52f6cfb328cd165f6e89f29fe82505a132d1fddf0883c20faff9baf35299b3c92ce83fea83e6e6a494160708d29a688bd38990686ea5d53449ca866f79f8f", 0x9}, 0x60, &(0x7f0000004000)=[{&(0x7f0000002e00)="88141194a25895eb929f4277619213050e78bfe7844c583b06d05be10c85030c61840a96aa182d8186774b65e10e66bf97b8de89f8cf2e2545f35c1b4393e19b5c5c7c167932ee02fed89a7106ccce4ca5757ab1cc9286d9a01560bd3458625d1420b025073033ff778e418ae85e6b6a86ca5c56bacf9fdde0574aaa7c1b97130813106f7fc28a42dba6af66c9133d715f3a0ce23f44d55e7ae38a5a0e9de5017627abb3367c284fb552c08e", 0xac}, {&(0x7f0000002ec0)="a377e4af39f68779db31dd7fbe92813f2ce593886930", 0x16}, {&(0x7f0000002f00)="780d08f7e5cb07be2bd31f281402c6c3204a05ffb3bb3a62f51ff30639b43036498747237a3d5f5f978f9eb83e2c2dfcbdc55ec4987d47f0891825d175e59a9ca60c6b1f86956999eee987bc1f52e6a606a0041b5da0bd59057a061f2c8f06b7956e427731eb3e6abfb52b0963fe6ad0fe3842ebbe", 0x75}, {&(0x7f0000002f80)}, {&(0x7f0000002fc0)="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", 0x1000}, {&(0x7f0000003fc0)="56a96d66021ea10d4bbd7b7407c622a99bef8080931d9f9cded7c1bc3dd82624f60f87f3e3843e5abc95ac2571912ce77cd5dfa90461551c820e", 0x3a}], 0x6, &(0x7f0000004080)={0xf8, 0x113, 0x4, "67bdb250c1d38605686b0bc304747847b2f71dd7e34b7fd649d80d1d4e2f74038d72181e58c3ca5a95571a741086dcec2a3fff7f18d4dc5dc3dddee1cd8369fc31d0d42554330d568ee4e58ab6c2fb9a95aeef391dcbe741f087b7726c231dac257ebd26fe6503bf80297bae69fde9b28b80da827f9c55f17ab5c5b3de9310fc4ac793b3fa9d0ce955c77c6dbf252f313ff1cb48e802e7b396016bc95b3f1258f4ab041740f2f3a437886b274489ce3e47be7a79e9e545e7925f903fafa41d70a33e8b7eca2bbca01699664cf71c29515e9c6260025013797cfb885841d01fd2733f51a6ad"}, 0xf8, 0x10}], 0x6, 0x40040) unshare(0x400) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x14, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 13:04:52 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2000, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x80, 0x3f}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000397ff4), 0x206, &(0x7f00000000c0)={&(0x7f0000c06d10)=@updsa={0x120, 0x1a, 0xa09, 0x0, 0x0, {{@in=@dev, @in=@local={0xac, 0x14, 0xffffffffffffffff}}, {@in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}, 0x0, 0x3c}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x1c}, @coaddr={0x14, 0xe, @in=@loopback}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x7) accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', r1}) [ 274.469111] binder: 9132:9136 ioctl c0306201 0 returned -14 [ 274.475760] binder: 9132:9136 ioctl c0306201 200000c0 returned -11 13:04:52 executing program 4: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) getsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000040)=""/22, &(0x7f0000000140)=0x16) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getegid() stat(&(0x7f0000000080)='./bus\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000280)=[r1, r2]) fallocate(r0, 0x0, 0x0, 0xa6ba0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000001c0)=0x5) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r3, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x4, 0x7, 0x8000, 0x0, 0x1, 0x0, 0x4, 0x81}, 0x20) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000840)={0x0, @broadcast, @remote}, &(0x7f0000000880)=0xc) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000400)={0x0, 0x28, &(0x7f0000000c00)="1e11d71595862db32bcb2ee8249f23ba97807cb998ba80ce06ae8da8adf0c45d6c81050318ff0d76"}) pselect6(0x0, 0x0, &(0x7f00000004c0)={0xffffffffffff423d, 0x2, 0x19da772540, 0x5, 0x0, 0x4, 0x1, 0xfffffffffffffffd}, 0x0, &(0x7f0000000740), &(0x7f00000007c0)={&(0x7f0000000780)={0x579}, 0x8}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000a00)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, 0x0) accept$packet(r0, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000012c0)={@ipv4}, &(0x7f0000001300)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000013c0)={{{@in6=@loopback, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f00000014c0)=0xe8) getsockname$packet(r0, &(0x7f0000001500), &(0x7f0000001540)=0x14) accept4$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001600)=0x14, 0x0) 13:04:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)={r1, 0x37}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000380)=0x8) fcntl$getownex(r2, 0x10, &(0x7f0000000440)={0x0, 0x0}) sched_setaffinity(r3, 0x3e7, &(0x7f0000000140)=0x5) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000000d40)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000dc0), 0x0, &(0x7f0000000e00)=""/181, 0xb5}}, {{&(0x7f0000001700)=@alg, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001780)=""/203, 0xcb}, {&(0x7f0000001940)=""/170, 0xaa}, {&(0x7f0000001a00)=""/94, 0x5e}, {&(0x7f0000001b80)=""/130, 0x82}], 0x4}}], 0x2, 0x120, &(0x7f0000001e80)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r6 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'bond0\x00\x00\x03$\xfe\xff\xff\x00'}) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8923, &(0x7f00000000c0)={'bond0\x00', 0xfff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x14, &(0x7f0000000040)={@mcast2}, 0x20) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc1a020100000000000008000000"], 0x1}}, 0xffffffffffffffff) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000840)='bpq0\x00', 0x10) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000140)={0x0, {{0x2, 0x4e23, @multicast2}}}, 0x5e) syncfs(r5) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000780)={0x5, 0xfffffffffffffeb5, 0xfa00, {&(0x7f0000000ec0), 0xffffffffffffffff, 0x1}}, 0xfffffffffffffef2) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f00000005c0)={@remote, r4}, 0x14) mount$fuseblk(&(0x7f0000000200)='/dev/loop0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='fuseblk\x00', 0x0, &(0x7f0000000580)=ANY=[]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_UNIMAP(r7, 0x4b66, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{}, {}]}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000300)={r6}) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0xfffffe2d) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000002c0)="e180db4e3b23cdde86a3b7ae4fdb961983a44c4bca5351a6904cf9b053d46ee691", 0x21) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) 13:04:52 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)='@\x00', 0xffffffffffffffff}, 0x30) capset(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) 13:04:52 executing program 1: getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @local, 'ip6_vti0\x00'}}) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) r2 = syz_open_dev$amidi(&(0x7f00000007c0)='/dev/amidi#\x00', 0x7, 0x420040) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000800)={@dev}, &(0x7f0000000840)=0x14) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r1, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8, 0x5}, {0x7, 0x101}]}, 0x14, 0x1) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, 0x0, 0x0, 0x5) r3 = getpid() sched_setscheduler(r3, 0x3, &(0x7f00000002c0)) mkdir(&(0x7f0000000180)='./file0\x00', 0x4000000) syz_mount_image$btrfs(0x0, 0x0, 0x4, 0x0, &(0x7f0000000940), 0x0, 0x0) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c00855c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8f6a0a994793ae8ded25df5f25a1df7a1eb614e2ab4aaf0cf2c49dc3fd581d7f8304372483cd594caf9439af4b56e80e33d2e1dcebd92116aac446794df11420382f6fcd53961a414b9afc8c04bddaf98159be6f6"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r5 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x4, 0xf4c00) syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000900)={{{@in=@initdev, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000a00)=0xe8) r6 = msgget(0x2, 0x2) msgctl$IPC_STAT(r6, 0x2, &(0x7f00000004c0)=""/145) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000a40)={{{@in6=@ipv4={[], [], @multicast2}, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000b40)=0xe8) read$FUSE(r5, &(0x7f0000002400), 0x180) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x8000a0) 13:04:52 executing program 3: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x8012, r1, 0x0) 13:04:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:04:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:04:52 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x0, 0x0) 13:04:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = getpid() ptrace$getregset(0x4204, r1, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/161, 0xa1}) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x7ffff000, &(0x7f00000000c0)}}, {{&(0x7f0000000280)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000007, 0x10, r2, 0x0) [ 274.952035] overlayfs: failed to resolve './file1': -2 13:04:52 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) sched_setattr(0x0, &(0x7f0000000000), 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x84800, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3ecb5032574a4753bce90f797c1fb3df3ec015dd1831814fbb897fcac5be3", 0x1f) 13:04:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:04:52 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 275.119293] overlayfs: failed to resolve './file1': -2 13:04:53 executing program 4: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) getsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000040)=""/22, &(0x7f0000000140)=0x16) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getegid() stat(&(0x7f0000000080)='./bus\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000280)=[r1, r2]) fallocate(r0, 0x0, 0x0, 0xa6ba0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000001c0)=0x5) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r3, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x4, 0x7, 0x8000, 0x0, 0x1, 0x0, 0x4, 0x81}, 0x20) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000840)={0x0, @broadcast, @remote}, &(0x7f0000000880)=0xc) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000400)={0x0, 0x28, &(0x7f0000000c00)="1e11d71595862db32bcb2ee8249f23ba97807cb998ba80ce06ae8da8adf0c45d6c81050318ff0d76"}) pselect6(0x0, 0x0, &(0x7f00000004c0)={0xffffffffffff423d, 0x2, 0x19da772540, 0x5, 0x0, 0x4, 0x1, 0xfffffffffffffffd}, 0x0, &(0x7f0000000740), &(0x7f00000007c0)={&(0x7f0000000780)={0x579}, 0x8}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000a00)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, 0x0) accept$packet(r0, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000012c0)={@ipv4}, &(0x7f0000001300)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000013c0)={{{@in6=@loopback, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f00000014c0)=0xe8) getsockname$packet(r0, &(0x7f0000001500), &(0x7f0000001540)=0x14) accept4$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001600)=0x14, 0x0) [ 275.837068] syz-executor4 (9158) used greatest stack depth: 17880 bytes left [ 277.691868] ÿ: renamed from bond0 13:04:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0006000000000000081702000000000108001b0000000000"], 0x30}}, 0x0) 13:04:55 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x111080, 0x0) sched_setattr(0x0, &(0x7f0000000000), 0x0) 13:04:55 executing program 1: r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000001c0)=0x600210) r2 = epoll_create1(0x80000) r3 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000480)={'broute\x00'}, &(0x7f0000000280)=0x78) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) fsync(r2) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000180)="3efb011c35f6ca99f844f2a9de41f2acaaa26f6073030430eade3fb04bce27a44ca4bb", 0x23) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f00000003c0)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="d347548f6e4b6274b6e9608161eeb57d936fff38b89eb366e2e6df4bb4ad0bc277e01879753fb8c3ebd73aba17a581f0f67d106e0cdbe40f08e986e0bd95fc497013b860f816b681737067453fb4ddd1253ffa2093e17e3ff24eb0894dd36985269d43448ec8ec33fb70b887e3ec8f", 0x6f, 0x4000, 0x0, 0x0) sendfile(r1, r3, &(0x7f00000ddff8), 0x102002700) write$P9_RCREATE(r0, &(0x7f0000000200)={0x18, 0x73, 0x1, {{0x20, 0x0, 0x5}, 0x2}}, 0x18) geteuid() sendmsg$nl_generic(r0, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x90, 0x19, 0x0, 0x70bd29, 0x0, {0x7}, [@nested={0x7c, 0x5e, [@generic="da549eca708bd76eaaa1ecc192123b155d6f0e129893fdb38334d504a8fec1e45b756d130c90df7c9328d6cdf2678f36f3be87283665dd39d104103f691abb2676939887c6c38eb41d1e4e5b780a294deb3bfbff4493a120ef451763265ab5fbbf05449b168ef69e694807da3e96d38371950ed27e"]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 13:04:55 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:04:55 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) getsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000040)=""/22, &(0x7f0000000140)=0x16) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getegid() stat(&(0x7f0000000080)='./bus\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000280)=[r1, r2]) fallocate(r0, 0x0, 0x0, 0xa6ba0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000001c0)=0x5) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r3, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x4, 0x7, 0x8000, 0x0, 0x1, 0x0, 0x4, 0x81}, 0x20) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000840)={0x0, @broadcast, @remote}, &(0x7f0000000880)=0xc) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000400)={0x0, 0x28, &(0x7f0000000c00)="1e11d71595862db32bcb2ee8249f23ba97807cb998ba80ce06ae8da8adf0c45d6c81050318ff0d76"}) pselect6(0x0, 0x0, &(0x7f00000004c0)={0xffffffffffff423d, 0x2, 0x19da772540, 0x5, 0x0, 0x4, 0x1, 0xfffffffffffffffd}, 0x0, &(0x7f0000000740), &(0x7f00000007c0)={&(0x7f0000000780)={0x579}, 0x8}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000a00)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, 0x0) accept$packet(r0, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000012c0)={@ipv4}, &(0x7f0000001300)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000013c0)={{{@in6=@loopback, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f00000014c0)=0xe8) getsockname$packet(r0, &(0x7f0000001500), &(0x7f0000001540)=0x14) accept4$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001600)=0x14, 0x0) 13:04:55 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa64000000ff00080045ac141492c5efc9ae0f8f8cbdab4cb3110306907800000000450000000000000000890000ac1414aaac141400444000000000000000000000e000000200cdf400e000000100000000000000007f00000100000000ffffffff00000000e00000010000d0b8ac1414000000000058da7d000000000000000000000000000000"], 0x0) 13:04:55 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 278.000697] netlink: 16 bytes leftover after parsing attributes in process `syz-executor5'. 13:04:55 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3f, 0x10c40) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 13:04:55 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_drvinfo={0xf, "28252c037cb97de23da76cf990753ea1939890e5c2ac15acb5d7f84ac26abee4", "1dd9ede0803733d254df12aad7417f4a92a9441e3e77cd8d1938b2750a966c64", "ab709bc4b7a0aaa9b17ba5fd1b94c14c2bbea9fd1245bb570f207d5e117dda42", "5173db27e7a019b9f3c52b9efa19f539a8c632686a1eaed667173817438ea199", "1532b878ea7c88766df4362c72127e575aa0b0c60ef182cba0fd61b62c510958", "0a5f6f9c19a55bc4cd07e1b7"}}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x600000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x0, 0xc0, 0x0, 0x0, 0xc0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, &(0x7f0000000100), {[{{@ip={@rand_addr=0x5, @remote, 0xffffffff, 0xff0000ff, 'nlmon0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x21, 0x2, 0x10}, 0x0, 0x98, 0xc0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x10000}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@inet=@ecn={0x28, 'ecn\x00', 0x0, {0x30, 0x31, 0xfffffffffffffffa, 0x22}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xae, 0x2, 0xfffffffffffffffa}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) fcntl$getownex(r0, 0x10, &(0x7f00000004c0)={0x0, 0x0}) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000080)) 13:04:55 executing program 5: r0 = getpgid(0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x9, 0x4, 0x5, 0x2, 0x0, 0x8, 0x8, 0xb, 0xae6, 0x7, 0x4, 0x69800000000, 0x2, 0x7ff, 0xfff, 0x836, 0x8, 0x1, 0x4, 0x10001, 0x100000000, 0x2, 0x2, 0x0, 0x40, 0x1, 0x84c, 0xad, 0x3, 0x100000001, 0x9, 0x5, 0x4, 0x400, 0x0, 0x6, 0x0, 0x9, 0x4, @perf_config_ext={0x6, 0x7fffffff}, 0x4000, 0x3, 0x4, 0xc, 0x9, 0x7d, 0x7}, r0, 0xf, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r2, 0x0, r4, 0x0, 0x10002, 0x0) 13:04:56 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 278.258544] protocol 88fb is buggy, dev hsr_slave_0 [ 278.263692] protocol 88fb is buggy, dev hsr_slave_1 13:04:56 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:04:56 executing program 2: sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 13:04:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)={0x6c, r2, 0x201, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @remote, 0x1ff}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @loopback={0xff0f000000000000}}}}}]}]}, 0x6c}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x20) [ 278.627511] Started in network mode [ 278.665024] Own node identity fe8000000000000000000000000000bb, cluster identity 4711 [ 278.676401] Enabling of bearer rejected, failed to enable media [ 278.698137] Enabling of bearer rejected, failed to enable media 13:04:56 executing program 1: r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000001c0)=0x600210) r2 = epoll_create1(0x80000) r3 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000480)={'broute\x00'}, &(0x7f0000000280)=0x78) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) fsync(r2) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000180)="3efb011c35f6ca99f844f2a9de41f2acaaa26f6073030430eade3fb04bce27a44ca4bb", 0x23) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f00000003c0)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="d347548f6e4b6274b6e9608161eeb57d936fff38b89eb366e2e6df4bb4ad0bc277e01879753fb8c3ebd73aba17a581f0f67d106e0cdbe40f08e986e0bd95fc497013b860f816b681737067453fb4ddd1253ffa2093e17e3ff24eb0894dd36985269d43448ec8ec33fb70b887e3ec8f", 0x6f, 0x4000, 0x0, 0x0) sendfile(r1, r3, &(0x7f00000ddff8), 0x102002700) write$P9_RCREATE(r0, &(0x7f0000000200)={0x18, 0x73, 0x1, {{0x20, 0x0, 0x5}, 0x2}}, 0x18) geteuid() sendmsg$nl_generic(r0, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x90, 0x19, 0x0, 0x70bd29, 0x0, {0x7}, [@nested={0x7c, 0x5e, [@generic="da549eca708bd76eaaa1ecc192123b155d6f0e129893fdb38334d504a8fec1e45b756d130c90df7c9328d6cdf2678f36f3be87283665dd39d104103f691abb2676939887c6c38eb41d1e4e5b780a294deb3bfbff4493a120ef451763265ab5fbbf05449b168ef69e694807da3e96d38371950ed27e"]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 13:04:56 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:04:56 executing program 3: r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000001c0)=0x600210) r2 = epoll_create1(0x80000) r3 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000480)={'broute\x00'}, &(0x7f0000000280)=0x78) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) fsync(r2) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000180)="3efb011c35f6ca99f844f2a9de41f2acaaa26f6073030430eade3fb04bce27a44ca4bb", 0x23) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f00000003c0)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="d347548f6e4b6274b6e9608161eeb57d936fff38b89eb366e2e6df4bb4ad0bc277e01879753fb8c3ebd73aba17a581f0f67d106e0cdbe40f08e986e0bd95fc497013b860f816b681737067453fb4ddd1253ffa2093e17e3ff24eb0894dd36985269d43448ec8ec33fb70b887e3ec8f", 0x6f, 0x4000, 0x0, 0x0) sendfile(r1, r3, &(0x7f00000ddff8), 0x102002700) write$P9_RCREATE(r0, &(0x7f0000000200)={0x18, 0x73, 0x1, {{0x20, 0x0, 0x5}, 0x2}}, 0x18) geteuid() sendmsg$nl_generic(r0, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x90, 0x19, 0x0, 0x70bd29, 0x0, {0x7}, [@nested={0x7c, 0x5e, [@generic="da549eca708bd76eaaa1ecc192123b155d6f0e129893fdb38334d504a8fec1e45b756d130c90df7c9328d6cdf2678f36f3be87283665dd39d104103f691abb2676939887c6c38eb41d1e4e5b780a294deb3bfbff4493a120ef451763265ab5fbbf05449b168ef69e694807da3e96d38371950ed27e"]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 13:04:56 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000100)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x200, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000180)=""/191, &(0x7f00000000c0)=0xbf) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xffffffff, 0x8, 0x8, 0xfff, 0x1000}, &(0x7f0000000240)=0x14) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r1, 0x4, 0x78c}, 0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0x101, 0xfffffffffffffffa, 0x0, 0x8, 0x2}, &(0x7f0000000380)=0x98) sched_setattr(0x0, &(0x7f0000000140), 0x0) 13:04:56 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) close(r0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xf9f8, 0x301000) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) 13:04:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:04:56 executing program 4: accept4(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x800) r0 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x200) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) lchown(&(0x7f0000000040)='./file1\x00', r1, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(r2, &(0x7f0000000240)) syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0xfffffffffffffffe, 0xfffffffffffffe9d, 0x0, 0x2, &(0x7f0000000340)=ANY=[]) 13:04:57 executing program 5: r0 = getpgid(0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x9, 0x4, 0x5, 0x2, 0x0, 0x8, 0x8, 0xb, 0xae6, 0x7, 0x4, 0x69800000000, 0x2, 0x7ff, 0xfff, 0x836, 0x8, 0x1, 0x4, 0x10001, 0x100000000, 0x2, 0x2, 0x0, 0x40, 0x1, 0x84c, 0xad, 0x3, 0x100000001, 0x9, 0x5, 0x4, 0x400, 0x0, 0x6, 0x0, 0x9, 0x4, @perf_config_ext={0x6, 0x7fffffff}, 0x4000, 0x3, 0x4, 0xc, 0x9, 0x7d, 0x7}, r0, 0xf, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r2, 0x0, r4, 0x0, 0x10002, 0x0) 13:04:57 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) get_thread_area(&(0x7f0000000080)={0x4, 0x20001000, 0x2000, 0x3, 0x7f, 0x3ff, 0x4000000000000004, 0x4, 0x3d4, 0x5}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x5, 0x0, 0x8001, 0x5}, 0x8) 13:04:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:04:57 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x50, 0x101000) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000001c0), 0x4) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_PIE_ON(r0, 0x7005) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000200)={0x18, 0x0, 0x5, {0x1b5}}, 0x18) openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') open(&(0x7f0000000140)='./file0\x00', 0x100, 0x0) preadv(r3, &(0x7f00000017c0), 0x1a4, 0x0) 13:04:57 executing program 1: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x4, 0x7}, 0x2c) r2 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x40) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f00000001c0)={0x1, 0x3}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0x200) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000440)={r1, &(0x7f00000001c0), 0x0}, 0x18) 13:04:57 executing program 3: r0 = memfd_create(&(0x7f0000000080)='.\x00\x1b!!\x89M\xe0g\xa1PEE\xd9\x9e', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000440)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RSTAT(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7e00400079f2ff0cebff00001000a057973fc261da5791b0cf340000"], 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000000)=""/88, &(0x7f0000000140)=0x58) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000200)={0x273}) 13:04:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 279.444151] binder: 9304:9314 ioctl c0306201 0 returned -14 13:04:57 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@int=0xcdd, 0x4) capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x5}, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000180)={0x5, "bc2a34313e77e0f81a56c748f37e8d3707113921b98bbfa9661841a083d00ca9", 0x1820, 0x2, 0x2000000000, 0x13, 0x5}) 13:04:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x7, 0x8, 0xffffffff, 0x400, 0x8, 0x3, 0x0, 0x200, 0x2e9, 0x2, 0x0, 0x1, 0x14fe44ba, 0x2, 0x5, 0x800], 0x6000, 0x10}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000080)={[], 0x0, 0x241}) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000000000000000000000000000000000000000000000000000000000000000000009000000000000000e55a5c31832c879992481afaa227410233204c9d48344c47e33caa96e7b334fdfe203588dab551d1fe75fae2ae12811f55a60c0f9375877f7b03bdb2a54ae29ae22331dfb30bb382cef01ee50605a14ba2814d3f83353df2ac883db7ae46016f983cc41dddfcafa4da73a753b2c814a907f73ac7cdf66c901955845a7ad79458ca3a652608675e1eb2aa508ee63757a0a58"]) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000580)={0x1, 0x0, @pic={0x0, 0x2947ea45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) [ 279.514037] binder: 9320:9321 ioctl c0306201 0 returned -14 13:04:57 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000340), 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da6b}}, 0x14}}, 0x0) socket$inet6(0xa, 0x803, 0x3) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, &(0x7f0000000000)=ANY=[]) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000100)={0xfffffffffffff801, 0xe12, 0x5905}) 13:04:57 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/80, 0x50}, {&(0x7f00000000c0)=""/237, 0xed}], 0x2) mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000003, 0x2012, r0, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f00000001c0)={0x4, 0x6, 0x7, 0x8, 0x800, 0x8, 0x1ff}) 13:04:57 executing program 2: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) r1 = getpgid(r0) capset(&(0x7f0000000040)={0x24020019980330, r1}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) 13:04:58 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000000)=0x40000000) 13:04:58 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000340), 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da6b}}, 0x14}}, 0x0) socket$inet6(0xa, 0x803, 0x3) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, &(0x7f0000000000)=ANY=[]) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000100)={0xfffffffffffff801, 0xe12, 0x5905}) 13:04:58 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x0, 0x2, 0x8000000, 0x0, r0, 0xfffffffffffffffe}, 0x2c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r1, r0}}, 0x18) r2 = dup(0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r6 = syz_open_dev$dmmidi(0x0, 0x3, 0x200000) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) connect$l2tp(r2, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x2, 0x3, {0xa, 0x4e23, 0x7ff, @mcast2, 0xfffffffffffffffe}}}, 0x3a) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000100)={0x8000, "06cf6cac46b98c0c607f2fb685337677887841c4d0f26b00866ffa7c86b5e361", 0x1, 0x1}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000280)={0x7, 0x8, 0x400, 0x4}, 0x10) listen(r5, 0x0) syncfs(r6) accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000003c0)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f00000000c0)) ftruncate(0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000200)=0x3) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x1, 0x1) 13:04:58 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200140, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) capset(&(0x7f0000000080)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) 13:04:58 executing program 4: keyctl$join(0x1, &(0x7f0000000200)={'syz'}) 13:04:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:04:58 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0) getpeername$ax25(r0, &(0x7f0000000180)={{0x3, @netrom}, [@remote, @remote, @rose, @remote, @bcast, @bcast, @bcast, @netrom]}, &(0x7f0000000100)=0x48) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f00000000c0)={0x5, 0x88}) 13:04:58 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_gettime(0x6, &(0x7f0000000200)) 13:04:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc) 13:04:58 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000000)=0x40000000) 13:04:58 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) capset(&(0x7f00000000c0)={0x24020019980334, r0}, &(0x7f0000000000)={0x800, 0x1, 0x0, 0x40100000001, 0x5a, 0x2}) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x5, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000140)=0x5ad) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40000, 0x0) 13:04:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:04:58 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) 13:04:58 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000007c0)='./file0\x00', 0x0, 0x0, 0x0, 0x280000, 0x0) [ 281.008326] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 281.028093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 13:04:59 executing program 1: 13:04:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:04:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:04:59 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_matches\x00') ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000100)) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000000c0)={0x7, 0x2, 0x2, {0x7, 0x0, 0x1, 0x80000001}}) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f00000001c0)) setxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.impure\x00', &(0x7f0000000280)='vmnet1+nodev\x00', 0xd, 0x1) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000180)) 13:04:59 executing program 5: 13:04:59 executing program 3: 13:04:59 executing program 5: 13:04:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x4e21, 0x8000000000000000, @dev}, 0xffffffffffffffff, 0xffffffffffffffff}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000003c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) 13:04:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:04:59 executing program 1: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc0506107, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x4e21, 0x8000000000000000, @dev}, 0xffffffffffffffff, 0xffffffffffffffff}}, 0x48) 13:04:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:04:59 executing program 2: capset(&(0x7f0000000080)={0x24020019980330}, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x0, 0x400}) sched_setattr(0x0, &(0x7f0000000000), 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000180)=[0xee01, 0xee00, 0x0, 0xee00, 0xffffffffffffffff]) syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x400000) write$P9_RGETATTR(r0, &(0x7f00000001c0)={0xa0, 0x19, 0x2, {0x2002, {0x0, 0x4}, 0x41, r1, r2, 0x42e7, 0x9, 0x3, 0x2, 0x778d, 0x8, 0xff, 0x80000000, 0x3, 0x7fff, 0x2, 0x800, 0x1, 0x0, 0x7564a30}}, 0xa0) 13:04:59 executing program 5: 13:04:59 executing program 3: 13:04:59 executing program 1: 13:04:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 281.563713] binder: 9432:9442 ioctl c0306201 0 returned -14 13:04:59 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) ptrace$getregset(0x4204, r0, 0x7, &(0x7f00000000c0)={&(0x7f0000000180)=""/141, 0x8d}) sched_setattr(0x0, &(0x7f0000000000), 0x0) 13:04:59 executing program 5: 13:04:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:04:59 executing program 3: 13:04:59 executing program 1: 13:04:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:04:59 executing program 3: 13:04:59 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) r0 = shmget(0x3, 0x4000, 0x54000220, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000180)=""/248) 13:04:59 executing program 5: [ 281.871311] binder: 9465:9468 ioctl c0306201 0 returned -14 13:04:59 executing program 3: 13:04:59 executing program 1: 13:04:59 executing program 5: [ 281.945948] binder: 9465:9468 ioctl c0306201 200000c0 returned -11 13:04:59 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, 0x0) capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x3, @loopback, 0x3ff}}, 0xfffffffffffffffe, 0xba, 0x5, 0x2, 0x22}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r1, 0xfffffffffffffff8}, 0x8) 13:04:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:04:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:04:59 executing program 3: 13:04:59 executing program 1: [ 282.131863] isofs_fill_super: root inode is not a directory. Corrupted media? 13:04:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:00 executing program 5: 13:05:00 executing program 3: 13:05:00 executing program 1: 13:05:00 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x400, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x81) sched_setattr(0x0, &(0x7f0000000000), 0x0) [ 282.277308] binder: 9502:9503 ioctl c0306201 0 returned -14 13:05:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:00 executing program 1: 13:05:00 executing program 5: 13:05:00 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000140)="1835662877421f8293326a4efd046c0dc066f17902006ba37c991f35e844112cda86ffe631648b64b86e49801a0ac553b4452cf509cadce85179ea103e6c90600eaecb21c9e8d7e0d792609a8787730175651d2acd079074a562f8f67e09b5d1f7a067c7da9998cbf787d944e7a9530b49a9930eda36823b9c") ptrace$cont(0x1f, r0, 0x0, 0x0) 13:05:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:00 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x400, 0x0) fcntl$setsig(r0, 0xa, 0xa) [ 282.484563] binder: 9521:9527 ioctl c0306201 0 returned -14 13:05:00 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 282.563093] binder: 9521:9527 ioctl c0306201 0 returned -14 13:05:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000001100)=""/4096) 13:05:00 executing program 3: clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) write(r1, &(0x7f0000000140), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000880)="68ce67253b5d084394b18c51976793287d5d9aac27c3ceadce6467de37de662dc0b3fa747cd27bf15e36524a707ae2fe1064df22df13bbb20d00234b83b073e6e45200a91a242174f6685c4eddf6729e531503d31b6bbce0d685e1e570d5e2000086dc630167ca85ffa840adc5ab3a70fef1d50ff15d4e6db2922d149751d62ae5d218849c07498feaf60acce6dedadea614124f7704a53a473e8f", 0x9b}], 0x1, 0x0) fchdir(r0) 13:05:00 executing program 1: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) request_key(0x0, &(0x7f0000000400)={'syz'}, 0x0, 0xfffffffffffffffe) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) socket$inet6(0xa, 0x6, 0x5c7de52c) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000100)) sendmmsg(r2, &(0x7f0000007fc0), 0x5654807, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x0, 0x2, @remote}, {0xa, 0x4e24, 0x0, @mcast1, 0x9}, 0x4, [0x0, 0x9, 0x610, 0xffffffff7fffffff, 0x5, 0xc20, 0x1, 0x2]}, 0x5c) syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0) syz_extract_tcp_res(0x0, 0x9, 0x20000000000001f) stat(0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000005c0)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0x68, r3, 0x324, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x400c080) 13:05:00 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x800000000000000, 0x0, 0x8, 0xdf6, 0x80000001}, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffff9c, 0x114, 0x2, &(0x7f00000000c0)={{&(0x7f0000000180)=""/233, 0xe9}, &(0x7f0000000000), 0x2}, 0x20) 13:05:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 282.761874] IPVS: ftp: loaded support on port[0] = 21 13:05:00 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:00 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000380)=@nl=@proc, 0x80, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) add_key(&(0x7f0000000740)='ceph\x00', 0x0, &(0x7f00000007c0)='O', 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:05:00 executing program 2: capset(&(0x7f0000000080)={0x24020019980330}, &(0x7f0000000140)={0x0, 0x1}) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7, 0x7b, 0x2}, 0x7) sched_setattr(0x0, &(0x7f0000000000), 0x0) [ 282.847473] binder: 9562:9565 ioctl c0306201 0 returned -14 13:05:00 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, &(0x7f0000000480)=[{&(0x7f0000000040)=""/4, 0x4}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') pwritev(r0, &(0x7f0000001400), 0x2a6, 0x0) 13:05:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:00 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 13:05:00 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:00 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa8a379641294f86dd60110c1100302100fe8000000000000000000000000000ffff020000000000000000000000000001010090780600000069cb155d00000000ff020000000000000000000000000001fe800000000000000000000000000000"], 0x0) [ 283.046216] binder: 9580:9583 ioctl c0306201 0 returned -14 13:05:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'bridge_slave_0\x00', {0x2, 0x0, @multicast1}}) 13:05:01 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5, 0x800, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "27ff84d9a3eb1d586a35d085dd7e9bc0513d68af80fe4e671906368ab3814993f3c41dd78e5c3a8a35d849afe054c14b8516a29a153ed9e5b7e67a63085c758f"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x5b, &(0x7f0000000380)={&(0x7f0000000300)={0x7, 0x0, 0x0, {}, {0x0, 0x2710}, {0xffffff7f}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 13:05:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:01 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:01 executing program 1: socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(r1, &(0x7f00000bd000), 0x49249ed, 0x0) poll(&(0x7f0000000080)=[{r1, 0x600}], 0x1, 0x532) read(r0, &(0x7f0000000400)=""/226, 0x3e3) 13:05:01 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)={0x8001}) sched_setattr(0x0, &(0x7f0000000000), 0x0) [ 283.498764] IPVS: ftp: loaded support on port[0] = 21 13:05:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, [@local, @multicast1]}, 0x18) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x2, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f31") socket$inet6(0xa, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) pipe(&(0x7f0000000540)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000500)='\x00', r1}, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x3ff}, 0x102) 13:05:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:01 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000100)={0x0, 0xfbf, 0x14000000000000, &(0x7f00000000c0)=0x153}) [ 283.588382] binder: 9612:9613 ioctl c0306201 0 returned -14 13:05:01 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:01 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000600)='GPL\x00\x83\xff\x13\x0f_\xb0\x0e][dCT\xb6\xe2\xa4wp\xc5\xa6$\x1e\x8d\xef\xd6S>*\xe1\x06\xbee\\lRcI!l0\xbb\x1f\x80\xfbE\x0e\xc0\xd5\xbe\x98\x01k\xc5\x9a3\xf8q\xb5\\\xc8b\xdc(\xe8{\xca\xd1\xb1\xd935\xdc\x9d\xce\x92\x06sf\xb3:4\x80\x8e\x7f5\xe1\xef\'\x04\x03\xd1\xaeJx\xf5>@\xa8\x1e\xe7j7o\x1c\xb6}Bt\"\xea\x86\x02W\xca\xc9\xde\x86\x1bX\xd9\a\xafv\x00\xb7\xbdpuz\x00\x00\x00\x00\x00R\xc7\xfb|,\xdc\xe8\xcc\xb6\xf4\xd9\xc5\xf1\x1d\xd3\xa7\xd48\xc5L@\x17\xbc\x97\x9et$\x88\x1c\xcc\xb3O\xa3X\x8b\xc3H{\xaf\xab\xcbC\xee\x120\x1f\xe1\x87\xd9}\v\x99,N\xafp\xef0\xd6\x0f\x9ci\xae\xa2\x81X\xfd6\xfe[4\v\x9f_\x93Zu\xdeo`\xf9\x9e\x9f\xdd\x018\x96\xe4Q\xf8]\xbeS\xf7\xaa\x95\n\xfc\xea-\x00\x00\x00\x00\x00\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Ob\b\xcfKr\x8ex\xf2c\xedUhmlOG\x8f\x85\xde\a\xfdt\x9d\x1co\rVI\xfa/g\x13\\\x18?PU\xf7\xb1\x9f\xa3\xfc\xd4R\xf8Z,&5\v\x12u!\xae-\x9f>\xc9\x99\x9a\xabz\xbaA\xf6\xe94\xb84\xca\x056\xff4V|\xe43\xe6D\xde\xae\xbf\xe5\xf4\x1fL\x99\x88\xbc\x1f\xfbC\xef\xf7\xfci\x98/?9<\xf2\xf2\xcb\xfd\x1cD@\xf4\xf0\xfe \xc3g\"\xae\xf4\x1d=\'~\x9eP\v\x1b\t\xcd\x04\x87\xb3\x042\xf2\x12\xc7>\x8a\xee{\xd9N\xae\x9c\xdf', 0xfffffffffffffffe, 0x99, &(0x7f0000000440)=""/153}, 0x48) 13:05:01 executing program 3: r0 = semget(0x2, 0x0, 0x0) semop(r0, &(0x7f0000003700)=[{0x0, 0xfffffffffffffffa, 0x800}], 0x1) 13:05:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 283.782923] binder: 9633:9634 ioctl c0306201 0 returned -14 13:05:01 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:01 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2000, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x8500, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x69c9030d}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r2}]}]}, 0x4c}}, 0x1) capset(&(0x7f0000000100)={0x24020019980230}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0)) 13:05:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000004740)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0x0, @local}, 0x80, 0x0}, 0xe803) close(r1) [ 283.945633] binder: 9648:9651 ioctl c0306201 0 returned -14 13:05:02 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7fff, 0x2001) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) 13:05:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 284.447949] binder: 9663:9664 ioctl c0306201 0 returned -14 13:05:02 executing program 5: syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000100)='\x90\x99\xf7:\x1cz\x8d\a\x0f\xc9\x11\x8dTuf;.\xd1o\x00\b\xf4A\xb0\x1f\xd9#\xc6@\xa2\x1cf\x19\xec\xb5\xcfwKJdT\x9dW\x96*\x83\x8f\x8e\xdd\x995`\xa2\xf8H\xbcH:\x9d\x16\xf6\x02\xd4s\x9a\xa4[=Y0\xd1\x86R2\xaf\xa7\x12Is\x80\xf8s1s\xc5\x85F\xfb\"Jm\xd2\xe6R\xc5M\xc2Up\xfc\xe3\xa5\x9c\x1e\xe3S\xa2\xdc\xddq\x9e\xdc\x15u,\xeen\xa2\x1a$\x18m\x1b\xa2;\vaq\x9b\x96\x81_\\\xbb\xb9', 0x0) write(r1, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000000) 13:05:02 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:02 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x5, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 13:05:02 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x10, 0xc6}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080), 0x0}, 0x18) 13:05:02 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) fanotify_init(0x42, 0x189401) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x4000000}, 0x0) 13:05:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x7, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080)=0x400, 0x4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000001, 0x0, r1, &(0x7f0000000080), 0x2d3}]) 13:05:02 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:02 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) socket(0x1e, 0x4, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200), 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) 13:05:02 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) lsetxattr$security_smack_transmute(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x2000, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x969, 0x40) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x3, 0x9, 0x3, 0xffffffff}, 0x56) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) sched_setattr(r1, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffff9, 0x1, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff}, 0x200000000000000) 13:05:02 executing program 1: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000580)='/dev/radio#\x00', 0x3, 0x2) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:05:02 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f00000007c0), 0x4da0d002771356, 0x0) fcntl$setstatus(r0, 0x4, 0x42c02) 13:05:02 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000040), 0x4) syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 13:05:02 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:02 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x40000000002002, 0x0) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0', [{0x20, 'IPVS\x00'}, {0x20, 'mime_typevboxnet1-ppp0'}, {0x20, '/dev/vsock\x00'}], 0xa, "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"}, 0x1034) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c6a8258bde3f1f20587ff0f00", @ANYRES16=r1, @ANYBLOB="00002cbd7000fddbdf250f0000000c00010008000500030000000c000100080005000300000020000100080002000000000008000b00736970000c00070028000000120000000800060007000000080004000f000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x840) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000001600)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f00000017c0)=ANY=[@ANYBLOB="94000000c8c763d9781da936d8657f15ae833eb31d6a75b69b95f7ff000000692d3103a11a237741027442210066e1a3cb17fd16f8fe9ce5ab5fe795cb8f235328dd0365135aa7812d51795564a597f828aa2a23c8cf3797a534f8c9d3478a0b5d735a26aa2bbf5515fb408500bf2a64a91a6cbdfab99f1f0e477b422212ee9df7bb31bd958694634fc41589d1a46a92ad6fa1666c60d850c7099431acc1aaa1decd260519f45721b96e9154851ba9a039562eb9bed418237a888650fdd458b7491b0e51e56fcbc816652de3b1f5978423823ad7771875022691b994e1f41dc600", @ANYRES16=r1, @ANYBLOB="00012dbd7000ffdbdf250a000000080005000400000040000100080006006e710000080006007272000008000500020000000c0007002600000006000000080002003b00000008000600777272000800080008000000300001000800010002000000080009003b0000000c000700200000000800000008000b007369700008000200110000000800040002000000"], 0x94}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[@register_looper], 0xfb, 0x0, &(0x7f0000000180)="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"}) sched_setattr(0x0, &(0x7f0000000000), 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000400)=""/89) 13:05:02 executing program 3: r0 = socket$inet(0x2, 0x3, 0x800000000000a) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0x8, 0x0, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x0, 0xc35, 0x0, 0x19, 0x20}, 0x0) syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x7, 0x2) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={0x0, 0x8}, 0x0) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, &(0x7f0000000380)=0x4, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket(0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 13:05:02 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000040), 0x4) syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) [ 284.985596] Unknown ioctl -1070571007 [ 285.004448] Unknown ioctl -2143271673 [ 285.023036] Unknown ioctl -1070571007 13:05:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 285.039463] Unknown ioctl -2143271673 13:05:02 executing program 2: sched_setattr(0x0, &(0x7f0000000000), 0x0) [ 285.151857] print_req_error: I/O error, dev loop3, sector 120 flags 0 [ 285.260099] print_req_error: I/O error, dev loop3, sector 0 flags 801 [ 285.267436] Buffer I/O error on dev loop3, logical block 0, lost async page write [ 285.276526] print_req_error: I/O error, dev loop3, sector 8 flags 801 [ 285.283895] Buffer I/O error on dev loop3, logical block 1, lost async page write [ 285.292795] print_req_error: I/O error, dev loop3, sector 16 flags 801 [ 285.299790] Buffer I/O error on dev loop3, logical block 2, lost async page write 13:05:03 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)={0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000000), 0x0) 13:05:03 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4012, r0, 0x0) [ 285.307569] print_req_error: I/O error, dev loop3, sector 24 flags 801 [ 285.314533] Buffer I/O error on dev loop3, logical block 3, lost async page write [ 285.322292] print_req_error: I/O error, dev loop3, sector 32 flags 801 [ 285.329234] Buffer I/O error on dev loop3, logical block 4, lost async page write [ 285.337123] print_req_error: I/O error, dev loop3, sector 40 flags 801 [ 285.344066] Buffer I/O error on dev loop3, logical block 5, lost async page write [ 285.352364] print_req_error: I/O error, dev loop3, sector 48 flags 801 13:05:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 285.359186] Buffer I/O error on dev loop3, logical block 6, lost async page write [ 285.367228] print_req_error: I/O error, dev loop3, sector 56 flags 801 [ 285.374033] Buffer I/O error on dev loop3, logical block 7, lost async page write [ 285.382240] print_req_error: I/O error, dev loop3, sector 64 flags 801 [ 285.389234] Buffer I/O error on dev loop3, logical block 8, lost async page write [ 285.397282] Buffer I/O error on dev loop3, logical block 9, lost async page write 13:05:03 executing program 1: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000580)='/dev/radio#\x00', 0x3, 0x2) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:05:03 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f00000007c0), 0x4da0d002771356, 0x0) fcntl$setstatus(r0, 0x4, 0x42c02) 13:05:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:03 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) ioctl$TIOCCONS(r0, 0x541d) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000001c0)=0x81, &(0x7f0000000200)=0x4) sched_setattr(0x0, &(0x7f0000000000), 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)) 13:05:03 executing program 0: r0 = socket$kcm(0x10, 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) 13:05:03 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0800b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:05:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:03 executing program 0: socket$kcm(0x10, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x200000400200) 13:05:03 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x14001, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000240)={r1, 0x5, &(0x7f0000000100)=[0x7fff, 0x3, 0x3f, 0xad9, 0x1000], &(0x7f0000000180)=[0x100000000], 0x2, 0x2, 0x4, &(0x7f00000001c0)=[0x8, 0x100], &(0x7f0000000200)=[0x100000001, 0x0, 0x0, 0x3, 0x1000, 0x401]}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r0, &(0x7f0000000300)="fbc142e015e5dbec137d6f590ad236565b50de341ca8fe479b", &(0x7f0000000340)=""/31}, 0x18) capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) splice(r0, &(0x7f0000000280), r0, &(0x7f00000002c0), 0x101000000000000, 0x4) 13:05:03 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0800b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2}, 0x10) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:05:03 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) r0 = socket$bt_bnep(0x1f, 0x3, 0x4) bind(r0, &(0x7f0000000080)=@generic={0xf, "ae350526d49735cc03597ac132f3300d409af4cb17dc729b1af01e7fc0ae1fb5411ccae9ff9efbd47c9b2119a758702b6705434a26d4176b184087c62b25e2915ca3d91a2ad5913de7bf20eab6836ef7814b10c1dc3dcdffcb9c588dd8f83e245e12f8064035f50497dbf89e25f3aaad03673791c2c95eae8f2ce129da14"}, 0x80) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x4, {0xa, 0x4e21, 0x9, @mcast2, 0x1}, r2}}, 0x38) 13:05:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:04 executing program 1: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000580)='/dev/radio#\x00', 0x3, 0x2) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:05:04 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x40007, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x20) 13:05:04 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:05:04 executing program 2: getpid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) capset(&(0x7f00000000c0)={0x24020019980333, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4000008}) sched_setattr(0x0, &(0x7f0000000000), 0x0) 13:05:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x200008, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f000031e000), 0x1c) 13:05:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:04 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xa29e0dcdcdf67d6a, 0x0, 0x0, 0x0, 0x0) 13:05:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)) 13:05:04 executing program 2: clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x0) capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) sched_setattr(0x0, &(0x7f0000000000), 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x10001, 0x40) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="380000003702000132b5fffffffffffb0100000000000000", @ANYRES32=r1, @ANYBLOB="1a0063707573657470726f632a285b6367726f7570257e2c62646576"], 0x38) 13:05:04 executing program 0: accept$packet(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0xa, 0x2, 0x11) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x10000, {{0x2, 0x4e21, @loopback}}}, 0x88) fallocate(r1, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x8, {{0x2, 0x4e21, @empty}}}, 0x88) 13:05:04 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x1, 0x0) socket$unix(0x1, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000240)={0x8, 0x6b, 0x80000000, 0x25b, 0x4}) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0xb11, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x1b, 0x8, @udp='udp:syz0\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4080) 13:05:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x31, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local}, 0xfdf7) capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) 13:05:05 executing program 0: accept$packet(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0xa, 0x2, 0x11) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x10000, {{0x2, 0x4e21, @loopback}}}, 0x88) fallocate(r1, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x8, {{0x2, 0x4e21, @empty}}}, 0x88) 13:05:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='gid_map\x00') read$FUSE(r0, 0x0, 0x0) 13:05:05 executing program 5: accept$packet(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0xa, 0x2, 0x11) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x10000, {{0x2, 0x4e21, @loopback}}}, 0x88) fallocate(r1, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x8, {{0x2, 0x4e21, @empty}}}, 0x88) 13:05:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:05 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 13:05:05 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000080)=0x6410, 0x4) sched_setattr(0x0, &(0x7f0000000000), 0x0) prctl$PR_GET_TIMERSLACK(0x1e) 13:05:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000006c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000480)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fcntl$setpipe(r0, 0x407, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0}, 0x40000) 13:05:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c12") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:05 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x81) write$P9_RCREATE(r0, &(0x7f00000000c0)={0x18, 0x73, 0x2, {{0x5, 0x4}, 0x200}}, 0x18) capset(&(0x7f0000000080)={0x24020019980330}, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffffc}) sched_setattr(0x0, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x100000001}, 0xffffffffffffffff) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000180)={{0x7ff, 0x5, 0x8, 0x5e3e43f4, 0x80, 0x400}, 0x6}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0x80000000, 0x405, 0x80000001, 0xffffffffffffffff, 0x1b, 0x1000, 0xd3, 0x103, 0x7, 0x4}) [ 287.891139] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 287.941285] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.008551] protocol 88fb is buggy, dev hsr_slave_0 [ 288.013800] protocol 88fb is buggy, dev hsr_slave_1 13:05:05 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0xfff, 0x200000) syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x1, 0x20000) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e, 0x80800) r1 = dup(r0) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f00000000c0)={0x20, 0x4, &(0x7f0000000080)="26c291f9f48329868dc8f1738b050702dd9b10845a9ea43be2cb564c373d73e84f002cfb3273cbc6a3d24b54429c2a54f09cb8f9f336e9a0f308e490206edd02", {0x8, 0x200, 0x20363159, 0x4, 0x4, 0xd2d8, 0xe, 0x8}}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000100)={{0x140000000, 0x1, 0x7, 0x1, 0x3, 0x5}}) sched_setattr(0x0, &(0x7f0000000000), 0x0) [ 288.048597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 13:05:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c12") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000100)=""/194) 13:05:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c12") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:06 executing program 0: accept$packet(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0xa, 0x2, 0x11) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x10000, {{0x2, 0x4e21, @loopback}}}, 0x88) fallocate(r1, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x8, {{0x2, 0x4e21, @empty}}}, 0x88) 13:05:06 executing program 5: accept$packet(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0xa, 0x2, 0x11) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x10000, {{0x2, 0x4e21, @loopback}}}, 0x88) fallocate(r1, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x8, {{0x2, 0x4e21, @empty}}}, 0x88) 13:05:06 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xa8cf, 0x509000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="000f28bd7000fbdbdf2506000000080004007e2d00000c00020008000b000200000068000300080001000000000014000200687773696d8000000000000000000000080007004e23000014000200687773696d3000000000000000000000080005b8db124701080001000100000008000500ac1414191400060000000000000000000000000000000000"], 0x90}, 0x1, 0x0, 0x0, 0x881}, 0x4) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f00000002c0)={{0x3, @name="6c8a10bd8cbbcc50b7f5866e0a21691c546bb5cab9894607ca9a7fac51376dcb"}, "7ee9041b4dd5974cbb5e0725587c9b18367f572c06a49621efee7aac87f1eeea", 0x2}) sched_setattr(0x0, &(0x7f0000000000), 0x0) 13:05:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 288.488578] protocol 88fb is buggy, dev hsr_slave_0 [ 288.493794] protocol 88fb is buggy, dev hsr_slave_1 [ 288.595112] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.699469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 13:05:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000006c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000480)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fcntl$setpipe(r0, 0x407, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0}, 0x40000) 13:05:06 executing program 1: socket$inet6(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') pipe(&(0x7f00000001c0)) socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 13:05:06 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x400) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x80, "bb0d8cb940f5a548efb9910fc0add4a208391348af2f4140973eea62f882628df6a1c6207ac20d06ff2f6c89921bd642e6af40663acc30d4e58e62370c01287b89b46f491350da0a04408b2c75e636842b345b4d2daa3b21b0cc936257e4a24ae81431a31ee67dfd54395ed66791dd7f74dd1396aff0e175376460e6ccad79f2"}, &(0x7f00000000c0)=0xa4) 13:05:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:06 executing program 0: accept$packet(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0xa, 0x2, 0x11) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x10000, {{0x2, 0x4e21, @loopback}}}, 0x88) fallocate(r1, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x8, {{0x2, 0x4e21, @empty}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) timerfd_create(0x0, 0x0) 13:05:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:06 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000e40)={0xffffd, 0x0, 0x3}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1, 0x1) sendmsg$kcm(r0, &(0x7f0000000d40)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x1, 0x7, 0xdcce, 0x1, "9c5f5442b3b1f12c3375fa1ee2f944c00e51eb55af5602844b2f0cb02acccaa44130c359fc0c788ed5551b1007db0c886e65dd193dd491dd0ceec90ab540a2", 0x28}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="102f1ddd835ee454de48c936721a62f08106c80c49f1941e9f28f69909d2cf29ac2465a609005e11cb826ae37449f5ac0fea750983d9eb89c287641d23febafb56bff1c327929f192626952765660719c793e7d66c937827", 0x58}, {&(0x7f0000000200)="cf13a947df4ccd2f64a894c52c1902ecb9a5819638a62d9bd902930ae9d26cdb6b12434bae1fb7e9ba52b3187c1259921848d34af80da0c4f03003ef59ee6467e8d8875aea2e218e7485ccdcffed73dd62cfb05a065cc724bd84c791dd5d9503da07f9d2c51beb35e0c28458502ecc9499ffe73b7cf226cb568731a33772f27761774c3dc2759657da61", 0x8a}, {&(0x7f00000002c0)="a9b402fffddf76842c5c46c15327ee2421086e11895d2637d5afdae314940f9b51f8c899e9ff4d77b18dca351302b6105a83dfea2561940e7772f4b2923fb6f45ea2a855f166a2e5cfa61e54501b025c47f0ec36b55c70d540f3f38167f8b74a33fe5e16bee3288dbd3b6e0a067ec520d534b24f685a0c4f098125f69719671b309fdcd37e42eb88778ab8915c2bf653", 0x90}, {&(0x7f0000000380)="0c34678e9c37d59a256b1d6a4dd082ad41a5df742094ad1a21c653dc9406c7c9db2c98ae54fc4d2cf065163a748523c0b51683c27b9bfab5f0cc6a6e27e801a58081b62e585b9626fa2515a511523ba8998af7db48fc804c1cad70fd4a409d0ffece9b8d7489cb71a045ea6478de2ddad4a334a497b07977c93a1f87a38f6d36be2a3e34ec30e5db0667ba99725e5fbda9843d93efc60f87774369d7c24d4225fb0fe31e3071f54dd987fe5866675c082a1a3111bedb411635e35598b300d6317dab0c76aac0db2f8d", 0x86}, {&(0x7f0000000480)="4030d9cef8257f662616e2899e8ce7fbda7b802bff5c113b39bddb18f269ebd3a3689e6a2569ca4a8d56d18e6ee82c3806432639e6", 0x35}, {&(0x7f00000004c0)="98acdd31c291bb3dc2d58d9d3d5629149d87addf1dfe56a72dd4349fd03f60dbcbdf857141b3666d03ba9bef2e4233b276e8e4249884de3ea03d0ff2d35f5d620f49ca5f5d8592978829d4bb4a0217eed485f76f288e30ff777d2da6bbdcd6a6fbffe63a9ecfc5ec10a4d2b6", 0x6c}, {&(0x7f0000000540)="949b144dbba1a3354453dd4616b35bfd1ed2b93eeefd9617", 0x18}, {&(0x7f0000000580)="6cd0066e854591b354a35fcdf897f6076139c4a35702", 0x16}, {&(0x7f00000005c0)="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", 0xfb}], 0x9, &(0x7f0000000780)=[{0x110, 0x11b, 0x7, "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"}, {0x100, 0x19f, 0x8, "8717d86cd89a617a9ee569c5e762a6088bcc59f6b3c2540bd337976981c603c2815a0ee6105fd2eca9e3eeca916eb60189e180a52f85b323c1162c40dbfdd4442212eecaecc6999715793ba663a5c00feeb16a1d2174592d31382de96bc36018df4249aee8fcb61e11e5208f84375d89ba234309c648c766f7fcb5f00c9402691de649da10358a3bc306feb94c58af5f635f766c3351f9db6933854b351a5ec144386b311851fa95dd2410a82b6209809c2811a34ed0f4bf215de94da1818f4cf27d0d33c9fe181bc1b603cf53d1d2c9518650f7af179a11222450921b34eea3e682781f2540995ef06351"}, {0xf0, 0x119, 0x3, "88a47074c7c4dfe8553132bacf5cbc23b9801dd21b82b47349d77744e5b285240829909c23b8ec6ab893bc99e1fa7b3be63530e5f41475b8215f6fcd381f563a1d2ed88cb91712a93296aebd7846ced262cc62544b9b66f5b54e07be77d20eb2856b6698c63c90d8605b8cbab28d9214dd92324209f915bea9db67751012f6ab6103ec5a1edee1772710aad23a58e44376585689efd909ba2d5aaeb31e232fb870f96f0888206e08c156b77eee5b9ea065502cf4bd7d951e7683a0c24c73aa0ff3af0dae99f4a5781f72b42aed769238da12c1e9d790b5d4fdb4"}, {0x100, 0x100, 0x1, "2e53dccfbffc6661ee25a9baf7679eb9468541644af5af52de858714cc41f91d73ea77e115b275a137fa3704459b0b87032b9288cc5f1c6fee02b08cf33c80af59a7a4c0cfa437fdca497eae34d17f45665c3d13a8d21843d226a8966c52892d865a02ed37b918dd57a6a191b0c5b65c9a10e5e3c7f731231798ab4dbd3b0e3ec5ece39e44ef2a398fd54f3fe64ce7e6047d2f02773b076418860b8345d7319e067aa0639684ac9de9d01ef9060a33f0953e0da972e6de1233b3bbfe14c92a7b189f1b1ae5b8029fd1c60ced1b7f09918581c3c7d1ae8166a5305879c014be7e5e2ceb6600e2d69b7f049621"}, {0x80, 0x10d, 0x3, "4e30805881a178b9e58d81c168ff1d73bef34e492b9104af3451961c18abc5c54d9c15ed496079227a0b8d9a6454719617f0b92d1d3c8efa98fb1f0c77bcf63d600cda521590caa96015df2a4eef68626b0fe355f2559c700fab7314a177014f5199765d4b6c90678aaccf2fddc0"}, {0x100, 0x3a, 0x80000001, "accc79e6b37d9b59637c1955362a235fefcd39f829ebf37455ce063e59e15948a056e71b676e1f415b74470fdc8409bd6a99ba0bf8a0451202476a7b0716931aef5984f6f47ad60826591735e2bfa9ac51b7db09959b8a7a828e60e12c7ec7b40611cf34c0c016a3d4bf7387e5a157c1119c272d3a3c1932c26d56534701875742a910dc4a4cab92fb418296f704ecfe7531ab3b594e36c73374f7b0d82b6792ef48ae1c17b23c97edacbf429b998dd0a35a5773cf2ab321eb3c7a3e7655379f0f2a031d0416be0ac1ffacdc2bea28ee3e733f7e2ce6e3b4f244b464d679a23a15e9dddfa4c613d6a406"}, {0x18, 0x11d, 0x3, "b216a9ef"}], 0x598}, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000dc0)={0x1ffffffffffffc60, &(0x7f0000000d80)=[{}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000e00)={r1}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 13:05:06 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x28) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x5, 0x70, 0x4, 0x0, 0x7, 0x3, 0x0, 0x81, 0x210c0, 0x4, 0x0, 0xffffffffffffffff, 0x5, 0x3ff, 0x0, 0x9, 0x8, 0x8000, 0x8000, 0x100000001, 0x7fff, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0xb3, 0x2, 0x6, 0x6, 0x1, 0x9, 0x1, 0x7, 0x80000001, 0x1ce, 0x9, 0x8, 0x5, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x1, 0x2, 0x0, 0x6}, r2, 0xf, r0, 0xd) fsetxattr$security_selinux(r2, &(0x7f0000000280)='security.selinux\x00', &(0x7f0000000700)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x3) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="0f07c391ee2780", 0x7) process_vm_readv(0x0, &(0x7f0000000600)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) getsockopt$bt_hci(r2, 0x0, 0x0, &(0x7f0000000080)=""/132, &(0x7f0000000140)=0x84) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = dup2(r0, r0) r4 = dup2(r1, r2) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x2) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x40000) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)={0x10000000, 0x9, 0x15}) shmget(0xffffffffffffffff, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000640)) 13:05:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a0") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 289.143286] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 289.229157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.369551] protocol 88fb is buggy, dev hsr_slave_0 [ 289.375561] protocol 88fb is buggy, dev hsr_slave_1 [ 289.448501] protocol 88fb is buggy, dev hsr_slave_0 13:05:07 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x28) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x5, 0x70, 0x4, 0x0, 0x7, 0x3, 0x0, 0x81, 0x210c0, 0x4, 0x0, 0xffffffffffffffff, 0x5, 0x3ff, 0x0, 0x9, 0x8, 0x8000, 0x8000, 0x100000001, 0x7fff, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0xb3, 0x2, 0x6, 0x6, 0x1, 0x9, 0x1, 0x7, 0x80000001, 0x1ce, 0x9, 0x8, 0x5, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x1, 0x2, 0x0, 0x6}, r2, 0xf, r0, 0xd) fsetxattr$security_selinux(r2, &(0x7f0000000280)='security.selinux\x00', &(0x7f0000000700)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x3) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="0f07c391ee2780", 0x7) process_vm_readv(0x0, &(0x7f0000000600)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) getsockopt$bt_hci(r2, 0x0, 0x0, &(0x7f0000000080)=""/132, &(0x7f0000000140)=0x84) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = dup2(r0, r0) r4 = dup2(r1, r2) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x2) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x40000) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)={0x10000000, 0x9, 0x15}) shmget(0xffffffffffffffff, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000640)) 13:05:07 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x50, &(0x7f0000000200)={0x0, 0x0}}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x40002, 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000340)=0x1) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)=r0, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)=r2, 0x4) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-monitor\x00', 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f00000000c0)={0x4, 0x0, 0x5, 0x39c, 'syz0\x00', 0x3313d357}) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:sshd_var_run_t:s0\x00', 0x24, 0x2) 13:05:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a0") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:07 executing program 3: 13:05:07 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x28) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x5, 0x70, 0x4, 0x0, 0x7, 0x3, 0x0, 0x81, 0x210c0, 0x4, 0x0, 0xffffffffffffffff, 0x5, 0x3ff, 0x0, 0x9, 0x8, 0x8000, 0x8000, 0x100000001, 0x7fff, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0xb3, 0x2, 0x6, 0x6, 0x1, 0x9, 0x1, 0x7, 0x80000001, 0x1ce, 0x9, 0x8, 0x5, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x1, 0x2, 0x0, 0x6}, r2, 0xf, r0, 0xd) fsetxattr$security_selinux(r2, &(0x7f0000000280)='security.selinux\x00', &(0x7f0000000700)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x3) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="0f07c391ee2780", 0x7) process_vm_readv(0x0, &(0x7f0000000600)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) getsockopt$bt_hci(r2, 0x0, 0x0, &(0x7f0000000080)=""/132, &(0x7f0000000140)=0x84) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = dup2(r0, r0) r4 = dup2(r1, r2) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x2) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x40000) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)={0x10000000, 0x9, 0x15}) shmget(0xffffffffffffffff, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000640)) 13:05:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a0") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:07 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)={0x0, 0x0, 0x7}) sched_setattr(0x0, &(0x7f0000000000), 0x0) r0 = gettid() sched_setattr(r0, &(0x7f0000000080)={0x30, 0x2, 0x200000001, 0x3, 0x6, 0xffffffff, 0x0, 0x81}, 0xfffffffffffffffe) 13:05:07 executing program 0: accept$packet(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0xa, 0x2, 0x11) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x10000, {{0x2, 0x4e21, @loopback}}}, 0x88) fallocate(r1, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x8, {{0x2, 0x4e21, @empty}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) timerfd_create(0x0, 0x0) 13:05:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/162, 0xa2) 13:05:07 executing program 3: 13:05:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:07 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)={0x0, 0x401, 0x7}) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x6, 0x18}, 0xc) r1 = dup2(r0, 0xffffffffffffffff) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@remote={[], 0x0}, 0xe, 'nr0\x00'}) sched_setattr(0x0, &(0x7f0000000000), 0x0) 13:05:07 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x28) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x5, 0x70, 0x4, 0x0, 0x7, 0x3, 0x0, 0x81, 0x210c0, 0x4, 0x0, 0xffffffffffffffff, 0x5, 0x3ff, 0x0, 0x9, 0x8, 0x8000, 0x8000, 0x100000001, 0x7fff, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0xb3, 0x2, 0x6, 0x6, 0x1, 0x9, 0x1, 0x7, 0x80000001, 0x1ce, 0x9, 0x8, 0x5, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x1, 0x2, 0x0, 0x6}, r2, 0xf, r0, 0xd) fsetxattr$security_selinux(r2, &(0x7f0000000280)='security.selinux\x00', &(0x7f0000000700)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x3) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="0f07c391ee2780", 0x7) process_vm_readv(0x0, &(0x7f0000000600)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) getsockopt$bt_hci(r2, 0x0, 0x0, &(0x7f0000000080)=""/132, &(0x7f0000000140)=0x84) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = dup2(r0, r0) r4 = dup2(r1, r2) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x2) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x40000) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)={0x10000000, 0x9, 0x15}) shmget(0xffffffffffffffff, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000640)) 13:05:07 executing program 3: 13:05:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:07 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x688001, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x33}) sched_setattr(0x0, &(0x7f0000000000), 0x0) 13:05:08 executing program 2: capset(&(0x7f0000000080)={0x24020019980330}, &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xa00, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000180)={0x0, @bt={0x2, 0x100000000, 0x0, 0x1, 0x1ff, 0xd9, 0x7, 0xfd, 0x691e, 0x5, 0x81, 0x4, 0x10000, 0xfffffffffffff000, 0x10, 0x10}}) r1 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x600) sched_setattr(r1, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x8000000000, 0x0, 0x1, 0x0, 0x3}, 0xfffffffffffffffe) 13:05:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:08 executing program 3: [ 290.329616] QAT: Invalid ioctl [ 290.345143] QAT: Invalid ioctl 13:05:08 executing program 0: 13:05:08 executing program 5: 13:05:08 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x28) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x5, 0x70, 0x4, 0x0, 0x7, 0x3, 0x0, 0x81, 0x210c0, 0x4, 0x0, 0xffffffffffffffff, 0x5, 0x3ff, 0x0, 0x9, 0x8, 0x8000, 0x8000, 0x100000001, 0x7fff, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0xb3, 0x2, 0x6, 0x6, 0x1, 0x9, 0x1, 0x7, 0x80000001, 0x1ce, 0x9, 0x8, 0x5, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x1, 0x2, 0x0, 0x6}, r2, 0xf, r0, 0xd) fsetxattr$security_selinux(r2, &(0x7f0000000280)='security.selinux\x00', &(0x7f0000000700)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x3) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="0f07c391ee2780", 0x7) process_vm_readv(0x0, &(0x7f0000000600)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) getsockopt$bt_hci(r2, 0x0, 0x0, &(0x7f0000000080)=""/132, &(0x7f0000000140)=0x84) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = dup2(r0, r0) r4 = dup2(r1, r2) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x2) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x40000) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)={0x10000000, 0x9, 0x15}) shmget(0xffffffffffffffff, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000640)) 13:05:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:08 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x2, 0x480001) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f00000000c0)=0x6, 0x4) sched_setattr(0x0, &(0x7f0000000000), 0x0) 13:05:08 executing program 3: 13:05:08 executing program 0: 13:05:08 executing program 0: 13:05:08 executing program 3: 13:05:08 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000700000000000019078ac2314bbac1414110304907800000000450000000000000000290000ac2314aaac141400084000000000000000000000e000000200000000e000000101000000000000007f00000100000000ffffffff00000000e000000100000000ac14140000000000"], 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x3) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x65, 0x7, 0x49, 0x0, 0x1}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={r1, 0x9}, 0x8) capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) 13:05:08 executing program 5: 13:05:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:09 executing program 0: 13:05:09 executing program 3: 13:05:09 executing program 1: 13:05:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:09 executing program 5: 13:05:09 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000), 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x10400, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f00000000c0)={0x7fffffff, 0x3, 0xad6}) 13:05:09 executing program 0: 13:05:09 executing program 3: 13:05:09 executing program 3: 13:05:09 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640)='/dev/capi20\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000440)) 13:05:09 executing program 5: recvmmsg(0xffffffffffffff9c, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') preadv(r1, &(0x7f00000017c0), 0x1a3, 0x400000000000) 13:05:09 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0) 13:05:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 13:05:09 executing program 3: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/exec\x00', 0x2, 0x0) r0 = getpid() rt_sigqueueinfo(r0, 0xa, &(0x7f0000000180)) 13:05:09 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={0x0, 0x8}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000380)={r1, 0x2}, &(0x7f0000000340)=0x8) r2 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="04040000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000001c0)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000200)={r3, 0xdb9a}, 0x8) flistxattr(r2, &(0x7f0000000080)=""/134, 0x86) 13:05:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:09 executing program 3: syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}) 13:05:09 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x0, 0x2, 0x8000000, 0x0, r0, 0xfffffffffffffffe}, 0x2c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r1, r0}}, 0x18) r2 = dup(0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r6 = syz_open_dev$dmmidi(0x0, 0x3, 0x200000) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) connect$l2tp(r2, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x2, 0x3, {0xa, 0x4e23, 0x7ff, @mcast2, 0xfffffffffffffffe}}}, 0x3a) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000100)={0x8000, "06cf6cac46b98c0c607f2fb685337677887841c4d0f26b00866ffa7c86b5e361", 0x1, 0x1}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000280)={0x7, 0x8, 0x400, 0x4}, 0x10) listen(r5, 0x0) syncfs(r6) accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000003c0)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f00000000c0)) ftruncate(0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000200)=0x3) fsetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x1, 0x1) [ 292.143194] binder: 10093:10096 ioctl c018620c 0 returned -14 13:05:10 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640)='/dev/capi20\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000440)) 13:05:10 executing program 1 (fault-call:3 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:10 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vfio/vfio\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0xb5, "74e72a3d6fbf78744aeafd3851db9ae537b03bc3f961faaab93cc9b549a3644343e1bb8362c067d9842d3b3748d038e57a12e02777dc8fac4504024909f9f1cb0c7443cbc72a09f8bd10c46acdccddd8ef3e253fb6fb31ab911036ca5c14c006717c411fd23ae253ca80d75851d61076c8348ab2e69ceabeec29588c7738aec7f9a345c34aab5831163c38b942b7d1b356ad83b28543cf3e8f3372a14f940b6164340c8c54190aca615024b9eb4d7ea6b438286f06"}, &(0x7f0000000380)=0xbd) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r1, @in6={{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0x15}, 0x4}}}, &(0x7f0000000480)=0x84) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x26, 0x100) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x239a, @dev={0xfe, 0x80, [], 0x21}, 0x7}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000100)={r3}, &(0x7f0000000240)=0x8) sched_setattr(0x0, &(0x7f0000000000), 0x0) 13:05:10 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000640)='/dev/capi20\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000440)) 13:05:10 executing program 3: syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}) 13:05:10 executing program 2: capset(&(0x7f0000000040)={0x2402001998032e}, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x10000}) sched_setattr(0x0, &(0x7f0000000000), 0x0) [ 292.411428] binder: 10129:10130 ioctl c0306201 0 returned -14 13:05:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 292.475828] binder: 10129:10130 ioctl c0306201 200000c0 returned -11 13:05:10 executing program 3: r0 = syz_open_dev$vcsn(0x0, 0x100, 0x200) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000640)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r1, 0x2, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x4}}, [""]}, 0x24}}, 0x10) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) bind(r2, &(0x7f0000000580)=@ax25, 0x80) write$P9_RXATTRCREATE(r5, &(0x7f0000000140)={0x383}, 0x7) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000500)='security.capability\x00', &(0x7f0000000540)=@v2={0x2000000, [{0x4, 0xe41}, {0x1f, 0x5}]}, 0x14, 0x1) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000280)) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) socketpair(0x0, 0x80000, 0x0, &(0x7f0000000340)) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x802000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000800004e20,sq=0x0000000000000004,permit_directio,su']) creat(&(0x7f0000000200)='./bus\x00', 0x3) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000340), &(0x7f0000000380)=0x4) mlockall(0x4) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/132, 0x84, 0x0, 0xde, 0x9, 0xfffffffffffff800, 0x10000}, 0x120) 13:05:10 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) sched_setattr(0x0, &(0x7f0000000000), 0x0) 13:05:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 292.682087] binder: 10156:10157 ioctl c0306201 0 returned -14 [ 292.702900] binder: 10156:10157 ioctl c0306201 200000c0 returned -11 [ 292.924828] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready 13:05:10 executing program 5: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x22) r1 = fcntl$getown(r0, 0x9) sched_setattr(r1, &(0x7f0000000080)={0x30, 0x6, 0x1, 0x1ff, 0xffff, 0x53, 0x0, 0x4969}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x125) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) 13:05:10 executing program 2: capset(&(0x7f00000000c0)={0x2402001998032c}, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x1}) sched_setattr(0x0, &(0x7f0000000000), 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000080)) ioctl$TIOCSBRK(r0, 0x5427) 13:05:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:10 executing program 0: socket$inet6(0xa, 0x803, 0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='ppp0vboxnet1.GPL@:bdevsecurity\x00', r1}, 0x10) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) timer_delete(0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x8000, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.stat\x00', 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', &(0x7f0000000200)=""/110, 0x6e) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r2, 0x80003) sendfile(r0, r2, &(0x7f00000000c0), 0x8000fffffffb) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000280)) recvmmsg(r1, &(0x7f0000003440)=[{{&(0x7f0000001840)=@ax25, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e40)=""/169, 0x42}}], 0x21b, 0x2000, &(0x7f0000003500)={0x0, 0x1c9c380}) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}], 0x1, 0x8000) mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000002, 0x100000002132, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000100)=0x1000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x200, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_setup(0x7fff, &(0x7f0000000440)=0x0) io_destroy(r4) 13:05:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 293.037424] binder: 10166:10169 ioctl c0306201 0 returned -14 [ 293.051920] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 293.093737] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 293.115800] binder: BINDER_SET_CONTEXT_MGR already set [ 293.126336] binder: 10166:10169 ioctl 40046207 200000c0 returned -16 13:05:10 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x380000000000000, 0x40) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x4000, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2001, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000100)) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f00000000c0)=0x3) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000180)={0xfffffffffffffffc, 0x10001, 0x5, 0x4ee, 0x2, 0x20}) sched_setattr(0x0, &(0x7f0000000000), 0x0) 13:05:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 293.142800] binder: 10178:10178 ioctl c0306201 0 returned -14 [ 293.145950] audit: type=1804 audit(1546261510.931:47): pid=10180 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir673981612/syzkaller.cnEyRl/74/bus" dev="sda1" ino=16851 res=1 [ 293.198860] net_ratelimit: 1 callbacks suppressed [ 293.198868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.220662] binder: 10184:10187 ioctl c0306201 0 returned -14 13:05:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 293.250733] binder: 10184:10187 ioctl c0306201 0 returned -14 13:05:11 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="2300000019003ffe2a46f799e7ce00fe029ac2a001000000fc05007b74c71bf53e8025", 0x23}], 0x1}, 0x0) capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x8100) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000300)={0x6, 0x0, 0x4, {0xf, @pix_mp={0x81, 0x1000, 0x32314247, 0x0, 0x6, [{0x8, 0x9}, {0xffffffffffffff01, 0x9}, {0x7, 0x3ff}, {0x9, 0x3}, {0x6, 0x7e60}, {0x20, 0x1}, {0x7f, 0x6}, {0x4, 0x81}], 0xcce, 0x5, 0x2, 0x3}}}) quotactl(0x87e0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000200)="5052821f1a87c9345111b653defb22a3413c27e829209843217f269edb8c2fb10aeb7b98dccbe2270b5860bbefa4abea8fccea319eb88396b7b49d5f4d61b77ba0dd4d903e02b223d5945de7b3c453010641e1c9ece9d0939b8aad4e6db8fefa5a4bd84a6213c8f0a55b6523e98dab453f34db66637379c28f3ab63e7c0a93aba542bfc044b7ea86b6d3804fe729131cd29e5d82a8e46559887ec6f70673c6de5a6559469e47f3ed2951b3d8cba7de74cf1c5af725adcdddefd2d2e145079c48fad6b2f027263e109628b9eeefcfc54802e4c5f33b7bb83964df67209ec2da604487989876578032228564ec38") sched_setattr(0x0, &(0x7f0000000000), 0x0) [ 293.281018] audit: type=1804 audit(1546261510.961:48): pid=10180 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir673981612/syzkaller.cnEyRl/74/bus" dev="sda1" ino=16851 res=1 [ 293.319234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.326590] binder: 10194:10195 ioctl c0306201 0 returned -14 [ 293.394079] binder: BINDER_SET_CONTEXT_MGR already set [ 293.405854] binder: 10194:10195 ioctl 40046207 200000c0 returned -16 [ 293.543532] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 293.598849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 13:05:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 13:05:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:11 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x3, 0x8300) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sched_setattr(0x0, &(0x7f0000000000), 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @empty}, 0x50, 0x0, 0x0, 0x0, 0x51b, &(0x7f0000000180)='dummy0\x00', 0x4, 0x800}) 13:05:11 executing program 3: r0 = syz_open_dev$vcsn(0x0, 0x100, 0x200) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000640)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r1, 0x2, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x4}}, [""]}, 0x24}}, 0x10) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) bind(r2, &(0x7f0000000580)=@ax25, 0x80) write$P9_RXATTRCREATE(r5, &(0x7f0000000140)={0x383}, 0x7) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000500)='security.capability\x00', &(0x7f0000000540)=@v2={0x2000000, [{0x4, 0xe41}, {0x1f, 0x5}]}, 0x14, 0x1) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000280)) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) socketpair(0x0, 0x80000, 0x0, &(0x7f0000000340)) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x802000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000800004e20,sq=0x0000000000000004,permit_directio,su']) creat(&(0x7f0000000200)='./bus\x00', 0x3) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000340), &(0x7f0000000380)=0x4) mlockall(0x4) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/132, 0x84, 0x0, 0xde, 0x9, 0xfffffffffffff800, 0x10000}, 0x120) 13:05:11 executing program 0: socket$inet6(0xa, 0x803, 0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='ppp0vboxnet1.GPL@:bdevsecurity\x00', r1}, 0x10) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) timer_delete(0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x8000, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.stat\x00', 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', &(0x7f0000000200)=""/110, 0x6e) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r2, 0x80003) sendfile(r0, r2, &(0x7f00000000c0), 0x8000fffffffb) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000280)) recvmmsg(r1, &(0x7f0000003440)=[{{&(0x7f0000001840)=@ax25, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e40)=""/169, 0x42}}], 0x21b, 0x2000, &(0x7f0000003500)={0x0, 0x1c9c380}) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}], 0x1, 0x8000) mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000002, 0x100000002132, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000100)=0x1000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x200, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_setup(0x7fff, &(0x7f0000000440)=0x0) io_destroy(r4) [ 293.808807] binder: 10216:10219 ioctl c0306201 0 returned -14 [ 293.819207] binder: 10214:10220 ioctl c0306201 0 returned -14 [ 293.853481] binder: BINDER_SET_CONTEXT_MGR already set 13:05:11 executing program 4: r0 = syz_open_dev$vcsn(0x0, 0x100, 0x200) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000640)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r1, 0x2, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x4}}, [""]}, 0x24}}, 0x10) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) bind(r2, &(0x7f0000000580)=@ax25, 0x80) write$P9_RXATTRCREATE(r5, &(0x7f0000000140)={0x383}, 0x7) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000500)='security.capability\x00', &(0x7f0000000540)=@v2={0x2000000, [{0x4, 0xe41}, {0x1f, 0x5}]}, 0x14, 0x1) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000280)) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) socketpair(0x0, 0x80000, 0x0, &(0x7f0000000340)) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x802000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000800004e20,sq=0x0000000000000004,permit_directio,su']) creat(&(0x7f0000000200)='./bus\x00', 0x3) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000340), &(0x7f0000000380)=0x4) mlockall(0x4) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/132, 0x84, 0x0, 0xde, 0x9, 0xfffffffffffff800, 0x10000}, 0x120) 13:05:11 executing program 2: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r1, 0x67d}, 0x8) sched_setattr(0x0, &(0x7f0000000000), 0x0) [ 293.876978] binder: 10214:10220 ioctl c0306201 0 returned -14 [ 293.903364] binder: 10216:10224 ioctl 40046207 200000c0 returned -16 13:05:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:11 executing program 2 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 294.063903] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 294.111086] binder: 10245:10247 ioctl c0306201 0 returned -14 [ 294.125280] binder: 10246:10251 ioctl c0306201 0 returned -14 [ 294.157478] binder: 10245:10247 ioctl c0306201 0 returned -14 [ 294.162600] binder: BINDER_SET_CONTEXT_MGR already set 13:05:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306225, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) [ 294.205868] binder: 10246:10251 ioctl 40046207 200000c0 returned -16 [ 294.231028] FAULT_INJECTION: forcing a failure. [ 294.231028] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 294.268585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.313208] binder: 10265:10266 ioctl c0306201 0 returned -14 [ 294.315590] CPU: 0 PID: 10262 Comm: syz-executor2 Not tainted 4.20.0+ #1 [ 294.325960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.335362] Call Trace: [ 294.338079] dump_stack+0x1db/0x2d0 [ 294.341732] ? dump_stack_print_info.cold+0x20/0x20 [ 294.341795] ? __lock_acquire+0x572/0x4a30 [ 294.341840] should_fail.cold+0xa/0x15 [ 294.354921] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 294.360099] ? arch_local_save_flags+0x50/0x50 [ 294.360113] ? lock_release+0xc40/0xc40 [ 294.360214] should_fail_alloc_page+0x50/0x60 [ 294.360228] __alloc_pages_nodemask+0x323/0xdc0 [ 294.365458] binder: BINDER_SET_CONTEXT_MGR already set [ 294.368775] ? __alloc_pages_slowpath+0x2cc0/0x2cc0 [ 294.368840] ? get_pid_task+0xd4/0x190 [ 294.368867] ? mark_held_locks+0x100/0x100 [ 294.368908] ? pmd_val+0x85/0x100 [ 294.378724] binder: 10267:10270 ioctl c0306201 0 returned -14 [ 294.383362] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 294.383396] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 294.399090] binder: 10265:10266 ioctl 40046207 200000c0 returned -16 [ 294.400047] alloc_pages_vma+0xdd/0x540 [ 294.400069] __handle_mm_fault+0x2582/0x5690 [ 294.431812] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 294.436708] ? check_preemption_disabled+0x48/0x290 [ 294.441263] binder: 10267:10270 ioctl c0306225 200000c0 returned -22 [ 294.441735] ? handle_mm_fault+0x3cc/0xc80 [ 294.452506] ? lock_downgrade+0x910/0x910 [ 294.456701] ? kasan_check_read+0x11/0x20 13:05:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) [ 294.460942] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 294.466259] ? rcu_read_unlock_special+0x380/0x380 [ 294.471200] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 294.476741] ? check_preemption_disabled+0x48/0x290 [ 294.481762] handle_mm_fault+0x4ec/0xc80 [ 294.482972] binder: 10272:10272 ioctl c0306201 0 returned -14 [ 294.485842] ? __handle_mm_fault+0x5690/0x5690 [ 294.485858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 294.485902] ? vmacache_update+0x114/0x140 [ 294.485962] __do_page_fault+0x5da/0xd60 13:05:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306248, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 294.497777] binder: 10272:10273 ioctl c0306225 200000c0 returned -22 [ 294.501916] do_page_fault+0xe6/0x7d8 [ 294.501960] ? trace_hardirqs_on_caller+0xc0/0x310 [ 294.501978] ? vmalloc_sync_all+0x30/0x30 [ 294.501991] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 294.502031] ? syscall_return_slowpath+0x5f0/0x5f0 [ 294.502048] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 294.502086] ? page_fault+0x8/0x30 [ 294.502103] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 294.537099] binder: 10276:10277 ioctl c0306201 0 returned -14 [ 294.540076] ? page_fault+0x8/0x30 [ 294.540091] page_fault+0x1e/0x30 [ 294.540102] RIP: 0033:0x40740d [ 294.540117] Code: 0f 1f 44 00 00 c6 44 24 0e 06 48 c7 04 24 10 00 00 00 e9 56 ff ff ff e8 91 46 05 00 90 41 55 41 54 55 53 48 81 ec a8 1b 00 00 <48> 89 74 24 18 48 89 7c 24 30 64 48 8b 34 25 28 00 00 00 48 89 b4 [ 294.540124] RSP: 002b:00007f1f15d360a0 EFLAGS: 00010206 [ 294.540134] RAX: 0000000000407400 RBX: 00007f1f15d37c90 RCX: 0000000020000080 [ 294.540142] RDX: 0000000020fe5000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 294.540149] RBP: 000000000073bfa0 R08: 0000000000000001 R09: 0000000000000000 [ 294.540157] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f1f15d386d4 [ 294.540165] R13: 00000000004c6371 R14: 00000000004db2c0 R15: 0000000000000005 [ 294.559152] binder: BINDER_SET_CONTEXT_MGR already set [ 294.627878] binder: 10278:10279 ioctl c0306201 0 returned -14 [ 294.641611] binder: 10278:10279 ioctl c0306248 200000c0 returned -22 13:05:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306263, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 294.662945] binder: 10280:10280 ioctl c0306201 0 returned -14 [ 294.674670] binder: 10280:10281 ioctl c0306248 200000c0 returned -22 [ 294.676162] syz-executor2 invoked oom-killer: gfp_mask=0x0(), order=0, oom_score_adj=1000 [ 294.689870] binder: 10276:10277 ioctl 40046207 200000c0 returned -16 [ 294.696491] CPU: 0 PID: 10262 Comm: syz-executor2 Not tainted 4.20.0+ #1 [ 294.703329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.712693] Call Trace: [ 294.712712] dump_stack+0x1db/0x2d0 [ 294.712731] ? dump_stack_print_info.cold+0x20/0x20 [ 294.712756] dump_header+0x1e6/0x116c [ 294.712771] ? add_lock_to_list.isra.0+0x450/0x450 [ 294.712784] ? mark_held_locks+0x100/0x100 [ 294.712796] ? print_usage_bug+0xd0/0xd0 [ 294.712812] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 294.712881] ? ___ratelimit+0x37c/0x686 [ 294.712915] ? mark_held_locks+0xb1/0x100 [ 294.712930] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 294.712942] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 294.712968] ? lockdep_hardirqs_on+0x415/0x5d0 [ 294.713009] ? trace_hardirqs_on+0xbd/0x310 [ 294.713024] ? kasan_check_read+0x11/0x20 [ 294.713036] ? ___ratelimit+0x37c/0x686 [ 294.713050] ? trace_hardirqs_off_caller+0x300/0x300 [ 294.713063] ? do_raw_spin_trylock+0x270/0x270 [ 294.713106] ? trace_hardirqs_on_caller+0x310/0x310 [ 294.713118] ? lock_acquire+0x1db/0x570 [ 294.713153] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 294.713167] ? ___ratelimit+0xac/0x686 [ 294.713182] ? idr_get_free+0xee0/0xee0 [ 294.713194] ? kasan_check_read+0x11/0x20 [ 294.713208] ? do_raw_spin_unlock+0xa0/0x330 [ 294.713222] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 294.713243] oom_kill_process.cold+0x10/0x9d4 [ 294.713273] ? _raw_spin_unlock+0x2d/0x50 [ 294.713291] ? oom_badness+0xca/0xa50 [ 294.728320] ? out_of_memory+0xc8f/0x1420 [ 294.728334] ? find_held_lock+0x35/0x120 [ 294.728350] ? oom_evaluate_task+0x540/0x540 [ 294.728367] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 294.728383] ? lock_downgrade+0x910/0x910 [ 294.785761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 294.786828] ? kasan_check_read+0x11/0x20 [ 294.786845] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 294.786862] ? rcu_read_unlock_special+0x380/0x380 [ 294.786881] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 294.786895] ? oom_evaluate_task+0x305/0x540 [ 294.786914] out_of_memory+0x885/0x1420 [ 294.827514] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 294.831700] ? __do_page_fault+0x610/0xd60 [ 294.831721] ? oom_killer_disable+0x340/0x340 [ 294.831736] ? mutex_trylock+0x248/0x2d0 [ 294.831756] ? __ww_mutex_check_waiters+0x160/0x160 [ 294.831771] ? lock_downgrade+0x910/0x910 [ 294.831784] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 294.831805] pagefault_out_of_memory+0x17c/0x1a1 [ 294.831820] ? out_of_memory+0x1420/0x1420 [ 294.831841] ? up_read+0x212/0x2b0 [ 294.831858] ? up_read_non_owner+0x100/0x100 [ 294.831873] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 294.831891] mm_fault_error+0x100/0x3a0 [ 294.831909] __do_page_fault+0xc13/0xd60 [ 294.888277] do_page_fault+0xe6/0x7d8 [ 294.888291] ? trace_hardirqs_on_caller+0xc0/0x310 [ 294.888308] ? vmalloc_sync_all+0x30/0x30 [ 294.888321] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 294.888339] ? syscall_return_slowpath+0x5f0/0x5f0 [ 294.896699] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 294.896714] ? page_fault+0x8/0x30 [ 294.896732] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 294.896748] ? page_fault+0x8/0x30 [ 294.896762] page_fault+0x1e/0x30 [ 294.916003] RIP: 0033:0x40740d [ 294.916034] Code: 0f 1f 44 00 00 c6 44 24 0e 06 48 c7 04 24 10 00 00 00 e9 56 ff ff ff e8 91 46 05 00 90 41 55 41 54 55 53 48 81 ec a8 1b 00 00 <48> 89 74 24 18 48 89 7c 24 30 64 48 8b 34 25 28 00 00 00 48 89 b4 [ 294.916042] RSP: 002b:00007f1f15d360a0 EFLAGS: 00010206 [ 294.916054] RAX: 0000000000407400 RBX: 00007f1f15d37c90 RCX: 0000000020000080 [ 294.916063] RDX: 0000000020fe5000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 294.916070] RBP: 000000000073bfa0 R08: 0000000000000001 R09: 0000000000000000 [ 294.916081] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f1f15d386d4 [ 295.060848] R13: 00000000004c6371 R14: 00000000004db2c0 R15: 0000000000000005 [ 295.079352] binder: 10284:10287 ioctl c0306201 0 returned -14 [ 295.096605] binder: 10284:10287 ioctl c0306263 200000c0 returned -22 [ 295.104402] binder: 10288:10288 ioctl c0306201 0 returned -14 [ 295.111065] binder: 10288:10289 ioctl c0306263 200000c0 returned -22 [ 295.121163] Mem-Info: [ 295.128367] active_anon:141880 inactive_anon:191 isolated_anon:0 [ 295.128367] active_file:7910 inactive_file:36769 isolated_file:0 [ 295.128367] unevictable:2 dirty:378 writeback:0 unstable:0 [ 295.128367] slab_reclaimable:12815 slab_unreclaimable:108136 [ 295.128367] mapped:55460 shmem:244 pagetables:1525 bounce:0 [ 295.128367] free:1220756 free_pcp:568 free_cma:0 [ 295.170580] Node 0 active_anon:567520kB inactive_anon:764kB active_file:31500kB inactive_file:146576kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:221840kB dirty:1508kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 442368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 295.200183] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 295.227245] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.254018] lowmem_reserve[]: 0 2535 2537 2537 [ 295.259022] Node 0 DMA32 free:1079884kB min:36080kB low:45100kB high:54120kB active_anon:567520kB inactive_anon:764kB active_file:31500kB inactive_file:146576kB unevictable:8kB writepending:1556kB present:3129332kB managed:2599652kB mlocked:8kB kernel_stack:8192kB pagetables:6100kB bounce:0kB free_pcp:2840kB local_pcp:1432kB free_cma:0kB [ 295.260053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.289829] lowmem_reserve[]: 0 0 2 2 [ 295.308085] Node 0 Normal free:1824kB min:2076kB low:2080kB high:2084kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:96kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.335181] lowmem_reserve[]: 0 0 0 0 [ 295.339402] Node 1 Normal free:3785304kB min:53780kB low:67224kB high:80668kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.367764] lowmem_reserve[]: 0 0 0 0 [ 295.371704] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 295.385418] Node 0 DMA32: 8756*4kB (UME) 1698*8kB (UME) 976*16kB (UME) 385*32kB (UME) 97*64kB (UME) 39*128kB (UME) 16*256kB (UME) 6*512kB (ME) 0*1024kB 3*2048kB (ME) 239*4096kB (M) = 1080000kB [ 295.402835] Node 0 Normal: 4*4kB (ME) 6*8kB (ME) 2*16kB (ME) 2*32kB (ME) 0*64kB 1*128kB (M) 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 1824kB [ 295.416687] Node 1 Normal: 58*4kB (UE) 272*8kB (UE) 253*16kB (UE) 65*32kB (UME) 14*64kB (UME) 11*128kB (UE) 6*256kB (UM) 5*512kB (UME) 4*1024kB (UME) 1*2048kB (U) 919*4096kB (M) = 3785304kB [ 295.433862] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.433876] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 295.433888] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.433901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 295.433906] 44795 total pagecache pages [ 295.433924] 0 pages in swap cache [ 295.433934] Swap cache stats: add 0, delete 0, find 0/0 [ 295.433940] Free swap = 0kB [ 295.433946] Total swap = 0kB [ 295.433953] 1965979 pages RAM [ 295.433959] 0 pages HighMem/MovableOnly [ 295.433965] 343992 pages reserved [ 295.433970] 0 pages cma reserved [ 295.433995] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz-executor3,pid=10223,uid=0 [ 295.451507] Out of memory: Kill process 10223 (syz-executor3) score 1005 or sacrifice child [ 295.452845] Killed process 10223 (syz-executor3) total-vm:70796kB, anon-rss:4264kB, file-rss:33716kB, shmem-rss:0kB [ 295.537600] oom_reaper: reaped process 10223 (syz-executor3), now anon-rss:0kB, file-rss:32820kB, shmem-rss:0kB 13:05:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x4100, 0x0) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000200)={0x53f, 0x81, 0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) capset(0x0, &(0x7f0000000000)={0x0, 0x41e49f14}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300de56b5000000000000000000080000000000000008000500ac14141b080003000100000f01"], 0x1}, 0x1, 0x0, 0x0, 0x44}, 0x1) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b6fc663019d9476a25"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 13:05:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) [ 295.637444] binder: BINDER_SET_CONTEXT_MGR already set [ 295.643399] binder: 10295:10297 ioctl 40046207 200000c0 returned -16 13:05:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) 13:05:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f00733b62456adb4ecfea94eebc0400000000000000bb000000000000000000"], 0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', r1}) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@multicast2, @loopback, @remote}, 0xfffffff4) lseek(r0, 0x0, 0x1) 13:05:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:13 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) 13:05:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 295.740105] binder: 10304:10305 ioctl c0306201 0 returned -14 [ 295.763819] binder: 10304:10305 ioctl c0306201 0 returned -14 [ 295.781694] binder: BINDER_SET_CONTEXT_MGR already set 13:05:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0, 0x2000}], 0x1, 0x0, 0x0, 0x0) 13:05:13 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x8000800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) 13:05:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) [ 295.826125] binder: 10312:10315 ioctl 40046207 200000c0 returned -16 13:05:13 executing program 0: write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001940)={{{@in, @in=@local}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000001a40)=0x1b6) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000000c0)={0x8, 0x0, [], {0x0, @reserved}}) recvfrom$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="14fcffff0102fd40000000000000a80200000000"], 0x14}}, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) ioprio_get$uid(0x0, r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 295.908585] binder: 10322:10326 ioctl c0306201 0 returned -14 [ 295.960324] binder: BINDER_SET_CONTEXT_MGR already set [ 295.974608] binder: 10322:10326 ioctl c0306201 0 returned -14 [ 295.980865] binder: 10329:10333 ioctl 40046207 200000c0 returned -16 13:05:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) 13:05:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) 13:05:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0, 0x8000000000000000}], 0x1, 0x0, 0x0, 0x0) 13:05:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:14 executing program 0: write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001940)={{{@in, @in=@local}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000001a40)=0x1b6) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000000c0)={0x8, 0x0, [], {0x0, @reserved}}) recvfrom$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="14fcffff0102fd40000000000000a80200000000"], 0x14}}, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) ioprio_get$uid(0x0, r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:05:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8013, r1, 0x0) fcntl$setpipe(r0, 0x407, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40400, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) close(r2) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) writev(r3, &(0x7f0000000700), 0x0) [ 296.399686] binder: 10353:10356 ioctl c0306201 0 returned -14 [ 296.414896] binder: BINDER_SET_CONTEXT_MGR already set [ 296.430909] binder: 10353 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 296.430920] binder: 10353:10356 ioctl c018620c 200000c0 returned -22 13:05:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) [ 296.446325] binder: BINDER_SET_CONTEXT_MGR already set [ 296.457730] binder: 10358:10359 ioctl 40046207 200000c0 returned -16 [ 296.470414] binder: 10354:10360 ioctl 40046207 200000c0 returned -16 13:05:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0, 0x20000000000000}], 0x1, 0x0, 0x0, 0x0) [ 296.507407] binder: 10353:10356 ioctl c0306201 0 returned -14 [ 296.507908] binder: 10353 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 296.507919] binder: 10353:10368 ioctl c018620c 200000c0 returned -22 13:05:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) [ 296.636945] binder: BINDER_SET_CONTEXT_MGR already set 13:05:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0, 0xffffffff00000000}], 0x1, 0x0, 0x0, 0x0) [ 296.676421] binder: 10375:10383 ioctl 40046207 200000c0 returned -16 [ 296.683083] binder: BINDER_SET_CONTEXT_MGR already set [ 296.695293] binder: 10385:10386 ioctl 40046207 200000c0 returned -16 13:05:14 executing program 0: prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000c00000/0x400000)=nil) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1f, 0x1) r1 = accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x80000) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffd000/0x2000)=nil) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x1) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0x7, [0x2a46, 0xc17, 0x3, 0x3d1, 0x6, 0x3, 0x0, 0x7d031fdf, 0x8, 0x9, 0xfc, 0x7, 0x40, 0x3f, 0x3, 0x7, 0x401, 0xffffffffffffffbf, 0x101, 0x1, 0x9, 0xbdd6, 0x6, 0x8, 0x1c00000, 0x8, 0x100000000, 0x3800000000, 0x7fff, 0x8, 0x5, 0x5, 0x3, 0x6, 0xf0, 0xe5, 0x9, 0xffffffffffffff3d, 0xe867, 0x2, 0x4, 0x8, 0x1, 0x40, 0x9, 0x200, 0x1, 0x101]}) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0xffffffffffff4dbb) [ 296.727304] binder: 10387:10388 ioctl c0306201 0 returned -14 13:05:14 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) 13:05:14 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) [ 296.780152] binder: 10387:10388 ioctl c0306201 0 returned -14 13:05:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0, 0x200000}], 0x1, 0x0, 0x0, 0x0) 13:05:14 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x8000800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) [ 296.952814] binder: 10408:10409 ioctl c0306201 0 returned -14 [ 296.974333] binder: 10408:10409 ioctl c0306201 0 returned -14 13:05:15 executing program 3: r0 = open(&(0x7f0000001340)='./file0\x00', 0x0, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001380), 0x4) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='s\n'], 0x2) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 13:05:15 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28}, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) write$P9_RWSTAT(r0, &(0x7f0000000140)={0x7, 0x7f, 0x1}, 0x7) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000100)=0x3) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000180)={'broute\x00'}, &(0x7f0000000200)=0x78) 13:05:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:05:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x4, 0x0, 0x0, 0x0) 13:05:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) [ 297.434560] binder: BINDER_SET_CONTEXT_MGR already set 13:05:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) 13:05:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-monitor\x00', 0x4000, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000500)={0x1, 0x4, [@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @local]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_1\x00', 0x0}) r5 = dup3(r2, r2, 0x80000) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f00000000c0)=""/83) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000056c0)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x7, 0x4, 0x10000, 0x1, 0x81}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0x192d00000, @dev={0xfe, 0x80, [], 0xc}, 0x4922ae3}}, 0x8, 0x470, 0x6, 0x0, 0x4}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000003c0)={r6, 0x4, 0x0, 0x800, 0x81, 0xb8, 0x6, 0x7, {r7, @in={{0x2, 0x4e21, @broadcast}}, 0x3, 0x80000000, 0xffffffff, 0x8593, 0x5}}, &(0x7f0000000480)=0xb0) [ 297.459355] binder: 10437:10440 ioctl c0306201 0 returned -14 [ 297.460512] binder: 10429:10430 ioctl 40046207 200000c0 returned -16 [ 297.472036] binder: BINDER_SET_CONTEXT_MGR already set [ 297.482944] binder: 10432:10433 ioctl 40046207 0 returned -16 [ 297.495545] binder: 10437:10440 ioctl c0306201 0 returned -14 13:05:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:15 executing program 0: r0 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)={0x6, 0x590, 0x1, 0x4, 0x8, [{0x7, 0x4, 0x4}, {0x9c8a, 0xfffffffffffffffe, 0x81, 0x0, 0x0, 0x200}, {0x7, 0x2000000000000000, 0x3f, 0x0, 0x0, 0xc}, {0x5, 0x4, 0x7, 0x0, 0x0, 0xb00}, {0x56a, 0x200, 0x1000, 0x0, 0x0, 0x980}, {0x472, 0x3, 0x3, 0x0, 0x0, 0x3000}, {0x3, 0x8, 0x2, 0x0, 0x0, 0x1000}, {0x7ff, 0x2, 0x5, 0x0, 0x0, 0x800}]}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x145480, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x6, 0x404000) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x9) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000080)) ioctl$TCSBRKP(r2, 0x5425, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000600)=0xc) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000800)=0xe8) mount$9p_virtio(&(0x7f0000000480)='/dev/midi#\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='9p\x00', 0x2, &(0x7f0000000840)={'trans=virtio,', {[{@access_user='access=user'}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@access_any='access=any'}, {@uname={'uname'}}, {@loose='loose'}, {@cache_loose='cache=loose'}, {@debug={'debug', 0x3d, 0x10000}}, {@access_uid={'access', 0x3d, r5}}, {@debug={'debug', 0x3d, 0x2}}, {@loose='loose'}], [{@fowner_gt={'fowner>', r6}}, {@smackfshat={'smackfshat', 0x3d, 'selinuxloeth0keyring'}}, {@smackfstransmute={'smackfstransmute'}}, {@context={'context', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, 'trusted#'}}, {@euid_lt={'euid<', r7}}]}}) r8 = socket(0x10, 0x803, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000440)={0x101ff, 0x1, 0xf000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) getsockopt$SO_BINDTODEVICE(r8, 0x1, 0x2f, &(0x7f0000000000), 0x20a154cc) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x400800, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x6) 13:05:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x2, 0x0, 0x0, 0x0) [ 297.619804] binder: BINDER_SET_CONTEXT_MGR already set [ 297.625114] binder: 10456:10465 ioctl 40046207 200000c0 returned -16 [ 297.664927] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 297.667908] binder: BINDER_SET_CONTEXT_MGR already set 13:05:15 executing program 5 (fault-call:2 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 297.708094] binder: 10470:10475 ioctl c0306201 0 returned -14 [ 297.710946] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 297.715167] binder: 10468:10471 ioctl 40046207 200000c0 returned -16 13:05:15 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) [ 297.753872] binder: 10470:10475 ioctl c0306201 0 returned -14 13:05:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0) tkill(r2, 0x1000000000013) 13:05:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x3, 0x0, 0x0, 0x0) 13:05:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x9, 0xd, 0x209e1e, 0x2}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="9f8de3a0fe0a5c1f023c126285719070") bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x3, 0x0, 0x77ffff, 0x0, 0x81fffc, 0x0}, 0xffffffffffffffc3) 13:05:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:05:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0xffffffff00000000, 0x0, 0x0) [ 297.909397] FAULT_INJECTION: forcing a failure. [ 297.909397] name failslab, interval 1, probability 0, space 0, times 1 [ 297.931140] binder: 10499:10500 ioctl c0306201 0 returned -14 13:05:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 297.959763] binder: 10499:10500 ioctl c0306201 0 returned -14 [ 298.013660] CPU: 0 PID: 10495 Comm: syz-executor5 Not tainted 4.20.0+ #1 [ 298.020524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.020532] Call Trace: [ 298.020573] dump_stack+0x1db/0x2d0 [ 298.020597] ? dump_stack_print_info.cold+0x20/0x20 [ 298.041217] ? __lock_acquire+0x572/0x4a30 [ 298.045472] should_fail.cold+0xa/0x15 [ 298.049387] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 298.049412] ? ___might_sleep+0x1e7/0x310 [ 298.049428] ? arch_local_save_flags+0x50/0x50 [ 298.049460] __should_failslab+0x121/0x190 [ 298.049479] should_failslab+0x9/0x14 [ 298.049495] kmem_cache_alloc_trace+0x2d1/0x760 [ 298.061560] binder: BINDER_SET_CONTEXT_MGR already set [ 298.063364] ? _raw_spin_unlock+0x2d/0x50 [ 298.063466] binder_get_thread+0x287/0x980 [ 298.063484] ? ___might_sleep+0x1e7/0x310 [ 298.090942] binder: 10513:10518 ioctl 40046207 0 returned -16 [ 298.093954] ? binder_free_ref+0xb0/0xb0 [ 298.093971] ? rcu_lockdep_current_cpu_online+0x1aa/0x220 [ 298.093986] ? rcu_pm_notify+0xd0/0xd0 13:05:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x8000000000000000, 0x0, 0x0) [ 298.094005] ? __might_sleep+0x95/0x190 [ 298.108797] binder: 10522:10524 ioctl c0306201 0 returned -14 [ 298.109476] binder_ioctl+0x24e/0x1920 [ 298.127107] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.132691] ? binder_ioctl_write_read.isra.0+0xb60/0xb60 [ 298.134965] binder: 10522:10524 ioctl c0306201 0 returned -14 [ 298.138232] ? find_held_lock+0x35/0x120 [ 298.138264] ? __fget+0x472/0x710 [ 298.138284] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.138301] ? lock_downgrade+0x910/0x910 13:05:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 298.148238] ? kasan_check_read+0x11/0x20 [ 298.157207] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 298.157224] ? rcu_read_unlock_special+0x380/0x380 [ 298.157256] ? iterate_fd+0x4b0/0x4b0 [ 298.157273] ? binder_ioctl_write_read.isra.0+0xb60/0xb60 [ 298.185114] do_vfs_ioctl+0x107b/0x17d0 [ 298.189120] ? wait_for_completion+0x810/0x810 [ 298.193712] ? ioctl_preallocate+0x2f0/0x2f0 [ 298.198131] ? __fget_light+0x2db/0x420 [ 298.202135] ? fget_raw+0x20/0x20 [ 298.202155] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 298.202199] ? fput+0x128/0x1a0 [ 298.202217] ? do_syscall_64+0x8c/0x800 [ 298.211190] ? do_syscall_64+0x8c/0x800 [ 298.211204] ? lockdep_hardirqs_on+0x415/0x5d0 [ 298.211250] ? security_file_ioctl+0x93/0xc0 [ 298.211266] ksys_ioctl+0xab/0xd0 [ 298.211282] __x64_sys_ioctl+0x73/0xb0 [ 298.211297] do_syscall_64+0x1a3/0x800 [ 298.211314] ? syscall_return_slowpath+0x5f0/0x5f0 [ 298.211329] ? prepare_exit_to_usermode+0x232/0x3b0 [ 298.211347] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 298.211367] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 298.211377] RIP: 0033:0x457ec9 [ 298.211391] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 298.211398] RSP: 002b:00007f823df61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.211410] RAX: ffffffffffffffda RBX: 00007f823df61c90 RCX: 0000000000457ec9 [ 298.211418] RDX: 00000000200000c0 RSI: 0000000040046207 RDI: 0000000000000003 [ 298.211425] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 13:05:16 executing program 4 (fault-call:2 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 298.211433] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f823df626d4 [ 298.211443] R13: 00000000004bf216 R14: 00000000004d0688 R15: 0000000000000004 [ 298.272356] cgroup: fork rejected by pids controller in /syz1 [ 298.316094] binder: 10490:10495 ioctl 40046207 200000c0 returned -12 [ 298.362926] FAULT_INJECTION: forcing a failure. [ 298.362926] name failslab, interval 1, probability 0, space 0, times 0 [ 298.389774] CPU: 1 PID: 10537 Comm: syz-executor4 Not tainted 4.20.0+ #1 [ 298.396654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.406007] Call Trace: [ 298.408613] dump_stack+0x1db/0x2d0 [ 298.412270] ? dump_stack_print_info.cold+0x20/0x20 [ 298.417301] ? __lock_acquire+0x572/0x4a30 [ 298.421543] should_fail.cold+0xa/0x15 [ 298.421595] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 298.421615] ? ___might_sleep+0x1e7/0x310 [ 298.434797] ? arch_local_save_flags+0x50/0x50 [ 298.439418] __should_failslab+0x121/0x190 [ 298.443682] should_failslab+0x9/0x14 [ 298.447512] kmem_cache_alloc_trace+0x2d1/0x760 [ 298.450841] binder: BINDER_SET_CONTEXT_MGR already set [ 298.452194] ? _raw_spin_unlock+0x2d/0x50 [ 298.452217] binder_get_thread+0x287/0x980 13:05:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x20000000000000, 0x0, 0x0) [ 298.452235] ? ___might_sleep+0x1e7/0x310 [ 298.462589] binder: 10543:10544 ioctl 40046207 200000c0 returned -16 [ 298.465861] ? binder_free_ref+0xb0/0xb0 [ 298.465890] ? rcu_lockdep_current_cpu_online+0x1aa/0x220 [ 298.465904] ? rcu_pm_notify+0xd0/0xd0 [ 298.489994] ? __might_sleep+0x95/0x190 [ 298.493973] binder_ioctl+0x24e/0x1920 [ 298.497860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.503417] ? binder_ioctl_write_read.isra.0+0xb60/0xb60 [ 298.508948] ? find_held_lock+0x35/0x120 [ 298.513015] ? __fget+0x472/0x710 [ 298.516479] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.522021] ? lock_downgrade+0x910/0x910 [ 298.526176] ? kasan_check_read+0x11/0x20 [ 298.530343] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 298.535625] ? rcu_read_unlock_special+0x380/0x380 [ 298.540586] ? iterate_fd+0x4b0/0x4b0 [ 298.544436] ? binder_ioctl_write_read.isra.0+0xb60/0xb60 [ 298.549970] do_vfs_ioctl+0x107b/0x17d0 [ 298.549988] ? wait_for_completion+0x810/0x810 [ 298.550007] ? ioctl_preallocate+0x2f0/0x2f0 [ 298.562965] ? __fget_light+0x2db/0x420 [ 298.566946] ? fget_raw+0x20/0x20 [ 298.570416] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 298.575962] ? fput+0x128/0x1a0 [ 298.579248] ? do_syscall_64+0x8c/0x800 [ 298.583217] ? do_syscall_64+0x8c/0x800 [ 298.587179] ? lockdep_hardirqs_on+0x415/0x5d0 [ 298.591780] ? security_file_ioctl+0x93/0xc0 [ 298.596192] ksys_ioctl+0xab/0xd0 [ 298.599648] __x64_sys_ioctl+0x73/0xb0 [ 298.603531] do_syscall_64+0x1a3/0x800 [ 298.607415] ? syscall_return_slowpath+0x5f0/0x5f0 [ 298.612342] ? prepare_exit_to_usermode+0x232/0x3b0 [ 298.617342] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 298.622188] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 298.627357] RIP: 0033:0x457ec9 [ 298.630544] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 298.649425] RSP: 002b:00007f0d84d09c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.657112] RAX: ffffffffffffffda RBX: 00007f0d84d09c90 RCX: 0000000000457ec9 [ 298.664362] RDX: 0000000000000000 RSI: 0000000040046207 RDI: 0000000000000003 [ 298.671621] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 298.678889] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d84d0a6d4 [ 298.686137] R13: 00000000004bf216 R14: 00000000004d0688 R15: 0000000000000004 [ 298.695295] binder: 10536:10537 ioctl 40046207 0 returned -12 13:05:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x450001, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 13:05:18 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) socket$pppoe(0x18, 0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r6) writev(r5, &(0x7f000051c000)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c560284ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x48}], 0x1) readv(r5, &(0x7f0000001700)=[{&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000580)=""/4096, 0xfffffffffffffe44}], 0x2) r7 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r7, 0x89e4) 13:05:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x200000, 0x0, 0x0) 13:05:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:05:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 300.918206] binder: 10554:10558 ioctl c0306201 0 returned -14 [ 300.943755] binder: BINDER_SET_CONTEXT_MGR already set 13:05:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x2000, 0x0, 0x0) [ 300.966113] binder: 10555:10560 ioctl 40046207 0 returned -16 [ 300.985833] binder: 10554:10558 ioctl c0306201 0 returned -14 13:05:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 13:05:18 executing program 3: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000002000250700000000000000000a00000000000000000000000400f5ff14001800697036746e6c30000000000000000000"], 0x34}}, 0x0) 13:05:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 301.067961] binder: 10578 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 301.067972] binder: 10578:10581 ioctl c018620c 200000c0 returned -22 [ 301.105973] binder: 10577:10585 ioctl c018620c 0 returned -14 13:05:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x200000) 13:05:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, 0x0) [ 301.128265] binder: 10586:10588 ioctl c018620c 0 returned -14 [ 301.145563] binder: 10582 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 301.145575] binder: 10582:10593 ioctl c018620c 200000c0 returned -22 [ 301.225191] binder: 10595:10602 ioctl c0306201 0 returned -14 [ 301.260675] binder: 10595:10602 ioctl c0306201 0 returned -14 13:05:19 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x101100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x7, 0xfff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x4, 0x7, 0x2, 0x7, 0x2674, 0x2, 0xffff, 0xd47, r2}, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r3}, 0x8) 13:05:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x5451, 0x0) 13:05:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0xffffffffffffffe7, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c400000019000100000000000000000000000000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc4}}, 0x0) 13:05:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x2000) 13:05:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x5460, 0x0) 13:05:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 301.823439] binder: 10623:10626 ioctl c0306201 0 returned -14 [ 301.840101] netlink: 12 bytes leftover after parsing attributes in process `syz-executor3'. [ 301.868726] binder: 10623:10626 ioctl c0306201 0 returned -14 13:05:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffff00000000) 13:05:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x2400, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x864) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x4700) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f00000000c0)={0x4259, 0x58, "e27dd42477dc514acebb3ed489836bfe101f21dd1ce8290e388190364e66baa4bec93df0a3135395c767e01f1a899e2def27a01aec3a7799be680526d2bc200fe352804f25bb1f35106c445ec2da621d327e996d56ee554e"}) getsockopt$inet6_int(r2, 0x28, 0x1, 0x0, &(0x7f0000000000)=0xffffffffffffff7e) [ 302.098743] binder: 10667:10668 ioctl c0306201 0 returned -14 [ 302.119439] binder: 10667:10668 ioctl c0306201 0 returned -14 13:05:20 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x9, 0x12400) write$UHID_DESTROY(r0, &(0x7f0000000280), 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000e5f21b229d21ffc31900010000000000fdd9c32ca8d600000000ff01000000000000ff7f4200000000000000000100000049000000000000000000003fd331ab", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x20000) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8020800}, 0xc, &(0x7f0000000080)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4000010}, 0x40080) connect(r1, &(0x7f0000000100)=@rc={0x1f, {0x7ff, 0x9, 0x1000000, 0xf7, 0x477, 0x5}, 0x2}, 0x80) 13:05:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 13:05:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) r4 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, 0x0) r5 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(&(0x7f0000000340)) fcntl$getown(r5, 0x9) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x10080, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000100)={0x3f, 0xfffffffffffffffd, 0x4, {0xf, @vbi={0x2, 0x401, 0x4, 0x42474752, [0x8, 0x7], [0x7], 0x13a}}}) gettid() writev(r0, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb443", 0x3f}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000000)) close(r3) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000240)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000280)={r7}, 0x8) dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) 13:05:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x8000000000000000) 13:05:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 302.819377] binder: 10690:10694 ioctl c0306201 0 returned -14 13:05:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x20000000000000) [ 302.870588] binder: 10690:10694 ioctl c0306201 0 returned -14 13:05:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 13:05:20 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x81, 0x20002) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000140)) unshare(0x8000000) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000040)=""/40, 0x28, 0x0, &(0x7f0000b6bff0)) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8e, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000000c0)={0x14000, 0x0, 0x1f, 0x81, 0x18}) r3 = shmget(0x1, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r3, 0x0) 13:05:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306202, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 303.029652] binder: 10721:10722 ioctl 40046205 0 returned -22 13:05:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, 0x0) [ 303.157710] binder: 10730:10736 ioctl c0306201 0 returned -14 [ 303.204549] binder: 10730:10743 ioctl c0306202 200000c0 returned -22 13:05:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) r4 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, 0x0) r5 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) times(&(0x7f0000000340)) fcntl$getown(r5, 0x9) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x10080, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000100)={0x3f, 0xfffffffffffffffd, 0x4, {0xf, @vbi={0x2, 0x401, 0x4, 0x42474752, [0x8, 0x7], [0x7], 0x13a}}}) gettid() writev(r0, &(0x7f0000000500)=[{&(0x7f0000000480)="2b1cbccc40004dd548226dbf7865af0dc9725484e5699dfe9f02d29fd620910b60499e1aaf7d636cf32399ed1ff8ec7e26c97b9f42be07a0eb907d11cdb443", 0x3f}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000000)) close(r3) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000240)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000280)={r7}, 0x8) dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) 13:05:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, 0x0) 13:05:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000240)={0x9, @time={0x77359400}, 0x8001, {0x2, 0x3a8c}, 0x5, 0x1, 0x8000}) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x401, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x4000810) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast1, @in6=@local}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) prctl$PR_GET_SECCOMP(0x15) 13:05:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0x200, 0x8, 0x3f, 0x6, 0x0, 0x9, 0x8000, 0x0, 0x6, 0x6, 0x8, 0x10000, 0x6, 0x80000001, 0xff, 0x200, 0x8, 0x9, 0x1, 0xa22, 0xff, 0x8, 0x0, 0x5681, 0x80000001, 0x3, 0x1374, 0x2, 0x8, 0x4, 0x8000, 0x10001, 0x6, 0x38, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x10800, 0xffff, 0x7, 0x0, 0x9, 0x2, 0x1cb}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fd) pipe(0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000780)) mount$9p_tcp(&(0x7f0000000500)='127.0.0.1\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) mmap$binder(&(0x7f000003e000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x0) ioctl$VT_SETMODE(r3, 0x5602, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000300)={{0x2, 0x0, @dev}, {0x0, @local}, 0x0, {0x2, 0x4e20, @multicast1}, 'syz_tun\x00'}) semget(0xffffffffffffffff, 0x0, 0x40) sync() ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f0000001940)) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001980)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x1, 0x4e23}, {0x3, 0x0, 0x0, 0x7f, 0x8, 0xfffffffffffffffd, 0x1, 0x1}, {0x4, 0x0, 0x7, 0x5}, 0x7f, 0x6e6bb3, 0x0, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x14}, 0x4d2}, 0xa, @in=@broadcast, 0x3505, 0x2, 0x1, 0x0, 0x80000000, 0x0, 0x1}}, 0xe8) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000140)={0x9, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x9, 0x100000000, 0x8, 0x0, 0x0, 0x1c}) vmsplice(0xffffffffffffffff, &(0x7f0000002840), 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sysfs$2(0x2, 0x3ff, &(0x7f0000000380)=""/157) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000017, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) 13:05:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 303.249891] binder: 10730:10744 ioctl c0306202 200000c0 returned -22 13:05:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306209, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, 0x0) 13:05:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f023c123f3188a070") 13:05:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046203, 0x0) 13:05:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x4000, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000140)="c4a37bf0870f00000009440f01cf0f01f8c7442400a4000000c744240200000080ff2c24467aa966b8d2008ed0b9510900000f32f2f226420f0867653667460fc7980080000066baf80cb8e34f5182ef66bafc0cec"}], 0x68, 0x0, 0x0, 0x0) [ 303.513583] binder: 10776:10782 ioctl c0306201 0 returned -14 [ 303.550507] binder: 10776:10782 ioctl c0306209 200000c0 returned -22 13:05:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 303.596825] binder: 10790:10790 ioctl c0306201 0 returned -14 [ 303.633755] binder: 10790:10795 ioctl c0306209 200000c0 returned -22 13:05:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r2, 0x8, 0x10000, 0x5, 0x8001, 0x1}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x80000400000003, 0x300) getsockopt$packet_buf(r3, 0x107, 0x13, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0) 13:05:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c00000000000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:21 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400001, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000140)=""/86, &(0x7f00000001c0)=0x56) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) io_pgetevents(0x0, 0x7, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1}, 0x8}) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5, 0x200103) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x8, 0x10001, 0x6, 0x100000001}, 0xfffffffffffffec3) [ 303.669570] binder: 10799:10800 ioctl 40046203 0 returned -22 13:05:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x4004623a, 0x0) 13:05:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x428000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) socket$inet6(0xa, 0x80004, 0x65) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) [ 303.844472] binder: 10821:10824 ioctl 4004623a 0 returned -22 [ 303.850739] binder: 10810:10827 ioctl c0306201 0 returned -14 [ 303.871814] binder: 10810:10827 ioctl c0306201 200000c0 returned -14 13:05:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x4004623a, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x8002, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x81, 0x200, 0x4, 0x401, 0x0, 0x6, 0x1, 0x9, 0x94, 0x7, 0x1c, 0x10000, 0x3}, {0x10001, 0x38e, 0x20, 0x407d, 0x6, 0x0, 0x8615, 0x6, 0xfffffffffffff497, 0x8000, 0xb58, 0x1}, {0x7fffffff, 0x6, 0x4, 0x80, 0x178fc143, 0x1, 0x3, 0x84b, 0xff, 0x2b9, 0x5, 0x80000001, 0x5}], 0x5}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xf5, 0x381100) write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14, 0x13, 0x1, {0x41, 0x2, 0x4}}, 0x14) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000000c0)={0x4, 0x0, 0x368, 0x1000, 0x2, @stepwise={{0x9, 0x1}, {0x5, 0x9}, {0x0, 0x20}}}) 13:05:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x802, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) sendmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000002e0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 303.894644] binder: 10821:10836 ioctl 4004623a 0 returned -22 [ 303.897514] binder: 10829:10829 ioctl c0306201 0 returned -14 [ 303.925960] binder: 10829:10838 ioctl c0306201 200000c0 returned -14 13:05:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x100000000000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x5450, 0x0) 13:05:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x117400, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 304.054072] binder: 10853:10854 ioctl c0306201 0 returned -14 [ 304.064059] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 304.088852] binder: 10853:10854 ioctl c0306201 200000c0 returned -14 [ 304.095882] binder: 10859:10861 ioctl 4004623a 200000c0 returned -22 13:05:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x5000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 304.106397] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 304.116460] binder: 10862:10862 ioctl c0306201 0 returned -14 [ 304.119658] binder: 10863:10867 ioctl 4004623a 200000c0 returned -22 13:05:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40049409, 0x0) 13:05:22 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(r0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x6) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r6 = accept(r4, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="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", 0x700}], 0x1, 0x0, 0x0, 0x20000000}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x3, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0xfffffe1f) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r7 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x101, 0x40000) fcntl$getown(r1, 0x9) getgid() getpgid(0xffffffffffffffff) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000300)) fcntl$getownex(r2, 0x10, &(0x7f0000000840)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000940), &(0x7f00000022c0)=0xc) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000002300)) fstat(r5, &(0x7f0000002340)) fcntl$getown(r2, 0x9) getgroups(0x3, &(0x7f00000000c0)=[0xee00, 0xee00, 0xffffffffffffffff]) getpgrp(0xffffffffffffffff) lstat(&(0x7f0000002400)='./file0\x00', &(0x7f0000002440)) getegid() ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000002500)) sendmmsg(r5, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r6, r3, &(0x7f0000000180), 0x10000014e) 13:05:22 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000500)=ANY=[], 0x0) write$nbd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f"], 0x1) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x3, {0x7, 0x1b, 0x0, 0x0, 0x0, 0x5}}, 0x50) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) accept4$inet6(r1, 0x0, &(0x7f0000000100), 0x80000) 13:05:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:05:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x200, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r2, @in={{0x2, 0x4e23, @multicast1}}, 0x3, 0x0, 0x9, 0x1, 0x9a}, &(0x7f00000002c0)=0x98) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendfile(r0, r0, &(0x7f0000000040)=0x101, 0x3af) [ 304.288234] binder: 10884:10885 ioctl c0306201 0 returned -14 13:05:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 304.409903] binder: 10884:10885 ioctl c0306201 200000c0 returned -14 [ 304.429406] binder: 10904:10914 ioctl c018620b 0 returned -14 13:05:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, 0x0) [ 304.465783] binder: 10884:10885 ioctl c0306201 0 returned -14 13:05:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x501080, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000200)={0x0, 0x2, 0x5, &(0x7f00000001c0)=0x8}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r2, 0x1}) r3 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f00000002c0)=""/4096) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r1}, 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 304.507333] binder: 10884:10885 ioctl c0306201 200000c0 returned -14 13:05:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 13:05:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046203, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x700, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000000202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 304.704962] binder: 10941:10942 ioctl c0306201 0 returned -14 [ 304.732309] binder: 10940:10944 ioctl c0306201 0 returned -14 [ 304.745797] binder: 10941:10942 ioctl c0306201 200000c0 returned -14 [ 304.775108] binder: 10945:10950 ioctl 40046203 200000c0 returned -22 13:05:23 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(r0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x6) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r6 = accept(r4, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="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", 0x700}], 0x1, 0x0, 0x0, 0x20000000}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x3, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0xfffffe1f) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r7 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x101, 0x40000) fcntl$getown(r1, 0x9) getgid() getpgid(0xffffffffffffffff) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000300)) fcntl$getownex(r2, 0x10, &(0x7f0000000840)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000940), &(0x7f00000022c0)=0xc) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000002300)) fstat(r5, &(0x7f0000002340)) fcntl$getown(r2, 0x9) getgroups(0x3, &(0x7f00000000c0)=[0xee00, 0xee00, 0xffffffffffffffff]) getpgrp(0xffffffffffffffff) lstat(&(0x7f0000002400)='./file0\x00', &(0x7f0000002440)) getegid() ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000002500)) sendmmsg(r5, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendfile(r6, r3, &(0x7f0000000180), 0x10000014e) 13:05:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x5421, 0x0) 13:05:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:05:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SVE_GET_VL(0x33, 0xcb8d) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x200000) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in=@broadcast, @in=@local}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) 13:05:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x6800, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 305.226881] dccp_close: ABORT with 1061 bytes unread [ 305.233173] dccp_close: ABORT with 105984 bytes unread 13:05:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x5452, 0x0) [ 305.269255] binder: 10965:10968 ioctl c0306201 0 returned -14 [ 305.293557] binder: 10965:10968 ioctl c0306201 200000c0 returned -14 [ 305.308600] binder: 10973:10974 ioctl c018620b 0 returned -14 13:05:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 305.328996] binder: 10965:10968 ioctl c0306201 0 returned -14 13:05:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x7a, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:05:23 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000240)=0x10003) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) getsockname$tipc(r1, &(0x7f00000001c0), &(0x7f0000000200)=0x10) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) getsockopt$inet_dccp_int(r0, 0x21, 0x10, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000340)={0x0, 0x3c, 0xb3, &(0x7f0000000280)="87cee99c7a3b102a8c42507eb5b46bf5792ea05c516add00eb68aeae46a01bb3ec37a688250f47f70c1bc1a4592453b489f78dcc03ff6bd8017ee94ad973e6a5c3ccedcd8faa3a139daedde92ae2b65ca7e8ad8c3cdca636633b9449974ecd36a2fdea60a567ef5b3ad3866efe5ad1130da958e667f0c0dc1030690a767fd842448dd64026f57b46a083a373dc1cdfc7455c9e8f31a926ac81c549526f9dca820efe81ddcd49165eabddc655081d56e29615b1"}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000040)=0x5a4) 13:05:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 305.496023] binder: 10998:10999 ioctl c018620b 0 returned -14 [ 305.506923] binder: 11002:11006 ioctl c0306201 0 returned -14 [ 305.568143] binder: 11002:11006 ioctl c0306201 200000c0 returned -14 [ 305.594229] binder: 11002:11010 ioctl c0306201 200000c0 returned -14 13:05:23 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fgetxattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00', &(0x7f0000000080)=""/180, 0xb4) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x0) fallocate(r1, 0x0, 0xffff, 0xca) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl(r1, 0xc020660b, &(0x7f0000000000)) 13:05:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) 13:05:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:05:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3f00, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={r2}) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fdc000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000140)="9a75c9a400640f0626670f005b00bad004ed66b98c02000066b87ac07b6866ba000000000f3066b8380000000f23c00f21f86635030005000f23f89a0000fb000fc79df0ffb830000f00d8ea4000b800"}], 0x1, 0x2000000000000000, 0x0, 0xba1742c557ef0f74) 13:05:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x2, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 306.138153] dccp_close: ABORT with 91904 bytes unread 13:05:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:05:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) [ 306.172048] binder: 11025:11028 ioctl c018620b 0 returned -14 [ 306.186548] binder: BINDER_SET_CONTEXT_MGR already set [ 306.201123] binder: 11026:11037 ioctl c0306201 0 returned -14 [ 306.220590] binder: BINDER_SET_CONTEXT_MGR already set [ 306.238896] binder: 11030:11032 ioctl 40046207 200000c0 returned -16 13:05:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x400000) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000240)={0x218e, 0x4, 0x5, 0x6, 0x6, 0x1, 0xa60, 0x800, 0x7fff, 0xfffffffffffff001, 0x6}, 0xb) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") sendfile(r0, r1, &(0x7f0000000280), 0x434) connect$bt_sco(r1, &(0x7f00000002c0)={0x1f, {0x8000, 0x4, 0x7, 0xffff, 0xb45, 0xffffffffffffc8c4}}, 0x8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000300)={0x1, 0x1, 0x3, 0x1d2, 'syz1\x00', 0xffffffffffffffe0}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x16) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000140)={0x0, @bt={0x100, 0x5, 0x0, 0x2, 0x1, 0x1, 0x9, 0x7fffffff, 0x40, 0x0, 0x7, 0x7, 0x400, 0x7, 0x8, 0x2}}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x3f00000000000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 306.266801] binder: 11026:11037 ioctl c0306201 200000c0 returned -14 [ 306.282783] binder: 11034:11041 ioctl 40046207 200000c0 returned -16 [ 306.287246] binder: 11048:11051 ioctl c018620b 0 returned -14 13:05:24 executing program 3: setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@v1={0x2, "547cb20c47e5f59b69455d0570ec930d6d"}, 0x12, 0x3) r0 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000180)="212e4f52f92b90002a8ada4667ecdd53bc", 0x11}, {&(0x7f00000001c0)="ffda7c98d6d56cdfa4ffa75ff10753e6c154b905dc980fc8ba06ad984be7c5dc97cff1deb022e5c407466c1d61c6f0ad0b10e5def01d0b2990f870fbd196b53707c3ccb49f67318a0cbc726874f9ef89d53cbe26aedc419c626ee11ddffc2fb4cca9874d2ca021924d50b7c6a3f3101505632123b7b3dd04af8085e538895e082e591bb32189d5712c06c562a4033a8c3beb", 0x92}, {&(0x7f0000000280)="b00d0409e99f6351c2046291ff054b846d56872f5e11fea0a7abe9726ed133cba17b16e2984599a1af70431cd78630e4965607b5785518214846bc862940c88321ebd0221b9bb90b415085eb35f4992714be3e75806fe7da8ce3089df26d14f46e66a309a08233", 0x67}, {&(0x7f0000000300)="c0d5840b6a8dc7d2c51e7b97", 0xc}, {&(0x7f0000000340)="117d6ffa3b794d3f95db7d4865fb0ef4e308f8ab25e20f0f914527d15a59099e2ed727", 0x23}, {&(0x7f0000000380)="dfc2d19ee245aaf673c8f3a367a570e4ee6e549eb1737360b4bbac9cfb49f3bc15fd9949762b018c5c961f3c3c578d6882ceff241afc9b0f7131a8b945d5d3f1d30b64e8636bd2c1dedfcb786b7cdab181948d5c4ce38d5741ede57b436c55520e418f96687582e6a7841263bfac5911e3964ec27279be5bac2f4d7a41b3cb25dd3c07be5cfb77afb8ed8684be284eb68c0777c75d47be0c6a9b20c35d0946b092ba17556b71fcaa845b02194a21f989e32fd4a2abf1af7491d9c547", 0xbc}, {&(0x7f0000000440)="d92d4cd07c327807066132cf61f88db8feb8646dd4a97d6df4f2f9221cef40a5fa2a41444127ac8455d4a874f6b9234fb82c5a867bd018b2ab591364d09b061870a2d711ee33abd1f8169ccb66e367fbdc10e33901a7bb56cc", 0x59}], 0x7, 0x5) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/snmp6\x00') getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r2 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000006c0)={{0x4, 0x0, 0x7ed, 0x7, '\x00', 0x10000}, 0x5, 0x30, 0x7, r2, 0xa, 0x3, 'syz1\x00', &(0x7f0000000600)=['net/snmp6\x00', 'em0eth0self\x00', 'net/snmp6\x00', '(\x00', 'security.evm\x00', 'eth1vboxnet0+vmnet0wlan1\x00', 'procposix_acl_access*\x00', 'security.evm\x00', 'security.evm\x00', 'net/snmp6\x00'], 0x82, [], [0xfff, 0x9fc, 0x100, 0x5]}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000800), &(0x7f0000000840)=0x4) r3 = syz_open_dev$vcsn(&(0x7f0000000880)='/dev/vcs#\x00', 0x1, 0x40000) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000900)={0xffffffffffffffff, 0x7, 0x3d, &(0x7f00000008c0)="3ef375708a908148f9ba7dc4a59d1b64fa1ff9ecd2d9172aa9976cd2bdeca999500590a03f856115866fa293ac84faa46958517bf04b778642a229ee55"}) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000940)={0x0, 0xd69, 0xff, 0xbd7, 0x10, 0x81, 0x3, 0x101, 0x3, 0xfffffffffffffff8, 0xf674}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000980), 0x4) write$9p(r3, &(0x7f00000009c0)="673a8cffd3493f2ce655d6ee494dadcc6408cfff962af0f8bad3032ae732bfe1d5a1fa6d416e08c192cd9af6c6580bd53a6de47c44e8bc72cbcbaac9fe94b9dd177b24bf22a7e95e9306f788b3a6584ba7013084", 0x54) accept$unix(r1, 0x0, &(0x7f0000000a40)) ioctl$NBD_DISCONNECT(r3, 0xab08) write$P9_RREADLINK(r1, &(0x7f0000000a80)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000ac0)=@int=0x6, 0x4) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000b80)='bic\x00', 0x4) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000bc0)={{{@in=@remote, @in6}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000cc0)=0xe8) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x3) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000d00)=0x1, 0x4) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) prctl$PR_SET_UNALIGN(0x6, 0x1) clock_gettime(0x0, &(0x7f0000000d40)={0x0, 0x0}) timerfd_settime(r3, 0x1, &(0x7f0000000d80)={{}, {r4, r5+10000000}}, &(0x7f0000000dc0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000e00)=0x8, 0x4) ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f0000000e40)) mq_open(&(0x7f0000000e80)='em0eth0self\x00', 0x41, 0x40, &(0x7f0000000ec0)={0x2, 0x100000001, 0x1000, 0xeabc, 0x101, 0x1, 0xc5fa, 0x4}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000f00)={0x0, 0x70, 0x200, 0x6, 0x7f, 0xe3, 0x0, 0x1e0, 0x40008, 0x4, 0x1, 0xa658, 0x456, 0x9, 0x0, 0x1f, 0x9, 0x7, 0x3, 0x3f, 0x8, 0x4, 0x3, 0x7, 0x6, 0x0, 0x7f, 0x7fffffff, 0x0, 0x5, 0x7, 0xfffffffffffffffd, 0x3, 0x5, 0x4, 0x6, 0x0, 0x8, 0x0, 0x9, 0x4, @perf_config_ext={0x8, 0x9}, 0x800, 0x100000000, 0x3000000000000, 0x7, 0x3da, 0x4f7, 0x4}) 13:05:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c00, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 306.384756] binder: 11053:11057 ioctl c0046209 0 returned -22 13:05:24 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, 0x0) [ 306.428038] binder: 11053:11067 ioctl c0046209 0 returned -22 [ 306.467200] binder: BINDER_SET_CONTEXT_MGR already set [ 306.477025] binder: 11069:11075 ioctl c0306201 0 returned -14 [ 306.487067] binder: 11065:11072 ioctl 40046207 200000c0 returned -16 [ 306.498183] binder: 11069:11075 ioctl c0306201 200000c0 returned -14 [ 306.506984] binder: 11082:11082 ioctl c0306201 0 returned -14 [ 306.513247] binder: BINDER_SET_CONTEXT_MGR already set 13:05:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x5, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xfffffffffffffff7, 0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={@mcast2, 0x21}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x90) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000080)={0x8001006, 0x3, 0x1}) 13:05:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x103000) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f00000000c0)={0x20, "57d391ee3d14d2d116352502a65b07dca15a62d8938f05d2798b4ab22d12eae2", 0x2, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 306.529067] binder: 11073:11077 ioctl 40046207 200000c0 returned -16 13:05:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x200000000000000, 0x0) socketpair(0xb, 0x7, 0xa5, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000002c0)={r2}, &(0x7f0000000300)=0x8) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f00000003c0)={0x80000000}) r3 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000100)=""/193) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x60000000080ffff, [0x48], [0xc2]}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f0000000340)='./file0\x00', r3}, 0x10) 13:05:24 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:05:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x4800000000000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 306.644529] binder: BINDER_SET_CONTEXT_MGR already set 13:05:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x700000000000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 306.694057] binder: BINDER_SET_CONTEXT_MGR already set [ 306.705425] binder: 11089:11090 ioctl 40046207 0 returned -16 13:05:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0xc800) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 306.770353] binder: 11089:11101 ioctl 40046207 0 returned -16 [ 306.770356] binder: BINDER_SET_CONTEXT_MGR already set [ 306.770384] binder: 11103:11106 ioctl 40046207 200000c0 returned -16 13:05:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 306.828640] binder: BINDER_SET_CONTEXT_MGR already set 13:05:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x5000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:24 executing program 3: socket$kcm(0x29, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) r2 = gettid() perf_event_open(&(0x7f0000000400)={0x4, 0x70, 0x3, 0x7, 0x100000000, 0x0, 0x0, 0x1, 0x40, 0xa, 0x2, 0x4, 0xfff, 0xfffffffffffffffb, 0xae80, 0xfffffffffffffff9, 0x101, 0xa5ea, 0x6, 0x1, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x101, 0x0, 0x8, 0x7ff, 0x0, 0x1bc, 0x6, 0x0, 0x80, 0x3, 0xa543, 0x8, 0x1f, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x6, 0x0, 0xffffffff}, r2, 0x3, r0, 0xb) mkdirat$cgroup(r1, 0x0, 0x1ff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ptrace$getregs(0xe, r2, 0x7, &(0x7f0000000280)=""/228) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x40, 0x9d1, 0x80000001, 0x0, 0x0, 0x9, 0x0, 0x0, 0x400, 0x8, 0x2, 0x0, 0x80, 0x6, 0x7, 0xfff, 0x9, 0x9, 0x80, 0x0, 0x8, 0x0, 0x6, 0x6, 0x10000, 0x0, 0x0, 0x20, 0x7b7cddd9, 0x3, 0x0, 0x1, 0x0, 0x100000001, 0x76, 0x5, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x1, 0x8, 0xfffffffffffffffa, 0x1000000000000000}, r0, 0x1, r3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x3000, 0x500001c) [ 306.877758] binder: 11107:11108 ioctl 40046207 200000c0 returned -16 [ 306.905180] binder: 11114:11117 ioctl c018620b 0 returned -14 13:05:24 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, 0x0) [ 306.974886] binder: BINDER_SET_CONTEXT_MGR already set 13:05:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x20) getpeername$netrom(r1, &(0x7f0000000140)={{0x3, @null}, [@remote, @netrom, @null, @rose, @remote, @default, @rose, @null]}, &(0x7f00000001c0)=0x48) fcntl$setown(r1, 0x8, r2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000000c0)={0x2000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xfffffed8) 13:05:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x600, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 307.008489] binder: 11125:11128 ioctl 40046207 200000c0 returned -16 13:05:24 executing program 0 (fault-call:2 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 307.071667] binder: BINDER_SET_CONTEXT_MGR already set [ 307.093769] binder: 11120:11131 ioctl 40046207 0 returned -16 [ 307.113951] audit: type=1804 audit(1546261524.901:49): pid=11133 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir439809469/syzkaller.aaqHzo/103/memory.events" dev="sda1" ino=16972 res=1 [ 307.121905] binder: BINDER_SET_CONTEXT_MGR already set 13:05:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x500000000000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, r2, r3, 0x8, 0x6}}}, 0x90) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000300)={0x800, 0x100000001}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x48, 0x0, 0x0) socket$kcm(0x29, 0x408004, 0x0) 13:05:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) clone(0x20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup(r0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0x401, 0x907, 0x40, 0x7, 0x0, 0x8}) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x2, 0x5}}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 307.278608] binder: 11125:11145 ioctl 40046207 200000c0 returned -16 [ 307.293134] FAULT_INJECTION: forcing a failure. [ 307.293134] name failslab, interval 1, probability 0, space 0, times 0 13:05:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x3f00, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 307.367491] binder: 11160:11162 ioctl 401845e0 20000040 returned -22 13:05:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000003c0)={0x10001, 0x0, 0x1, 0x6}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000400)={r2, 0x7}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) setsockopt$inet_buf(r3, 0x0, 0x26, &(0x7f0000000140)="74960bd694c29b3d666833419ea8a11561748c6a233a6f267a83cf1cc8f5cd10401eb282bffcd5f557c6cf421e272d12278a68411cbac0109c2b838e9a4532483f", 0x41) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x0, 0x0, 0x0, 0x129) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)=0x0) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x11, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000200)={{0x6, 0x7, 0x446, 0xcd5b, '\x00', 0x9}, 0x5, 0x10, 0x0, r4, 0x4, 0xabd, 'syz1\x00', &(0x7f00000001c0)=['{lotrusted}nodeveth1\x00', 'md5sumppp0%\x00', '\x00', '/dev/sequencer\x00'], 0x31, [], [0x4, 0x0, 0x9032, 0x10001]}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000040)={0x1, 0x3, 0x1000, 0x5, 0x9}) [ 307.438722] CPU: 1 PID: 11157 Comm: syz-executor0 Not tainted 4.20.0+ #1 [ 307.445590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.454957] Call Trace: [ 307.457577] dump_stack+0x1db/0x2d0 [ 307.461236] ? dump_stack_print_info.cold+0x20/0x20 [ 307.466273] ? __lock_acquire+0x572/0x4a30 [ 307.470556] should_fail.cold+0xa/0x15 [ 307.474461] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 307.479584] ? ___might_sleep+0x1e7/0x310 [ 307.483748] ? arch_local_save_flags+0x50/0x50 13:05:25 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f00000000c0)={0x200, 0x1f}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") mremap(&(0x7f0000fe7000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) [ 307.488353] __should_failslab+0x121/0x190 [ 307.492596] should_failslab+0x9/0x14 [ 307.496412] kmem_cache_alloc_trace+0x2d1/0x760 [ 307.501091] ? _raw_spin_unlock+0x2d/0x50 [ 307.505252] binder_get_thread+0x287/0x980 [ 307.509491] ? ___might_sleep+0x1e7/0x310 [ 307.513655] ? binder_free_ref+0xb0/0xb0 [ 307.517729] ? rcu_lockdep_current_cpu_online+0x1aa/0x220 [ 307.523286] ? rcu_pm_notify+0xd0/0xd0 [ 307.527208] ? __might_sleep+0x95/0x190 [ 307.531200] binder_ioctl+0x24e/0x1920 [ 307.535105] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.540681] ? binder_ioctl_write_read.isra.0+0xb60/0xb60 [ 307.546226] ? find_held_lock+0x35/0x120 [ 307.550303] ? __fget+0x472/0x710 [ 307.553765] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.559311] ? lock_downgrade+0x910/0x910 [ 307.563478] ? kasan_check_read+0x11/0x20 [ 307.567641] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 307.572927] ? rcu_read_unlock_special+0x380/0x380 [ 307.577911] ? iterate_fd+0x4b0/0x4b0 [ 307.581723] ? binder_ioctl_write_read.isra.0+0xb60/0xb60 13:05:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x480, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x4000, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000140)={0x0, r2}) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) recvfrom$llc(r2, &(0x7f00000001c0)=""/246, 0xf6, 0x100, &(0x7f00000002c0)={0x1a, 0x301, 0x5, 0x7fff, 0x3, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x2711, @reserved}, 0x10) [ 307.587267] do_vfs_ioctl+0x107b/0x17d0 [ 307.591254] ? wait_for_completion+0x810/0x810 [ 307.595871] ? ioctl_preallocate+0x2f0/0x2f0 [ 307.600281] ? __fget_light+0x2db/0x420 [ 307.604272] ? fget_raw+0x20/0x20 [ 307.607745] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 307.613287] ? fput+0x128/0x1a0 [ 307.616588] ? do_syscall_64+0x8c/0x800 [ 307.620568] ? do_syscall_64+0x8c/0x800 [ 307.624549] ? lockdep_hardirqs_on+0x415/0x5d0 [ 307.629201] ? security_file_ioctl+0x93/0xc0 [ 307.633612] ksys_ioctl+0xab/0xd0 [ 307.637082] __x64_sys_ioctl+0x73/0xb0 [ 307.640978] do_syscall_64+0x1a3/0x800 [ 307.644899] ? syscall_return_slowpath+0x5f0/0x5f0 [ 307.649853] ? prepare_exit_to_usermode+0x232/0x3b0 [ 307.649875] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.649897] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.649909] RIP: 0033:0x457ec9 [ 307.649924] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 307.649932] RSP: 002b:00007f2edd34ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.649947] RAX: ffffffffffffffda RBX: 00007f2edd34ec90 RCX: 0000000000457ec9 [ 307.649956] RDX: 0000000000000000 RSI: 00000000c018620b RDI: 0000000000000003 [ 307.649964] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 13:05:25 executing program 3: socket$kcm(0x29, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) r2 = gettid() perf_event_open(&(0x7f0000000400)={0x4, 0x70, 0x3, 0x7, 0x100000000, 0x0, 0x0, 0x1, 0x40, 0xa, 0x2, 0x4, 0xfff, 0xfffffffffffffffb, 0xae80, 0xfffffffffffffff9, 0x101, 0xa5ea, 0x6, 0x1, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x101, 0x0, 0x8, 0x7ff, 0x0, 0x1bc, 0x6, 0x0, 0x80, 0x3, 0xa543, 0x8, 0x1f, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x6, 0x0, 0xffffffff}, r2, 0x3, r0, 0xb) mkdirat$cgroup(r1, 0x0, 0x1ff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ptrace$getregs(0xe, r2, 0x7, &(0x7f0000000280)=""/228) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x40, 0x9d1, 0x80000001, 0x0, 0x0, 0x9, 0x0, 0x0, 0x400, 0x8, 0x2, 0x0, 0x80, 0x6, 0x7, 0xfff, 0x9, 0x9, 0x80, 0x0, 0x8, 0x0, 0x6, 0x6, 0x10000, 0x0, 0x0, 0x20, 0x7b7cddd9, 0x3, 0x0, 0x1, 0x0, 0x100000001, 0x76, 0x5, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x1, 0x8, 0xfffffffffffffffa, 0x1000000000000000}, r0, 0x1, r3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x3000, 0x500001c) 13:05:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:05:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x7400, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:25 executing program 0 (fault-call:2 fault-nth:1): r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 307.649973] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2edd34f6d4 13:05:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20200, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000400)) write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x7, {0x2ec}}, 0x18) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080)=0x5, 0x4) fstat(r1, &(0x7f0000000200)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 307.649982] R13: 00000000004bf216 R14: 00000000004d0688 R15: 0000000000000004 [ 307.700352] binder: BINDER_SET_CONTEXT_MGR already set [ 307.700367] binder: 11176:11177 ioctl 40046207 200000c0 returned -16 [ 307.701317] binder: BINDER_SET_CONTEXT_MGR already set [ 307.701332] binder: 11176:11179 ioctl 40046207 200000c0 returned -16 [ 307.813078] audit: type=1804 audit(1546261525.601:50): pid=11183 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir439809469/syzkaller.aaqHzo/103/memory.events" dev="sda1" ino=16972 res=1 [ 307.862341] binder: 11151:11157 ioctl c018620b 0 returned -12 [ 307.899047] audit: type=1804 audit(1546261525.691:51): pid=11184 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir439809469/syzkaller.aaqHzo/103/memory.events" dev="sda1" ino=16972 res=1 [ 307.971291] binder: BINDER_SET_CONTEXT_MGR already set [ 307.971308] binder: 11186:11190 ioctl 40046207 0 returned -16 [ 307.982073] binder: BINDER_SET_CONTEXT_MGR already set [ 308.022808] binder: 11187:11189 ioctl 40046207 200000c0 returned -16 [ 308.087756] binder: 11191:11202 ioctl c018620b 0 returned -14 [ 308.097608] cgroup: fork rejected by pids controller in /syz4 [ 308.186713] audit: type=1804 audit(1546261525.971:52): pid=11200 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir439809469/syzkaller.aaqHzo/104/memory.events" dev="sda1" ino=16957 res=1 13:05:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x7, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:05:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x300, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x480, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x4000, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000140)={0x0, r2}) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) recvfrom$llc(r2, &(0x7f00000001c0)=""/246, 0xf6, 0x100, &(0x7f00000002c0)={0x1a, 0x301, 0x5, 0x7fff, 0x3, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x2711, @reserved}, 0x10) 13:05:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) time(&(0x7f0000000000)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xb2, 0x0, 0xfff}) 13:05:26 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x101000, 0x8) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000140)={0x4, 0x5, 0x9, 0x800, 0x4, 0x58}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x5451, 0x0) [ 308.821961] binder: BINDER_SET_CONTEXT_MGR already set [ 308.839507] binder: 11220:11226 ioctl c018620b 0 returned -14 [ 308.852100] binder: 11213:11223 ioctl 40046207 200000c0 returned -16 [ 308.852103] binder: BINDER_SET_CONTEXT_MGR already set [ 308.852131] binder: 11219:11221 ioctl 40046207 0 returned -16 13:05:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, r2, r3, 0x8, 0x6}}}, 0x90) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000300)={0x800, 0x100000001}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x48, 0x0, 0x0) socket$kcm(0x29, 0x408004, 0x0) 13:05:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x402, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000180)={0xfffffffffffffec3, 0x0, 0x7, {0x7f}}, 0x18) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:26 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x280, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000080)={{0x6, 0xa1, 0x14ac, 0x1, 0x101, 0xfffffffffffffffd}, 0x6, 0xfffffffffffffffa, 0x4}) 13:05:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x6000000000000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x5421, 0x0) [ 309.114462] cgroup: fork rejected by pids controller in /syz5 [ 309.248041] IPVS: ftp: loaded support on port[0] = 21 [ 309.357953] chnl_net:caif_netlink_parms(): no params data found [ 309.388064] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.394521] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.401978] device bridge_slave_0 entered promiscuous mode [ 309.409043] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.415433] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.422880] device bridge_slave_1 entered promiscuous mode [ 309.439136] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 309.447984] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 309.466002] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 309.473450] team0: Port device team_slave_0 added [ 309.479028] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 309.486206] team0: Port device team_slave_1 added [ 309.491612] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 309.499112] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 309.551237] device hsr_slave_0 entered promiscuous mode [ 309.588833] device hsr_slave_1 entered promiscuous mode [ 309.643141] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 309.650356] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 309.666045] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 309.697809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.705931] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 309.714445] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 309.721541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 309.729029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.737841] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 309.744052] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.753514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 309.760691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.770139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 309.777868] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.784271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.792100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 309.801312] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 309.808729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 309.816620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.824623] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.831131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.841019] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 309.848947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 309.858101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 309.865240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 309.877172] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 309.885654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 309.893704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 309.904044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 309.911240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 309.918242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 309.926067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 309.936112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 309.943238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 309.950953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.962447] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 309.969241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 309.976808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 309.986991] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 309.993824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 310.007069] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 310.017955] 8021q: adding VLAN 0 to HW filter on device batadv0 13:05:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x6c, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, r2, r3, 0x8, 0x6}}}, 0x90) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000300)={0x800, 0x100000001}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x48, 0x0, 0x0) socket$kcm(0x29, 0x408004, 0x0) 13:05:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, 0x0) 13:05:27 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x800) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000080)={0x3, 0x102, 0x6, {0xffff, 0x15, 0x1, 0x48c4}}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) 13:05:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3f}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x7f}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x11}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) 13:05:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x1000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 310.081030] binder: 11274:11275 ioctl c0306201 0 returned -14 [ 310.087796] binder: 11274:11275 ioctl c0306201 200000c0 returned -14 [ 310.094573] binder: 11276:11276 ioctl c0306201 0 returned -14 [ 310.095667] binder: 11276:11275 ioctl c0306201 200000c0 returned -14 13:05:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, r2, r3, 0x8, 0x6}}}, 0x90) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000300)={0x800, 0x100000001}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x48, 0x0, 0x0) socket$kcm(0x29, 0x408004, 0x0) [ 310.145381] binder: BINDER_SET_CONTEXT_MGR already set [ 310.164540] cgroup: fork rejected by pids controller in /syz0 13:05:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 310.223729] binder: BINDER_SET_CONTEXT_MGR already set [ 310.229340] binder: 11279:11290 ioctl 40046207 200000c0 returned -16 [ 310.246721] binder: 11284:11287 ioctl 40046207 0 returned -16 [ 310.255394] binder: 11300:11303 ioctl c0306201 0 returned -14 13:05:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 13:05:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x2, 0x1, 0x1f, 0x0, 0x7}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r2, r1}}, 0x18) syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x40000) 13:05:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, r2, r3, 0x8, 0x6}}}, 0x90) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000300)={0x800, 0x100000001}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x48, 0x0, 0x0) 13:05:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x74, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 310.293540] binder: 11300:11307 ioctl c0306201 200000c0 returned -14 13:05:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:05:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x700, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x5450, 0x0) [ 310.413115] binder: 11315:11316 ioctl c0306201 0 returned -14 13:05:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000140)={0x89, 0x5, 0x5, 0x80000000, [], [], [], 0x5, 0x1, 0x100000000, 0x2, "756a059b1df949b973d1b00cd579e6a7"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 310.478381] binder: 11325:11329 ioctl 5462 20000000 returned -22 [ 310.482769] binder: 11324:11326 ioctl c0306201 0 returned -14 [ 310.512302] binder: 11324:11333 ioctl c0306201 200000c0 returned -14 13:05:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, 0x0) 13:05:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, r2, r3, 0x8, 0x6}}}, 0x90) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000300)={0x800, 0x100000001}) 13:05:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xca4, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 310.525769] binder: 11325:11329 ioctl 5462 20000000 returned -22 [ 310.533691] binder: BINDER_SET_CONTEXT_MGR already set 13:05:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x7, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 310.582944] binder: 11332:11344 ioctl 40046207 200000c0 returned -16 13:05:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x300, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20114}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c0100004a2d21be76b371225dbf2d577270baf40a37a3145fd4e41504ef7e454ca2203bf9c86cb81f17086fad1e412bb3d07b9d842bfcb136ae0a2121b7fa27e50e408d76c5bb529d9097b506770a3d84562b0aa1eb0c773400e54cf7b884c0543063639dfbb0e3ea58ef93e1a6668fcc45803c2896d7d26278c73d8e2864a9033b536f4d7ae0c1942ce1b284a49150fa859d1296f1980cb97183026ff9e1e94f7526b53e9d3c118db030e116ec40e865729048edff15", @ANYRES16=0x0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x44}, 0x4000040) 13:05:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 13:05:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, r2, r3, 0x8, 0x6}}}, 0x90) [ 310.747212] binder: 11361:11367 ioctl c0306201 0 returned -14 13:05:28 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000000)="96", 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, r0) syz_extract_tcp_res(&(0x7f0000000080), 0x0, 0x10000000) getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@local}}, {{}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000480), &(0x7f00000004c0)=0x4) recvfrom(0xffffffffffffffff, &(0x7f00000022c0)=""/4096, 0xffffffffffffffd9, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r2 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r2, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r3, r2, &(0x7f0000000240), 0x40800fff) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x7fffffff, 0x4, 0x0, 0xacc, 0x0, 0x6df, 0x48501, 0xa, 0x0, 0x8, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29d, 0x0, 0xf065, 0x4, @perf_bp={0x0}, 0x10004, 0x4, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') write$P9_ROPEN(r2, &(0x7f0000000380)={0x18, 0x71, 0x2, {{0x2, 0x2, 0x5}, 0xb0f1}}, 0x18) open(&(0x7f0000000440)='./file0\x00', 0x1000000000000000, 0x21) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="e00000027f00000000000004000000000000000000000000c6e29c294cf0a59182146512e251276c15103a1889262380b3b6eb4abc12d01db9cf"], 0x18) r7 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r7, 0xc0884123, &(0x7f00000000c0)='^') 13:05:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x7a00, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 310.793198] binder: 11361:11367 ioctl c0306201 200000c0 returned -14 [ 310.838120] binder: 11361:11367 ioctl c0306201 0 returned -14 13:05:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, r2, 0x0, 0x8, 0x6}}}, 0x90) 13:05:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:05:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) 13:05:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x5452, 0x0) 13:05:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2000000000000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 311.019357] binder: BINDER_SET_CONTEXT_MGR already set [ 311.024713] binder: 11393:11401 ioctl 40046207 200000c0 returned -16 13:05:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x10000001fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:05:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) 13:05:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x10000, 0x41) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x101, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 311.067968] binder: BINDER_SET_CONTEXT_MGR already set [ 311.079017] binder: 11411:11417 ioctl c0306201 0 returned -14 [ 311.090732] binder: 11405:11415 ioctl 40046207 0 returned -16 [ 311.099921] binder: 11411:11417 ioctl c0306201 200000c0 returned -14 13:05:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x6c00000000000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 311.142792] binder: 11420:11420 ioctl c0306201 0 returned -14 [ 311.143836] binder: 11420:11424 ioctl c0306201 200000c0 returned -14 13:05:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x1000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:05:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0186241, 0x0) [ 311.259775] binder: 11431:11438 ioctl c0046209 0 returned -22 [ 311.311785] binder: BINDER_SET_CONTEXT_MGR already set 13:05:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) socket$isdn_base(0x22, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x0, 0x70bd2b, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000240)={0xfffffffffffffffc, 0x747a, 0xc4, 'queue1\x00', 0x8}) [ 311.341237] binder: 11443:11450 ioctl c0306201 0 returned -14 [ 311.351742] binder: 11440:11445 ioctl 40046207 200000c0 returned -16 [ 311.373309] binder: 11443:11450 ioctl c0306201 200000c0 returned -14 13:05:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x68000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3f00000000000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 311.387763] binder: 11452:11453 ioctl c0186241 0 returned -22 13:05:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 13:05:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x6001, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:05:29 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@initdev, @dev, 0x0}, &(0x7f00000001c0)=0xc) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000200)={r2, 0x5, 0x1000, 0x80000000, 0x8, 0x89, 0x5}) 13:05:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x6, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 311.605169] binder: 11477:11481 ioctl c0306201 0 returned -14 [ 311.627564] binder: BINDER_SET_CONTEXT_MGR already set 13:05:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x7a00, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 311.651389] binder: 11477:11489 ioctl c0306201 200000c0 returned -14 [ 311.667566] binder: 11477:11481 ioctl c0306201 0 returned -14 [ 311.675178] binder: 11483:11484 ioctl 40046207 0 returned -16 13:05:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$pptp(0x18, 0x1, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:29 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x0) write$capi20(r1, &(0x7f0000000080)={0x10, 0x1000, 0xff, 0xf62528de912d6c28, 0x53c, 0x8}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:05:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x200000000000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 311.845442] binder: 11501:11502 ioctl c0306201 0 returned -14 [ 311.904230] binder: 11501:11502 ioctl c0306201 200000c0 returned -14 13:05:29 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 311.952359] binder: 11501:11511 ioctl c0306201 200000c0 returned -14 13:05:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x6, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 312.191853] binder: 11521:11522 ioctl c0306201 0 returned -14 [ 312.238531] binder: 11521:11522 ioctl c0306201 200000c0 returned -14 [ 312.246273] binder: 11521:11522 ioctl c0306201 0 returned -14 [ 312.267007] binder: 11521:11524 ioctl c0306201 200000c0 returned -14 13:05:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x10, 0x0) 13:05:32 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x300000000000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:32 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x8001, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000004c0)=""/72, 0x48, 0x3, 0x3, 0x7f, 0x30, 0x8001}, 0x120) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x4, 0x1}}, 0x30) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0xf0, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000040), &(0x7f0000000100)=[0x78, 0x0, 0x38]}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x20, &(0x7f0000000140)=[@fd={0x66642a85, 0x0, r0}], &(0x7f0000000180)=[0x78, 0x18, 0x40, 0x28]}}, @reply={0x40406301, {0x1, 0x0, 0x2, 0x0, 0x8adb836a0b566aa8, 0x0, 0x0, 0x20, 0x28, &(0x7f00000001c0)=[@fda={0x66646185, 0x2, 0x1, 0x34}], &(0x7f0000000200)=[0x18, 0x18, 0x68, 0x38, 0x20]}}, @release={0x40046306, 0x1}, @decrefs={0x40046307, 0x2}, @acquire_done={0x40106309, r2}], 0xf3, 0x0, &(0x7f0000000380)="77fbb8918ef19665d1fc0d5b8797d71f93e996772b542d7018b085ae158d98c4989d18991486894a88dc846f98d8f8d8efa9f800ef532cd19035ced3fb2015b912bc3c20137b677cc36299340ebed0419f155b89f5e1e74ecd8d9aef8b41fdb788a802cb35bec1df7b4374fd23ff08a9f6680b7f3251a6a11ce993409225b33c4a17522cc36052cfa347decc5524537e3221065d52bc8514ed89eecb7fa08d10cbed1beb9c879661747ebed66e9c332e476288e0aaeb5246c267d6d5bf2bfa748d5702f8ca5312810f8b944b33fea149319f84df5102da29b956308c6078ac1d30d48d390a58bdad970b502d44e1fb446e5dd0"}) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) 13:05:32 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x6800000000000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 314.677259] binder: 11532:11534 ioctl c0306201 0 returned -14 [ 314.713085] binder: 11532:11534 ioctl c0306201 200000c0 returned -14 13:05:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x74000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:32 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x6c000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 314.877703] binder: 11544:11545 ioctl c0306201 0 returned -14 [ 314.903428] binder: 11544:11545 ioctl c0306201 200000c0 returned -14 13:05:32 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:32 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 315.081212] binder: 11557:11558 ioctl c0306201 0 returned -14 [ 315.094568] binder: 11557:11558 ioctl c0306201 200000c0 returned -14 [ 315.117860] binder: 11559:11559 ioctl c0306201 0 returned -14 [ 315.128142] binder: 11559:11562 ioctl c0306201 200000c0 returned -14 [ 315.406930] IPVS: ftp: loaded support on port[0] = 21 [ 315.424914] IPVS: ftp: loaded support on port[0] = 21 [ 315.431310] IPVS: ftp: loaded support on port[0] = 21 [ 316.146960] chnl_net:caif_netlink_parms(): no params data found [ 316.387223] chnl_net:caif_netlink_parms(): no params data found [ 316.430582] chnl_net:caif_netlink_parms(): no params data found [ 316.609457] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.615831] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.623631] device bridge_slave_0 entered promiscuous mode [ 316.631265] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.637611] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.645480] device bridge_slave_1 entered promiscuous mode [ 316.679678] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.686029] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.693828] device bridge_slave_0 entered promiscuous mode [ 316.707479] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.713942] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.721092] device bridge_slave_1 entered promiscuous mode [ 316.890823] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.897274] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.904487] device bridge_slave_0 entered promiscuous mode [ 316.917826] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.925368] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.932506] device bridge_slave_1 entered promiscuous mode [ 316.941338] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 317.110962] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 317.128334] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 317.148092] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 317.165485] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 317.173129] team0: Port device team_slave_0 added [ 317.180124] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 317.194487] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 317.203584] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 317.211638] team0: Port device team_slave_1 added [ 317.221218] device bridge_slave_1 left promiscuous mode [ 317.227097] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.283431] device bridge_slave_0 left promiscuous mode [ 317.289116] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.361459] device hsr_slave_1 left promiscuous mode [ 321.404315] device hsr_slave_0 left promiscuous mode [ 321.465077] team0 (unregistering): Port device team_slave_1 removed [ 321.476331] team0 (unregistering): Port device team_slave_0 removed [ 321.487982] ÿ (unregistering): Releasing backup interface bond_slave_1 [ 321.535021] ÿ (unregistering): Releasing backup interface bond_slave_0 [ 321.636765] ÿ (unregistering): Released all slaves [ 321.763250] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 321.774307] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 321.781841] team0: Port device team_slave_0 added [ 321.793411] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 321.801386] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 321.809606] team0: Port device team_slave_1 added [ 321.814945] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 321.822457] team0: Port device team_slave_0 added [ 321.828012] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 321.835800] team0: Port device team_slave_1 added [ 321.841544] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 321.849064] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 321.866618] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 321.923166] device hsr_slave_0 entered promiscuous mode [ 321.978833] device hsr_slave_1 entered promiscuous mode [ 322.055247] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 322.062448] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 322.069886] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 322.140934] device hsr_slave_0 entered promiscuous mode [ 322.178902] device hsr_slave_1 entered promiscuous mode [ 322.238289] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 322.281553] device hsr_slave_0 entered promiscuous mode [ 322.308881] device hsr_slave_1 entered promiscuous mode [ 322.350192] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 322.356762] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 322.364308] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 322.378200] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 322.412031] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 322.420803] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 322.525278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.556457] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 322.582140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.598535] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 322.607667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.617276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 322.633325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.647392] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 322.657330] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 322.666260] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 322.679878] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.686225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 322.693816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.702471] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 322.711561] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 322.717664] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.727327] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 322.739146] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 322.748038] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 322.755060] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.762393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 322.770636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.778338] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.784754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.792055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 322.799998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.809432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 322.820426] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 322.830259] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 322.841045] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 322.851180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 322.858375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 322.867164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.875337] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.881736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.891362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 322.899266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 322.906885] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.913293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.920555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 322.929381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 322.937056] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.943456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.950727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 322.959293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.966982] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.973399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.994173] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 323.013321] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 323.029637] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 323.039951] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 323.046938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 323.054859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 323.062662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 323.079999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 323.098752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 323.106672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 323.124442] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.130874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.147698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 323.169062] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 323.177450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 323.196271] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 323.204253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 323.214097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 323.222528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 323.241797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 323.252040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 323.262080] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 323.269897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 323.278096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.286398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 323.297807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.315354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 323.326507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.346032] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 323.366741] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 323.387639] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 323.397444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 323.409478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 323.416667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 323.433969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 323.448294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 323.466987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 323.476084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 323.493291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 323.505448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 323.521096] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 323.531175] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 323.542401] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 323.549744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 323.557451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.565896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 323.583215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.596278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 323.613939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.628005] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 323.637724] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 323.649402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 323.659141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.666654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 323.674988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.684827] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 323.692730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 323.709015] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 323.716303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 323.724291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.733254] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 323.739705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 323.759186] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 323.765224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 323.786655] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 323.824648] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 323.837576] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 323.852024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.873366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.901545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.010202] binder: BINDER_SET_CONTEXT_MGR already set [ 324.024873] binder: 11583:11589 ioctl 40046207 200000c0 returned -16 13:05:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x5460, 0x0) 13:05:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:41 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x28, &(0x7f0000000040)}, 0x10) io_setup(0x0, &(0x7f0000000140)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x187) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000001c0)) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000080)={0x3, 0x1, [0x4, 0xd77, 0x4, 0x3, 0x2, 0x2, 0x7, 0x400]}) set_mempolicy(0x4003, &(0x7f0000000140)=0x6, 0x9) r5 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r5, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r6, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0xff010000, 0x8, 0x1, 0x0, r5, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) request_key(0x0, &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) eventfd(0x0) 13:05:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x6c00, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000080)=""/4096) [ 324.103598] binder: BINDER_SET_CONTEXT_MGR already set [ 324.114809] binder: 11594:11600 ioctl 10 0 returned -22 [ 324.119260] binder: 11593:11597 ioctl 40046207 0 returned -16 [ 324.138775] binder: 11601:11602 ioctl 10 0 returned -22 [ 324.214646] binder: BINDER_SET_CONTEXT_MGR already set [ 324.230454] binder: 11605:11617 ioctl c0306201 0 returned -14 [ 324.237338] binder: 11605:11617 ioctl c0306201 200000c0 returned -14 13:05:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 324.265585] binder: 11618:11618 ioctl c0306201 0 returned -14 [ 324.271665] binder: 11604:11615 ioctl 40046207 200000c0 returned -16 [ 324.292689] binder: BINDER_SET_CONTEXT_MGR already set [ 324.299763] binder: 11618:11619 ioctl c0306201 200000c0 returned -14 13:05:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) 13:05:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x500, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 324.329552] binder: 11613:11624 ioctl 40046207 0 returned -16 13:05:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x60, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x10000040000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 324.521734] binder: 11636:11642 ioctl c0306201 200000c0 returned -14 13:05:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x7400000000000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, 0x0) 13:05:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 324.561935] binder: 11636:11638 ioctl c0306201 0 returned -14 [ 324.596541] binder: BINDER_SET_CONTEXT_MGR already set [ 324.684914] binder: 11651:11660 ioctl 40046207 200000c0 returned -16 [ 324.897476] binder: 11672:11679 ioctl c0306201 0 returned -14 [ 324.917685] binder: 11672:11679 ioctl c0306201 200000c0 returned -14 [ 324.965294] binder: 11672:11679 ioctl c0306201 0 returned -14 [ 324.981138] binder: 11672:11682 ioctl c0306201 200000c0 returned -14 13:05:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") open_by_handle_at(r0, &(0x7f0000000140)={0x104, 0x7, "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"}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x7400000000000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:05:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x74000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x8000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, r1}) r2 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x7fffffff, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080)={r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000280)=0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x100, 0x8, 0x401, 0x5, 0x0, 0x1, 0x80, 0x5, 0x6, 0x9, 0x3f, 0x1, 0x900000, 0x0, 0x100, 0x3f, 0x1, 0x7fffffff, 0x1, 0xf871, 0xdb, 0x1, 0x0, 0x2, 0x8000, 0x6, 0x8, 0x9, 0x60c2, 0x211, 0xffffffffffffffc1, 0x0, 0x80000000, 0xb418, 0xed0, 0x2, 0x0, 0x7ff, 0x4, @perf_config_ext={0x80000000, 0x1}, 0x0, 0x7, 0x101, 0x0, 0x401, 0xf253, 0x4}, r5, 0xe, r2, 0x3) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r4}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x12000, 0x0) [ 325.302507] binder: BINDER_SET_CONTEXT_MGR already set [ 325.307839] binder: 11691:11693 ioctl 40046207 0 returned -16 [ 325.335982] binder: BINDER_SET_CONTEXT_MGR already set [ 325.345519] binder: 11692:11702 ioctl c0306201 0 returned -14 13:05:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, 0x0) [ 325.364433] binder: 11696:11699 ioctl 40046207 0 returned -16 [ 325.365079] binder: BINDER_SET_CONTEXT_MGR already set [ 325.373710] binder: 11692:11702 ioctl c0306201 200000c0 returned -14 13:05:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3f000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) r2 = geteuid() sendmsg$nl_generic(r1, &(0x7f0000001480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x888426}, 0xc, &(0x7f0000001440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6813000030000d092bbd7000fbdbdf250000000008001000000000800c004d000101000000000000481207009284c0c420a873dfa1f1c58e6e8dd50793d0e917eca2b154b299656299db9baf732d1e68d7563087b1ce539b1fb94d332b69d13f07ac04bab410170939f637fa47e598f0b8eb8401e017f5648973c878e0968aa85e6472a45724ba1dc28d97457ae9e1dd943d803dd84e32497c9ff6015da800d608ade70f3afd044d84f86e78b1fa8898853d9373ee02730f6cf5d9f3d3763b588e3293489928b2bbf50d3eb1a5ff0aeb8cfb135912bc610f1f646159a63db02d120835eef9b1c2a1961caa442406f3bf7696eda70b39ea0807e47539550637f5a1fd6fe7fdde18d5ab3f7f1f6aadd9edab4bef114800a9146a6ce07981bd13d611c0b927f495902259eb45fcb0a913e523f1d53d6dcfad5acf4d248dd98449454163c1665108c11948a5292aceb859e97a98674fd03892ad70141fb7af59c52563b97680cd27842c475c6ea1797c61db1f8780a68b10301174a3a322ab605419e722de3702a5e54db7c5ef6ae92dad864f21278aefff6fc1b523a1db707476dc56739131cb4dba80cc48fed7619427b1299bfed91c2cf9202903f4b88cca5d3a7b4394ff247cb6e7f9d5218c8f94e31d53fd3cf6f000717adc9c268b224bb1ab43e460c171982e80a103ff87cc2abcb51a7d5db608bb5c61e2e44880aefe8117314f48686a928e83d2a6d54be8d778de586337ad2454b120b5752e96089e6f801dd9f324ef4dd2d4c3cf4d76935f97f5d2477f9ef63f30c6b79b0ba78c28406ce56079b259ff4b220ae7b50552690657a98c8fadc748c43c3ad40ca1bd03e21ad58168d0d98efbca8fdc09302e6a310c6718322c5bfe01e8f56aea7caee59accedfb45b4e0a744107c4f1e35a66c2574c15b027f28c73353db8ccc823ad24599290076da235562089d50d315088edd4d3287fb43ff1ee8d93a197b294033d32e5e2d55b2ea3335331760fd3b9d24ba1525ff4574171ae03f5bc14d0222193d4281c6a2941aaa1e330874e1a075032846e8c3223910a3e2ab1f98045c2fcc01c562028d97b30d09e15a515dfa7b37960754c5c3366bdea2fa79ac9aa9c223300610ecabd1d6d710a62ef426d496138afc7c303205e0515cf1392529f4b3438da9fd08357850b9e1c6e361e02fae80e7b603d30885ec4308530680200b0b8a5fa85419738c8bdf1d707cb9f3764f96f08e66c493b0d182a3653670568aed414143cc203f27c1eb215bd33b669a25c2cabebdc339b2848e01145ea1dcf7b9f0b267d783c15388eae17bf904b69b3a93bbbf3191504713b602d21dbc08826fceb44007a807c96a844a3035a8bbf4a6a20ef3b6dfd4e0c31b45aad7ba83a99cf13ea2370437471afc6798054a2b362fd0a08c64a8509194896cd457aa4f5215ebdf7fba7af5ed86ca24aef31d6f66f1577e2a6060dba9c4ad2d32e44e09e9c5d871124ae9c4e8b321c69bd09b39293ea54084034de29cd14751ed42547f491f47bfcee1ddf2a49e0ed1fef438acf51f70f8a7275abe3e34ac1bc4ab2ce28f2e2f9719064b3c73177bc7dbf9dccb08e28368b70b8bc798e13c00d2e6ab50fc15bf170e6759e882fea357673584e6e9ea8536138a4cbf3667f1b1d8f7dfe2f3c3652fb01e377692b2cfb00cfb14a62f61c0475bf36630899b4c261b5005a6739e1dae90419a6129d60e8092af26ed36eda0da1c583ad562c76c6d3f9a1f246ad9406efceefb94b587082cc1f9f5ef2a15c26600fd39845f0f4e4f4324d1cc6609756ac98dda8274e6f69209242ac057e1f2391206b5bef50b6fa45ec86f47af99c585dc58b613c5ddf9e04492e28aa70e7fee9712905edb029461215d1e9d5b437ce8c24aa6e1fc47f07b5a6124f5f44d488da8910316024780baf196f995dcc120355aa9b5f2724b3d8e751608265dc6c536ecdfca82a751b976418794868d2c138a79a3b75c9d6ff2e32ec60d7fe610a0bb933f9a5fc8d35a95918c5e799a2c772e341bc0c50fef48b89539d80f9074aa1c328326bc62d6ba23b78c1c20b1bac0689b7567f3bc69b9bca3d4447bf50a8eab1455d44b32ac7974b70205b0da772ee3a73c9861964de8c7407b01ba4a2da4fe2cc027ae1843891c8a62d5eca91ac8293e84bf8d0c49f0c94848db6c07fac5349b5add22962ae8c9afc62cad2f26963341bb0e7e287956a0d9078364ee51a8b83bbc2d96d7e022a3b8fe158b27994d21259b49d879d86a2c666b8955cd2ce3084d6a9b377686b3c4d204b0760be02cc8472286f19dcd6c2eae0f055f8733404b96bb855eb61f797072c420f2eb3537d881d6a3b235c8185546dcc0bdc4336d978ec686532ee5c1e0268346569f2dcf6e9d71313efdd7a55889c93954980a241f568fdafff9bc0b0d63c11c673dc00cc4237ec09ad3dd9d951c9458250335237874273c00d5f96a8ca24e254091b4229d136e3e5749d604e1aa3ce9ee9a5fae426ef4fccec887ffc1bf205df57daf5c541d6336b960e8f495189f09054d6a61231da5b5482858700c1a4eee4f0b25a8567636bb06f8a4ab7b78d5b3639ad001b28c7b90714695e6963bf92bee3e2fc0a5a63750e21edf0ce49dadee40a1e9ff4d1f5f1fa9e8c727ad503838ef5e4296ac9528ed0f1d6c18bde9fcc40857fe193fcefde07bfc0d71cbf71e56b5f94cb91da34ccf4a3cb000bd03554ec7016b24cfea11357fb4c92a39b265791c01401c2fe134a8829a1f601b414a793aa3e7bb77ffa18733857e9296ef825f1616b9407fc90b824c4a374a80236ce8792d03f7f9a3ed0167eb8c54de1cb11ae55116bf9c1c2b84d96fc8dc9853afcd0b503170b5dcadcd062aa46b956d08b5831a128ee35e2fb90cbe113f95fb972fee6928cc8fd8441f98901b0bab2134bfbbc00dd2fd99849971b2e21513e15ecae3599ad1bdab4a82eeb37219637e7d868edbc9b4a9ef24dc26bf2f5d27113db4751be22eec65cee56925a7fc9747739a985a69133dd2deec2cf3d99170f52ba440e924773207734a83390635c88316a9f42fed325bfbdd7c09f553ae4ad27b824507a205f5d9d1e3a62a5f54b8bc19e076604e8d496b34eaae571ef590a53cba4648e549699a7c6b1e084ee3321ff2c0851ad0af039a86922501f2ad40a5f4e2e64a5605d73b4e6a396bc3a7bd44435fd3af65db78cf47a0373004e29bbbdd6edf19bead4d63a27fb3be31a8031c99066d39209f0e270deccbded0fdf45fa75d4e8e3f31e573382eb3c8c91ea35617fe6dae76ecf00e98def2762db0283f7959c2f0e3864625d5846f6a1c6eb861069e5b987b37e42be9a1ccc4b753c39f676c21ee890c239debf2a5aebff01c476f32312577374b4f9b884652193d14365078e702bb8d30e38727158463e5abbfe37aaf65927aed68c27a4328e581ae9e377944c431a0bed68b4ec29edbe9e944fd69c174c747ac2c2ab301863743f166ab59825f609caca98bddd2757fcb46c8dd2c1988df92df91888c898b210bcd2fe4fb188334107e007b028f3272bda45ffcaadb330373a9240a98a6e96c81aa12930b603fd335c68a04c654015a3d940034fa702035ee8f820c241ad31f4cea4d96d3a955f5979fafaf4172497066ec77bebd7308cfbffbf0f58578eb134941103e912c70a56f90de0f00ca7fca0ccdd95a5fabd8b07fa272a9aff43747b5c1682f12ef8c08311392f8f0cc70304cc1cc54eb86347d6d6a5257f7b0b6ee54ebb3775d9c5af206108f6e3418615ec55f49f50b38f5d4b926b57cf9d9f79a77c70989c7d449364f2537ebb12db54148ff2c24c6540e79da8fe2b3b20df1fb03fa26f87384a4a2b3ad7a1293d9a982ce8b640043b3ec739e6e8a95b7d1ab06f0c1726d1e163d00119953dc0cc68fc1ea8fe3d8d82b06b58f0b5c7c84f7e2e1bd901fe141b17e38f94c7a07b0c3063e243dc3f3096cafcc1da0fb74b31e73f7ebe2d1bb7b4355699f880ced2a2d68b7516cdd0e1bed7a05f8322642d44264f6b10ce15aa507c90da6fa495a2ef03c93d18d856f1240914c1e3ed77e4630ce6165c8ab4839786a86fee344f15d6e25e04bd15a6e9d4b0f2c1758217ec4cf9c6e24ab6929a37ac66562e0a3800ac079d492aa03b2e40c1247e214a96e61ab46118705d9a2b8fc1c7c1bdefc3aeb64f56652d9cda8e46050811b7a0fd9b776e40905e7679846b4de1a9c787bd55861cce2184b69592a99fbdcee03480258e6f2e69705dcdde8456f79a481f6b1ab3b3490b2afa5ed1d83a8b8ed7a5ccd1f34ab106f88c75c1d9d5ca6736596aa3f23d3cbca018d88a2b679c6e425772d0936fb4a308ae81d7569cc4b78c62bd946289d3f3db4c0fdd40422e74931109876b54f74848050d9279f228a84f9ad28d207b5229a10088b36d90b3cb6ca04e201185cbd3ee42191cf5114c613a8439dd3488a0cf666fca5b95aae581680ef690b308d72ca99672e18f241a7ccc60863f00d40035a9c6a269cab49856152d628f9f5d4c316a2e894de55b281d7c024a938e07653df615f384e91ad9c1e8d88ab2f23acaa28ba09e09771688194ae73ffa528a630cad13c521f7a314c85eecf73850f4f20cecbc2c7f5848b02ec7e727d1bb944b845e0fbe716de1a28a05afeef8aa3d5ac57bb396cc167baf7de24650dfad576f4109cad8db12b163736561949b7311fd6c6f1fa010c47582d735f370a06b3b8c9d5948b2cd062dc6aba025ce2aaf12f8e00b022de13120433809c0e1c5f06773904675929042d54b195e0763220b4e872b2baf24a3cb412048930d2b4a5085681fb01d72afd7e1d32670e1df6bb463f76eec72178e80ec44ee1226e1a9774e7dfdea8a7831c93f739d9f209dca65504f10f3bf60f2e66b9ef7faaad04193588a5519c11fbd570a2d0c0ae3f6bda0642db1b8aaa99b1b818ac7f637fe5195403f77c8229a62ca79d7fdab62c37cf4296cbdc33fae0cde6e0932c286eda34ffe3e1cad17ea7d307cc6e1796ecd32861cbccbd1e82b3e4325a35069d94e9538009288525631dcc12e8d572edfd1d84dede7bdc7735f3428f46b3afb12b72aa83133722304b249a08234630bc6290f1f99a4fceb17273713fdb80ecb0b4081edf82e13da59d3f62bbcbf1aedc692d510a17e7c2cbc476c661d4c8162c8ab556f380b37340439500b67af72a005edbeba052860ce41f4d93caca96f992e8631f59857c2aafc5f67d0bf60d7ff2bbe4d0e6e96c602f81cf223e1d7b33861adbe45b779f0218c72ce93aa370b9848caf1d76f3c689722de14ce937b579044c12b365133842183063f360112e2c6fcd8a16a7c7ce90e4b141986d4e6946e3191d450f45f067465a978b166b41e6035168d008c3fa83b3655cfd8589a32f3c4024b49eb4aa2d1d57d14491ce78c38e48c30d002b31e28e05fb8e35947d83e5eda3452a0fa84d19ca546d73dccba17f25b181f9a4e103e4f740a9260b10c4a2397d4936b2df30c99988518c677cdbeaa03fabf48bda9d76125fa61cb3a91613ea6402c8ff27836f5976a2dd980b1f307542e675ca47a56d414fdc58e3ee56620b658fa46a281b9710efaf6f358499557592554fe7862c4c8dd909813e77aa8d0f1aea4720edd4b95886fd77efb35ca9b93a90cdcd2959f56204e1fb3e2da08c3832b773f7efc8619c2b606a1c9ec496fa0758f2db010063901872b7aef3519a8964fffe86a5763867cdd590a7275b4fc0bf724900552c5e5689fe4506ebeb93086a9e58ae149695af3acd9f5549526ea71a2bf77acf35d7b7098a5d3d4edc4273621810f7a7b40c3532a22cb56f33b01dbce5dbf5ebdc48f9973a4e0790003700ca48759422a6b07662df14026ffeb37d7ebbabc16d196fd4f3bfb41c11ff0094df718ff1259614306e42e144db9fb8639b06e89047bc4aa21fc6faadec77f092dc58009f13aab9f2fd5e29f339da8e0b822e8bf021354d5e9371d830252cca8cef95d473ed5414bb6125012ee3b998301fe7d14006dfe65e0f2e108140699c8b62ba5cf2692dff6723d30afaae2ff52a001531acfa1a61de6f06b0c6590e2468c52ee50d7f594be86ae6d5f8078a0cf20cdaae762ba41aeae8036df38b3fc3a1b5c06f784325e0911f3886c376fb240455cf4d9e805b803e30bce8653aab699b8b6abda9cd8a09dfde878c664ecd9ff096fc524ccd62cb2acc5d3137e084aea68fed0c45782961735e5f2318de894fd119c35fe7d52b0094bf2f8d5684c210892485fc6233e1f3eae6ffa005fb2314050c750b83b77698518991f4690dd10fe2b332c6e2fc23196adbb1d16e313b02631064b6e4373b331109240374175d0e9608cb0cd58c0987fdb2cd9c3e29330b487d8a00292429b152130fd2fc7fdc5f3654284585f95826aeabec67bb9d4a49cb3964f7c73d33169ce5d75e9f2aaf9a6ba63e506948649c533e9f638f63e070bcf42769a16cd63e9f2d7e0401fba5688368b1bb71e71342f9cff76d3b02ce564ca8aafa99d881e89923eed66640a3196548a6d94e5b403020787eac63188fdd05460dcd888f8554c0f333235e4618f24c120b40accc7ff9bc87c0decab4927a8114b016821088f4f4d253ac29a51b6b32060201227b64f40644600e1f4ed700c7700c00190001000000000000000000009c518e3d66d9ed01481f16eba8421f3bad87f4d98f335e397ab19686b7152c461650358108d780f2d209d004223be1c94cbea30fb2ce301d9bc2fd6e139e31adb800700008006a000200000008000a00", @ANYRES32=r2, @ANYBLOB="a86706ea904be4e7c93ab0289a6e9166e02e34370350348477554d6bcf4f90d7d04d65d64102854ee277dfccf3287ddf8432b1c92d6bfc55b4cc7d0593dd55d04853e3006756d4c5606207b7bd62f1f77a86a215284674ea84a059b5f2765a4cc87e3f156a21c76977b6262b95cfeded48c783807f7401f2c43991000000feffffff01b07e746809b262824052384c5940f0c9aaaab895a995face2ad0731e0159a3d78e"], 0x1368}, 0x1, 0x0, 0x0, 0x40000}, 0x48001) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e24, @remote}}, [0x5, 0x8, 0xfffffffffffffffb, 0x9451, 0x800, 0xfffffffffffffffa, 0x2, 0x0, 0x7, 0x2, 0x200, 0xd4, 0x3, 0x5, 0x9]}, &(0x7f00000015c0)=0x100) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000001600)={r3, 0x7, 0x2, 0x10001, 0x4, 0x14f}, 0x14) [ 325.413460] binder: 11690:11697 ioctl 40046207 200000c0 returned -16 [ 325.432405] binder: BINDER_SET_CONTEXT_MGR already set 13:05:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, 0x0) 13:05:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x4c000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 325.463609] binder: 11701:11703 ioctl 40046207 200000c0 returned -16 [ 325.473336] binder: BINDER_SET_CONTEXT_MGR already set [ 325.529993] binder: 11700:11700 ioctl 40046207 0 returned -16 [ 325.593684] binder: BINDER_SET_CONTEXT_MGR already set [ 325.599554] binder: 11726:11731 ioctl c0306201 0 returned -14 [ 325.620231] binder: 11727:11729 ioctl 40046207 200000c0 returned -16 [ 325.635209] binder: BINDER_SET_CONTEXT_MGR already set [ 325.639214] binder: 11726:11731 ioctl c0306201 200000c0 returned -14 [ 325.680374] binder: 11735:11735 ioctl c0306201 0 returned -14 [ 325.685340] binder: BINDER_SET_CONTEXT_MGR already set [ 325.708177] binder: 11730:11734 ioctl 40046207 0 returned -16 [ 325.709627] binder: BINDER_SET_CONTEXT_MGR already set [ 325.725938] binder: 11740:11740 ioctl 40046207 0 returned -16 [ 325.753591] binder: 11727:11742 ioctl 40046207 200000c0 returned -16 13:05:43 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1, 0x10000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x6, 0x8204, 0x0, 0x4, r1}, &(0x7f00000001c0)=0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) 13:05:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4800000000000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x400000000002) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:05:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x5, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 326.085348] binder: 11752:11754 ioctl 40046205 0 returned -22 [ 326.087971] binder: 11753:11759 ioctl c0306201 0 returned -14 [ 326.098092] binder: BINDER_SET_CONTEXT_MGR already set [ 326.120239] binder: BINDER_SET_CONTEXT_MGR already set 13:05:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 326.134877] binder: 11753:11768 ioctl c0306201 200000c0 returned -14 [ 326.139864] binder: 11756:11757 ioctl 40046207 200000c0 returned -16 [ 326.141690] binder: BINDER_SET_CONTEXT_MGR already set [ 326.158232] binder: 11752:11772 ioctl 40046205 0 returned -22 [ 326.174934] binder: 11753:11769 ioctl c0306201 200000c0 returned -14 13:05:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40049409, 0x0) 13:05:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x6000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x6000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 326.197540] binder: 11755:11765 ioctl 40046207 0 returned -16 [ 326.206579] binder: 11762:11770 ioctl 40046207 200000c0 returned -16 13:05:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:05:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 326.304259] binder: 11782:11789 ioctl c0306201 0 returned -14 [ 326.361225] binder: 11782:11789 ioctl c0306201 200000c0 returned -14 [ 326.369523] binder: BINDER_SET_CONTEXT_MGR already set [ 326.390647] binder: 11792:11794 ioctl 40046207 200000c0 returned -16 [ 326.404551] binder: BINDER_SET_CONTEXT_MGR already set [ 326.405448] binder: 11782:11795 ioctl c0306201 200000c0 returned -14 [ 326.420306] binder: 11798:11800 ioctl 40046207 0 returned -16 [ 326.427737] binder: 11793:11804 ioctl c018620b 0 returned -14 [ 326.442602] binder: 11808:11809 ioctl c018620b 0 returned -14 [ 326.443919] binder: BINDER_SET_CONTEXT_MGR already set [ 326.471188] binder: 11802:11803 ioctl 40046207 0 returned -16 13:05:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3, 0x80) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f00000000c0)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x4c, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x7000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ustat(0x1, &(0x7f0000000000)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:05:44 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40080, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) r2 = semget$private(0x0, 0x5, 0x14) semctl$SEM_INFO(r2, 0x5, 0x13, &(0x7f0000000080)=""/176) 13:05:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/217, 0xd9) inotify_init1(0x800) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 326.723763] binder: BINDER_SET_CONTEXT_MGR already set [ 326.729734] binder: 11818:11823 ioctl c0306201 0 returned -14 [ 326.733510] binder: 11819:11826 ioctl c018620b 0 returned -14 [ 326.753842] binder: BINDER_SET_CONTEXT_MGR already set [ 326.759338] binder: 11818:11823 ioctl c0306201 200000c0 returned -14 [ 326.767174] binder: 11816:11824 ioctl 40046207 200000c0 returned -16 [ 326.789036] binder: BINDER_SET_CONTEXT_MGR already set [ 326.793615] binder: 11818:11823 ioctl c0306201 0 returned -14 [ 326.801298] binder: 11820:11827 ioctl 40046207 0 returned -16 [ 326.826734] binder: 11820:11829 ioctl 40046207 0 returned -16 [ 326.826794] binder: BINDER_SET_CONTEXT_MGR already set 13:05:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dsp\x00', 0x300000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000100)={0xb69, 0x0, 0x10001, 0x400}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000140)={0x0, r2}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x0, 0x1, 0x0, [], [{0x0, 0x7, 0x10001, 0x6, 0x400, 0x8}, {0x3a9, 0x6, 0x40, 0x6, 0xffff, 0x6}], [[]]}) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000080)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000180)={0x8000, 0x0, 0x10003, 0x5}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000500)={r4}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) fchmod(r1, 0x24) 13:05:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x6000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x800000000000403, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x400000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="07705000d7eeffff"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x3e, &(0x7f0000000100)=""/62, 0x41100, 0x0, [], 0x0, 0x6}, 0x48) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000001c0)=r2) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x20000) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000240)={0x3, 0x6}) [ 326.855968] binder: 11825:11833 ioctl 40046207 200000c0 returned -16 [ 326.880342] binder: 11844:11845 ioctl c018620b 0 returned -14 [ 327.005794] binder: BINDER_SET_CONTEXT_MGR already set [ 327.025907] binder: 11855:11857 ioctl 40046207 200000c0 returned -16 [ 327.033056] binder: BINDER_SET_CONTEXT_MGR already set 13:05:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x500, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 327.071774] binder: BINDER_SET_CONTEXT_MGR already set [ 327.077427] binder: 11858:11860 ioctl 40046207 200000c0 returned -16 [ 327.078639] binder: 11856:11863 ioctl c018620b 0 returned -14 [ 327.088565] binder: 11854:11859 ioctl 40046207 0 returned -16 [ 327.108373] binder: BINDER_SET_CONTEXT_MGR already set [ 327.125577] binder: 11854:11865 ioctl 40046207 0 returned -16 [ 327.133137] binder: 11856:11863 ioctl 4008af10 20000240 returned -22 [ 327.199503] binder: 11856:11870 ioctl c018620b 0 returned -14 [ 327.219228] binder: BINDER_SET_CONTEXT_MGR already set [ 327.231763] binder: 11856:11869 ioctl 4008af10 20000240 returned -22 [ 327.237391] binder: 11872:11873 ioctl 40046207 200000c0 returned -16 [ 327.278717] binder: BINDER_SET_CONTEXT_MGR already set [ 327.318753] binder: 11872:11876 ioctl 40046207 200000c0 returned -16 13:05:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pwritev(r0, &(0x7f0000000680)=[{&(0x7f0000000140)="109281dd7e1a59bdb07bd8673bb30f945bdfe16507300341ebf3c223875b95a407dd71661351ae97c34b4818893042c9b1ea9eea1fbabdfeb49ad0203f941e55a6cce0071fc9b4f2294484dde31296ba9a4114c52554b869954853c4246247ca04b771a0c29db1a3733541fd7fb2d987224cb5dbb13f2d0ba5e09874f9d2aeec54c093fed11411bbbc587227e7f956644cc19919c6b77e3502acd9d4d0b087172e51adb7f99848f84e2d204392e15f618e06340c228d996f8667fa47d333f58bfad00024a3b5d46dcbab00cd78a74e976b3d2f4971ee3e46308995f21d33124d400ba6", 0xe3}, {&(0x7f0000000240)="7b8d9c3c8edac21a8c76bdba0fea71820046a62fcc57c776a8e704ad440c76449c7975336319fffda265d279a5c36a93efb7b68cae9ffecf73e881d1bfe3dd6e3c263cd8fe615479104f107a256690315a842f0b2552a210aedfbc7ec218df195c8e576aaf6ef9c570fb657d36499c3e07c5ccb716387a45a811fe4a28e77ace372bc4dd095827a3e58d00545f3b998274643f102e6999ebcefcbf5d0ee7da0a18445dd62265b1674f48274424de890176cc97e4e80ba196f0b4", 0xba}, {&(0x7f0000000300)="cb6ffed25beee2df5b915d4cf4724be1332ef07360aa35418c94f007d6b135fb3f024692611f8bd68b11e4626b325d3cb39971e0dab726428968f61ceca7f278195ad6c0fa74b0e75b5ec9e1f74b2f4537ffe19a6ff16193cf8ffcb104a9fffd4dc7a43f830cbbd53f9ed9564131edd1637edc96ab72d034c98582a6ea", 0x7d}, {&(0x7f0000000040)="5d5f5e3613a91cda8bd555e6cab3a1d28cc3003031325b05d5724ac6e0d2c760c131373aa01cedcbdfb90c1840", 0x2d}, {&(0x7f0000000380)="91075517589d03e6d97e7fa9818ee65ab563f6fcb840a41e51ec89d904f1e0b030177e10221e870190b4bd48ec6a72bb738d471937af8828b799dcb580e65d472ea29708ccdf2df762f9d0bdf614084b44a73ef3", 0x54}, {&(0x7f00000000c0)="c2cb1e37518bf5e107a31f286768a441a603bed82750abe3eca4d1", 0x1b}, {&(0x7f0000000400)="95ec33c13e6e772a226611ad7e30523742b800cf5dbfd0b72bc55c0ec8ab2d9d332a4d2982bf5b69ad410c3fd0d80bc2a64d84b70ce5e10f48f8e73fcf48dae99d12a526b1ef5d3f0bde0b20da6014c6ea0603a873946551113111741853496156729eac71d31a112727849e4c9da5679c3e0ff8bfe7a226d65a0d30473e8dcd6ec036c8f0fec0849ae1b2d244327de0cfe944935662f31cedb911cad6a4ce8c8c011de5d720e47bfb33aac44852adb244ef431d205f725ad5b1c38d9e54a44dfb1de95509c40c586690d84ba4e7cc4842d4dbcbc847bb71fea9762647fe265f378f9cf02769", 0xe6}, {&(0x7f0000000500)="4b51e882af04c05627543c10c64950d61ec8817156532c46ad99cea7a36528a50b1f85264543d3f7c455ccad0d6a3687314eebb79675af0e651db137ad08f7fb50a3e60f3e77c4811b36eec0737327ab2a0c7c3da334f9a486a9161458da535b2a2b153042a9841edf9e3a16b8c50e74071d0e", 0x73}, {&(0x7f0000000580)="3352c091148cd5ff97ae4ee4aae6f92e018798fb07a38dbfc203a041de740c98191883996dc2a0dfed551b910d12e1ae7f2f0290c5c4a1036a83972e797683b5899ca529e36cada4240abf1c90a76c4f415dc0caa2687d0adcb628910a237e6556ce1f7b1972072a25fba73e868ecf85d7a800f25b9fcfa4df20c7520a83df87e9350eb494d7e0883075533a7d7c5f57c3631d681a6fd0ea5909cd01b4de7f684564757840c6eacb3b30864fe0ff817972b3473d4d8cef8fd09b607eadcd407df25c", 0xc2}], 0x9, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe8, 0x0, &(0x7f0000000240)=[@acquire={0x40046305, 0x4}, @acquire={0x40046305, 0x3}, @enter_looper, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000000), &(0x7f0000000080)=[0x0, 0x78]}, 0xb3a}}, @request_death={0x400c630e, 0x1, 0x1}, @enter_looper, @reply_sg={0x40486312, {{0x4, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x50, 0x10, &(0x7f0000000100)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x1}, @fda={0x66646185, 0x5, 0x2, 0x8}, @flat={0x77622a85, 0xa, r1, 0x3}], &(0x7f0000000180)=[0x0, 0x38]}}}, @acquire_done={0x40106309, r2, 0x1}, @acquire_done={0x40106309, r3, 0x2}], 0x4e, 0x0, &(0x7f0000000340)="3de49d5cbeb8cb9ea470f1eaa6bf676791992db90a1899a3f8d6ea3bf2d12cc3277c80f0cbfe01ae4f53213599976a4e94c7a49015ed7795aa4ff975842ae69e63d6b533c265bc02306aae8a2b92"}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:05:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x5}, 0x1) r2 = dup2(r0, r1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000140)={0x1ff, 0x0, 0x300f, 0xfff, 0x0, {0x2, 0x7}, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x3, &(0x7f0000000100)=0x4) 13:05:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x3f000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 327.467454] binder: 11881:11889 Acquire 1 refcount change on invalid ref 4 ret -22 [ 327.487399] binder: BINDER_SET_CONTEXT_MGR already set [ 327.504590] binder: 11881:11889 Acquire 1 refcount change on invalid ref 3 ret -22 [ 327.525268] binder: 11888:11890 ioctl 40046207 200000c0 returned -16 [ 327.525398] binder: BINDER_SET_CONTEXT_MGR already set [ 327.537447] binder: 11881:11889 got transaction to invalid handle [ 327.544869] binder: 11884:11899 ioctl c018620b 0 returned -14 [ 327.567829] binder: 11881:11889 transaction failed 29201/-22, size 0-16 line 2896 13:05:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x6800000000000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 327.592999] binder: 11892:11895 ioctl 40046207 200000c0 returned -16 [ 327.600604] binder: BINDER_SET_CONTEXT_MGR already set [ 327.614472] binder: 11881:11897 ioctl 40046207 0 returned -16 13:05:45 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1000, 0x80) sendmsg$nl_crypto(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x44102081}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@alg={0xf0, 0x10, 0x100, 0x70bd27, 0x25dfdbff, {{'tgr192-generic\x00'}, [], [], 0x400, 0x400}, [{0x8, 0x1, 0x81}, {0x8, 0x1, 0xffffffffffffffff}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x10) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) [ 327.646874] binder: 11884:11885 ioctl c040564b 20000140 returned -22 [ 327.646886] binder: 11884:11903 ioctl c018620b 0 returned -14 [ 327.676102] binder: BINDER_SET_CONTEXT_MGR already set [ 327.706378] binder: BINDER_SET_CONTEXT_MGR already set 13:05:45 executing program 0: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2) r2 = accept(r1, 0x0, &(0x7f0000000000)) accept$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0xfffffd5f) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x1}) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fchmod(r2, 0x20) ioctl$BINDER_WRITE_READ(r4, 0xc018620b, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) [ 327.733027] binder: 11904:11905 ioctl 40046207 200000c0 returned -16 [ 327.747464] binder: BINDER_SET_CONTEXT_MGR already set [ 327.758179] binder: 11906:11907 ioctl 40046207 200000c0 returned -16 [ 327.758913] binder: 11910:11911 ioctl 40046207 0 returned -16 [ 327.767447] binder: BINDER_SET_CONTEXT_MGR already set [ 327.828885] binder: 11910:11913 ioctl 40046207 0 returned -16 [ 327.852122] binder: 11917:11918 ioctl c018620b 0 returned -14 [ 327.872746] binder: 11917:11919 ioctl c018620b 0 returned -14 13:05:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c12") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:45 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x4c8000, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000000c0)={0xd85, 0x77}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:45 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x77bb, 0x12004) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x6, 0x8) 13:05:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x7a00000000000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) mlockall(0x6) 13:05:46 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x100000001, 0x80002) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="326437355b6c6c444e1fb499a72cd109", 0x10) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f00000000c0)) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = dup2(r1, r1) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0x9) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) r3 = request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='/dev/dmmidi#\x00', 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f0000000200)='threaded\x00') r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x52d8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x880}, 0x80) 13:05:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40000000}) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000180)=0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x5, 0x70, 0x2e90, 0x7, 0x8, 0x9, 0x0, 0x4, 0x42000, 0x1, 0x80000001, 0x3e0, 0x4, 0x8000, 0xfffffffffffffffa, 0x0, 0x4d, 0x7, 0x1c48, 0x5, 0x8c, 0x7, 0x2bdd, 0x40, 0x1000, 0x3, 0xfff, 0xbf4, 0x2, 0x6, 0x55, 0x1ff, 0x40, 0x101, 0xffffffff, 0xffffffff7fffffff, 0x1000, 0x3, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0xa}, 0x80, 0x10001, 0x0, 0x9, 0x4, 0xda8, 0x7}) [ 328.226389] binder: BINDER_SET_CONTEXT_MGR already set [ 328.237528] binder: 11928:11939 ioctl c018620b 0 returned -14 [ 328.259844] binder: BINDER_SET_CONTEXT_MGR already set [ 328.291699] binder: 11930:11931 ioctl 40046207 200000c0 returned -16 13:05:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1ff, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x1e0) 13:05:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x48000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 328.337065] binder: 11936:11944 ioctl 40046207 200000c0 returned -16 [ 328.357385] binder: 11950:11951 ioctl 80045500 20000000 returned -22 [ 328.360852] binder: BINDER_SET_CONTEXT_MGR already set 13:05:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) fcntl$addseals(r0, 0x409, 0x2) [ 328.406999] binder: 11954:11956 ioctl c018620b 0 returned -14 [ 328.428736] binder: 11950:11953 ioctl 40046207 0 returned -16 [ 328.441866] binder: 11957:11957 ioctl c018620b 0 returned -14 [ 328.467039] binder: 11950:11951 ioctl 80045500 20000000 returned -22 [ 328.474285] binder: BINDER_SET_CONTEXT_MGR already set [ 328.479980] binder: 11962:11966 ioctl 40046207 200000c0 returned -16 [ 328.499331] binder: BINDER_SET_CONTEXT_MGR already set [ 328.504832] binder: 11950:11963 ioctl 40046207 0 returned -16 13:05:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 328.520281] binder: BINDER_SET_CONTEXT_MGR already set [ 328.526639] binder: 11967:11971 ioctl 40046207 200000c0 returned -16 [ 328.598685] binder: 11974:11977 ioctl c018620b 0 returned -14 [ 328.616443] binder: BINDER_SET_CONTEXT_MGR already set [ 328.624478] binder: BINDER_SET_CONTEXT_MGR already set [ 328.631659] binder: 11974:11983 ioctl c018620b 0 returned -14 [ 328.637717] binder: 11976:11979 ioctl 40046207 0 returned -16 [ 328.647458] binder: 11980:11981 ioctl 40046207 0 returned -16 [ 328.801772] IPVS: ftp: loaded support on port[0] = 21 [ 329.212692] chnl_net:caif_netlink_parms(): no params data found [ 329.243466] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.249940] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.256948] device bridge_slave_0 entered promiscuous mode [ 329.409332] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.415673] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.423271] device bridge_slave_1 entered promiscuous mode [ 329.438033] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 329.449512] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 329.462876] device bridge_slave_1 left promiscuous mode [ 329.468343] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.519595] device bridge_slave_0 left promiscuous mode [ 329.525033] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.501719] device hsr_slave_1 left promiscuous mode [ 333.544225] device hsr_slave_0 left promiscuous mode [ 333.597162] team0 (unregistering): Port device team_slave_0 removed [ 333.616349] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 333.697588] bond0 (unregistering): Released all slaves [ 333.807982] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 333.815482] team0: Port device team_slave_0 added [ 333.820968] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 333.828242] team0: Port device team_slave_1 added [ 333.833783] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 333.841415] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 333.901595] device hsr_slave_0 entered promiscuous mode [ 333.938830] device hsr_slave_1 entered promiscuous mode [ 333.979128] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 333.986256] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 334.005341] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 334.049330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.057511] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 334.067277] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 334.075902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.083092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.122110] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 334.128186] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.137956] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 334.145217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.153545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.161705] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.168065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.178080] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 334.186462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.196076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.204306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.212728] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.219166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.229672] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 334.239948] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 334.246940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 334.255669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.266468] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 334.274384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.283023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.293735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 334.302187] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.321157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 334.329973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.345819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.356281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.367344] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 334.375123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.383818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.398991] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 334.405311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 334.421427] 8021q: adding VLAN 0 to HW filter on device batadv0 13:05:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x68000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x60000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08012abd7000fddbdf250100000008000400000200001c00010008000200ff000000080002003c00000008000b0073697000080004000100008008000600020000005a13999a64d30ba9011ffdbdc1d6d5291f012bd3ace0b8e152b1456bad28cdc015c26dec1ec64dc65e134b9488827a89f0b49243df4098"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x80) r2 = getpgrp(0xffffffffffffffff) migrate_pages(r2, 0x2, &(0x7f00000000c0)=0x100000001, &(0x7f0000000100)=0x2) 13:05:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/253) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:05:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c12") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 334.519345] binder: 11995:11996 ioctl c0306201 0 returned -14 [ 334.527144] binder: 11995:11996 ioctl c0306201 200000c0 returned -11 [ 334.535177] binder: 11997:11997 ioctl c0306201 0 returned -14 13:05:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x4000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c12") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 334.568973] binder: BINDER_SET_CONTEXT_MGR already set [ 334.588701] binder: 12000:12001 ioctl 40046207 200000c0 returned -16 [ 334.591295] binder: BINDER_SET_CONTEXT_MGR already set [ 334.609111] binder: 12006:12011 ioctl 80044501 20000080 returned -22 13:05:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000140)={{0x5c, @broadcast, 0x4e21, 0x1, 'wlc\x00', 0x4, 0xb0b, 0x27}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x4e21, 0x2, 0x6, 0x9, 0x8}}, 0x44) pwrite64(r0, &(0x7f00000001c0)="d37aa20bf7cbfd76e9871e11224bece4c58002403a534ce58db49249068c31ad34a89399a03844a0ecf414ed34a4ce748f9d9d47129947f56073ac23949a89c0c737eb443763d38dfa0af5a6efa91f9ae379f5ef7f4d16", 0x57, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 334.655491] binder: 12006:12019 ioctl c018620b 0 returned -14 [ 334.672752] binder: 12010:12013 ioctl 40046207 0 returned -16 [ 334.698841] binder: 12025:12026 ioctl c0306201 0 returned -14 [ 334.707351] binder: BINDER_SET_CONTEXT_MGR already set [ 334.719259] binder: 12006:12019 ioctl 80044501 20000080 returned -22 [ 334.723966] binder: BINDER_SET_CONTEXT_MGR already set [ 334.740161] binder: 12025:12026 ioctl c0306201 200000c0 returned -14 13:05:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 334.746941] binder: 12004:12009 ioctl 40046207 0 returned -16 [ 334.755771] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20001 [ 334.788876] binder: 12018:12020 ioctl 40046207 200000c0 returned -16 13:05:52 executing program 4: prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x8000, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x6}}, 0x18) clone(0x40000009010000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:05:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/mixer\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x400, 0xffffffffffffff7f, 0x4, 0x4, 0x196, 0x100, 0x7fffffff, {0x0, @in6={{0xa, 0x4e22, 0xffffffff, @remote}}, 0x4, 0x4, 0xfff, 0x1ff, 0x5e}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x0, 0x899f33430ef731e6, 0xde1c, 0x90000000}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={r2, 0x1, 0x1f, 0x4, 0x20, 0x1f, 0x1, 0x9, {r3, @in6={{0xa, 0x4e23, 0x4f58ff3b, @local, 0x8000}}, 0xf9c, 0x6, 0x6, 0x0, 0x7fff}}, &(0x7f0000000340)=0xb0) [ 334.789204] binder: BINDER_SET_CONTEXT_MGR already set [ 334.809437] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20001 [ 334.834417] binder: 12025:12026 ioctl c0306201 0 returned -14 13:05:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x7a000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 334.865335] binder: 12025:12041 ioctl c0306201 200000c0 returned -14 13:05:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 334.925437] binder: 12048:12049 ioctl c018620b 0 returned -14 13:05:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x40000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4c0, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000080)=""/189) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 334.965910] binder: 12050:12054 ioctl c018620b 0 returned -14 [ 334.969051] binder: 12021:12022 ioctl 40046207 200000c0 returned -16 [ 334.972284] binder: BINDER_SET_CONTEXT_MGR already set [ 335.002527] binder: 12040:12042 ioctl 40046207 0 returned -16 13:05:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x20000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) io_setup(0xca6, &(0x7f0000000040)=0x0) io_getevents(r2, 0x9, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000140)={0x77359400}) [ 335.144072] binder: 12060:12066 ioctl c018620b 0 returned -14 [ 335.154214] IPVS: ftp: loaded support on port[0] = 21 13:05:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'gretap0\x00', 0x8000}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000000)=0x80, 0x80000) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) [ 335.188198] binder: 12071:12072 ioctl c0306201 0 returned -14 [ 335.201534] binder: BINDER_SET_CONTEXT_MGR already set 13:05:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a0") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 335.239519] binder: BINDER_SET_CONTEXT_MGR already set [ 335.258592] binder: 12071:12072 ioctl c0306201 200000c0 returned -14 [ 335.266525] binder: 12081:12083 ioctl 8914 20000100 returned -22 [ 335.273368] binder: 12069:12073 ioctl 40046207 200000c0 returned -16 [ 335.280380] binder: 12074:12078 ioctl 40046207 200000c0 returned -16 [ 335.287057] binder: BINDER_SET_CONTEXT_MGR already set 13:05:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x68, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 335.311103] binder: 12071:12072 ioctl c0306201 0 returned -14 [ 335.311690] binder: 12071:12087 ioctl c0306201 200000c0 returned -14 13:05:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a0") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 335.365282] binder: 12081:12082 ioctl 40046207 0 returned -16 13:05:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000040)) mincore(&(0x7f0000fe5000/0x1000)=nil, 0x1000, &(0x7f0000000140)=""/241) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:05:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup3(r0, r0, 0x80000) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7f, 0x200000) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000080)={r2, 0x8001, 0x100, "ea6ec5ab6593b9099bc8806989f43276ed58ddd1be1c32930aa0271a2c5f9cc6852681c44bcf7cce31dbf6da270b4c045a0621b8d6aa4ca1f6a152a6d7dc47a3ad75b0cdbfdafe9f2c155adc0b0ac719b876b7cd3d6da1c3e2b2c8820cb8f0c1c65defd0ccad1e"}) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 335.493073] binder: 12104:12106 ioctl c0306201 0 returned -14 [ 335.505527] binder: BINDER_SET_CONTEXT_MGR already set [ 335.514263] binder: 12060:12097 ioctl c018620b 0 returned -14 [ 335.533048] binder: 12099:12100 ioctl 40046207 200000c0 returned -16 13:05:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x6c000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 335.544028] IPVS: ftp: loaded support on port[0] = 21 [ 335.558636] binder: BINDER_SET_CONTEXT_MGR already set [ 335.563943] binder: 12107:12108 ioctl 40046207 0 returned -16 [ 335.571210] binder: 12104:12106 ioctl c0306201 200000c0 returned -14 [ 335.614236] binder: 12104:12106 ioctl c0306201 0 returned -14 13:05:53 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x10000, 0x1d9140) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0xe8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0xfe, "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"}, &(0x7f0000000240)=0x106) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={0x0, 0xce}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000300)={r1, 0x4, 0x7, 0x7, 0x41, 0x86, 0xffffffffffffffff, 0x9, {r2, @in6={{0xa, 0x4e21, 0x9b, @dev={0xfe, 0x80, [], 0x25}, 0x7}}, 0x4, 0x7080000000000000, 0x38, 0x8, 0x8000}}, &(0x7f00000003c0)=0xb0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) 13:05:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a0") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000080)="4f5ba0bace868aea2b93d64803b2616ccf339743d94ec16a817dc3c39d27d6d540711ea1683b032c21a52ceae1d9b768c06b3bf884b2d079b1d47ab318ce922f401e2882a4d9e7f11256f8aab66457a49ec1a4b56bf60d43d77d8758b5c5a4c4484fefa9bdde1199d191adebb8fa93631b588cab0a1bc2f87b7124ba7edfd00807") syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:05:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") syz_open_dev$sndseq(&(0x7f00000006c0)='/dev/snd/seq\x00', 0x0, 0x80) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2804000}, 0xc, &(0x7f0000000640)={&(0x7f0000000240)={0x3d0, 0x2e, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@generic, @nested={0x134, 0x1d, [@generic="40e1fe862f4bdbdae003831c1017ea67739bccf627a48e855ecad7d5ef4b111af18a5cfcfc5e0fb89cef07350517c67e728c4aa590236bbd4530020e1ebeb5c86ce300cdafc105a0ca5d40482a7aa2bdba7c777582f83d17b67867bdb27d2f021c84bfcf7bccc325bf9349e035887106466d83b74c9465bf6aa620e56a050f96636e28aa287546e2e6ab925ad7b134c0fc6a859ac322a721992400af0f049a35c02bf54080b5c6b17964593977b4f42b960847b8311f85bc41f955d00f4c1670c956b95b64b7ea94efa42e55653b30c3c0c3b3bf5077a28da8b32f52200f4751cb3ee13ccd0cb7cddd61", @typed={0x4, 0x19}, @generic, @typed={0x8, 0x8d, @uid=r2}, @typed={0x38, 0x4, @str='posix_acl_accesssystemselinux{system\x98system(system[\x00'}]}, @typed={0x8, 0xf, @ipv4=@multicast2}, @generic="e5eac21acecadc4a20af3fbf5aae14563e66539d6bf439395748b930c27457397187c38e22367dd0ff47aabcf22b3203ba8cceb90c5034d478b30c9bc710a2d03dc2167e278797866ec4e5d98f70f922380b3440698f85745c339935bf80f32c2bc4ec2a85065e632f1ea39d4b31ecc1ae209fd2d35862a60027473f33fd06eedb5cd25bf6c42cff8aa5be2895134887da8281f6f2f745861f165180eaeb41a85a1cf8ca92487a684d36369142cc0ab3f1b7af658c871cc8aacdd3ea07ddf282ef841f0636623b582fd00bba342d45584e11d4cd779559fb1203136c481c", @generic="5d63d4e0bd847904ac6ec15a00f03db0240b4b4b63567fea84690eaaa258ef4b2496d134de4a795611e6a75facf4a72ac0c5a21d52e7ed610b17b35a27a43cfbccebb26843ca29856862abba1e715397803f607e2a6c82e8c5c51c493cd1c327264a14e90f5e52932e7b787fc8dd52924362e1dc67cfc20111829f5606e57c1b7523eab9d04c37f28b35b5b97e4f6ff8efe9acbecee794eca125ea0acee8395513e00979f33eccab0fbdaaae5ba82e63", @generic="06891e03b0bf66ba921bae0ca981a41b1bf3a7558bba4c12abdf2bc15d21cd712fec82f21c4261cd9a89853bd37774f05ee1582c15c13e9c40c0385639da180faa64b8a1935f93cb7de8ed96cff09e7c81a6e77a0a5954dfaa2a58b869672b413586994f7be185886205eee04e385b0aec121bb76706b32e83cace591d163556757d81fdcf25cda027a748b57dc9404faa07125e5ecee2497287c9c3a5547c52207baa5722aa04c63bd51bbbec6d62f6b2c34dd6bde47d1235", @nested={0x38, 0x79, [@typed={0x14, 0x56, @str='/dev/sequencer\x00'}, @typed={0x20, 0x52, @str='\x8eposix_acl_access$-cpuset*\x00'}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x4000081}, 0x8004) 13:05:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x6c00000000000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 335.891648] binder: BINDER_SET_CONTEXT_MGR already set [ 335.896984] binder: 12129:12131 ioctl 40046207 0 returned -16 13:05:53 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000000)=0x1) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) 13:05:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x102) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) [ 335.946702] binder: 12137:12142 ioctl c0306201 0 returned -14 13:05:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 335.993442] binder: 12137:12146 ioctl c0306201 200000c0 returned -14 13:05:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x100000000) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 336.180820] binder: 12160:12163 ioctl c0306201 0 returned -14 [ 336.228994] binder: 12160:12163 ioctl c0306201 200000c0 returned -14 [ 336.235871] binder: 12167:12167 ioctl c0306201 0 returned -14 [ 336.239403] binder: 12165:12166 ioctl c018620b 0 returned -14 13:05:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x6800, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x8000000, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x2, 0x2) 13:05:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) clone(0x40060bfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:05:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x48000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 336.606448] binder: 12182:12183 ioctl c0306201 0 returned -14 [ 336.614603] binder: 12179:12184 ioctl c018620b 0 returned -14 [ 336.627683] binder: 12182:12183 ioctl c0306201 200000c0 returned -14 [ 336.643907] binder: 12179:12189 ioctl c018620b 0 returned -14 13:05:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000140)=""/81, &(0x7f0000000040)=0x51) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 336.652168] binder: 12188:12188 ioctl c0306201 0 returned -14 [ 336.674218] binder: 12188:12190 ioctl c0306201 200000c0 returned -14 13:05:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:05:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000240)={0x90, 0x0, 0x8, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x8080) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:05:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 336.939198] binder: 12205:12209 ioctl c0306201 0 returned -14 [ 336.949193] binder: 12203:12207 ioctl c018620b 0 returned -14 [ 336.955264] IPVS: ftp: loaded support on port[0] = 21 [ 336.967180] binder: 12205:12209 ioctl c0306201 200000c0 returned -14 13:05:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, 0x0, 0x0) [ 337.004248] binder: 12213:12213 ioctl c0306201 0 returned -14 [ 337.032801] binder: 12213:12216 ioctl c0306201 200000c0 returned -14 [ 337.234598] IPVS: ftp: loaded support on port[0] = 21 [ 337.289293] chnl_net:caif_netlink_parms(): no params data found [ 337.391401] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.397877] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.405921] device bridge_slave_0 entered promiscuous mode [ 337.417950] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.434930] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.447073] device bridge_slave_1 entered promiscuous mode [ 337.497495] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 337.510972] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 337.565574] chnl_net:caif_netlink_parms(): no params data found [ 337.585342] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 337.603959] team0: Port device team_slave_0 added [ 337.646797] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 337.666797] team0: Port device team_slave_1 added [ 337.695239] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 337.702890] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 337.710469] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.716879] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.735679] device bridge_slave_0 entered promiscuous mode [ 337.766507] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.772950] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.780512] device bridge_slave_1 entered promiscuous mode [ 337.841768] device hsr_slave_0 entered promiscuous mode [ 337.888851] device hsr_slave_1 entered promiscuous mode [ 337.929940] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 337.946379] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 337.960586] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 337.977448] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 337.986988] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 338.035258] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 338.049443] team0: Port device team_slave_0 added [ 338.056236] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 338.074924] team0: Port device team_slave_1 added [ 338.087460] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 338.095782] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 338.161576] device hsr_slave_0 entered promiscuous mode [ 338.209581] device hsr_slave_1 entered promiscuous mode [ 338.289812] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 338.306248] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 338.313859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.320894] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 338.331006] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 338.358372] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 338.371782] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 338.384335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 338.391778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.401841] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 338.407892] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.441672] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 338.455358] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 338.464626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 338.473348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 338.481320] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.487651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.497397] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 338.508497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 338.515793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 338.523729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 338.532082] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.538513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.547970] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 338.583079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 338.594993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 338.604941] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 338.613238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 338.621443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 338.629551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 338.637131] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 338.649008] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 338.658381] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 338.669273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 338.677292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 338.685518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 338.693242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 338.704681] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 338.732899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 338.740471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 338.750743] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 338.756781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 338.775963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.787548] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 338.819105] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 338.827055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 338.834174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.846731] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 338.853001] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.862648] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 338.875378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.903279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 338.918552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 338.926403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 13:05:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x2000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x28, &(0x7f0000000040)}, 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$ax25_int(r1, 0x101, 0xf, &(0x7f0000001140), &(0x7f0000001180)=0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/4096) 13:05:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x600000000000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6a, 0x0) r2 = fcntl$getown(r0, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000000c0)={{0x6, 0x3, 0x4, 0x7, 'syz0\x00', 0x7}, 0x3, 0x30000042, 0xf0d, r2, 0x1, 0x7f, 'syz0\x00', &(0x7f0000000080)=['/dev/binder#\x00'], 0xd, [], [0xffffffffffffffff, 0xfffffffffffffffc, 0x1, 0x5]}) clone(0x8188000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:05:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, 0x0, 0x0) [ 338.949114] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.955479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.961806] binder: BINDER_SET_CONTEXT_MGR already set [ 338.968271] binder: 12230:12233 ioctl 40046207 200000c0 returned -16 [ 338.973468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 339.054731] binder: 12235:12243 ioctl c0306201 0 returned -14 [ 339.070544] binder: 12235:12243 ioctl c0306201 200000c0 returned -14 [ 339.078392] binder: 12245:12245 ioctl c0306201 0 returned -14 [ 339.085143] binder: 12245:12243 ioctl c0306201 200000c0 returned -14 13:05:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x7a00000000000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 339.103160] binder: BINDER_SET_CONTEXT_MGR already set [ 339.123531] binder: 12241:12252 ioctl 40046207 200000c0 returned -16 [ 339.150093] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 339.181799] binder: 12257:12258 ioctl c0306201 0 returned -14 [ 339.190273] binder: 12257:12258 ioctl c0306201 200000c0 returned -14 [ 339.198285] binder: 12259:12259 ioctl c0306201 0 returned -14 [ 339.282069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 339.291559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.310869] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.317249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.330930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 339.338255] device bridge_slave_1 left promiscuous mode [ 339.351598] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.389879] device bridge_slave_0 left promiscuous mode [ 339.395340] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.440340] device bridge_slave_1 left promiscuous mode [ 339.445805] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.490962] device bridge_slave_0 left promiscuous mode [ 339.496430] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.550410] device bridge_slave_1 left promiscuous mode [ 339.555857] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.610461] device bridge_slave_0 left promiscuous mode [ 339.615938] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.865390] device hsr_slave_1 left promiscuous mode [ 339.913641] device hsr_slave_0 left promiscuous mode [ 339.974017] team0 (unregistering): Port device team_slave_1 removed [ 339.985029] team0 (unregistering): Port device team_slave_0 removed [ 339.998171] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 340.043225] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 340.140111] bond0 (unregistering): Released all slaves [ 340.290979] device hsr_slave_1 left promiscuous mode [ 340.341849] device hsr_slave_0 left promiscuous mode [ 340.394848] team0 (unregistering): Port device team_slave_1 removed [ 340.406545] team0 (unregistering): Port device team_slave_0 removed [ 340.422068] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 340.474862] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 340.577806] bond0 (unregistering): Released all slaves [ 340.712296] device hsr_slave_1 left promiscuous mode [ 340.755402] device hsr_slave_0 left promiscuous mode [ 340.814669] team0 (unregistering): Port device team_slave_1 removed [ 340.827030] team0 (unregistering): Port device team_slave_0 removed [ 340.841543] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 340.914425] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 341.017976] bond0 (unregistering): Released all slaves [ 341.140525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 341.157190] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 341.168923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 341.183688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 341.191081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.200441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.210989] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 341.222446] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 341.232243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 341.242465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.250475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.258023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.265920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.275655] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 341.290277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 341.297852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.315778] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 341.321938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 341.345966] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 341.358026] 8021q: adding VLAN 0 to HW filter on device batadv0 13:05:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, 0x0, 0x0) 13:05:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x6c, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x5, 0x800, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000180)={@dev, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, r3}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:05:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x80) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000140)={0x80, "34e32d77befef7cdb73a9262a8ff36009cb85223e76ee316f6a688861eb152247a9fe69fcca8425daf287121391ec9e215b7cb30dda6db040c636499746b27f80bb6b77a2a26e3255cec787ff0c9a02cc8e2bd7126918719c81313acf0682fb3fd8cef2bd0b3a8933d286f0d5c78339b3cc819bb238f3427c661b1fb6788bb59"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0x50, &(0x7f0000000080)}, 0x10) 13:05:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x400000000000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000002c0)="0adc1f61129f4a35effc0f") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) fcntl$setflags(r1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'rose0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', r2}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000300)={0x3, {{0xa, 0x4e24, 0x40000010001, @empty, 0x84}}, {{0xa, 0x4e20, 0x3f, @mcast2, 0x1}}}, 0x36a) write$FUSE_IOCTL(r1, &(0x7f0000000040)={0x20, 0x0, 0x5, {0x9, 0x0, 0x35e, 0x6}}, 0x20) connect$netrom(r1, &(0x7f0000000140)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000fe9000/0x4000)=nil, 0x4000}, 0x3}) [ 341.494297] binder: BINDER_SET_CONTEXT_MGR already set [ 341.506148] binder: 12281:12282 ioctl c0306201 0 returned -14 13:05:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x6, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 341.550417] binder: 12277:12287 ioctl 40046207 200000c0 returned -16 [ 341.561350] binder: 12278:12296 ioctl c018620b 0 returned -14 [ 341.565991] binder: 12281:12282 ioctl c0306201 200000c0 returned -14 [ 341.576848] binder: BINDER_SET_CONTEXT_MGR already set [ 341.595736] binder: 12294:12302 ioctl 40046207 0 returned -16 13:05:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x3, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 341.630049] binder: 12281:12298 ioctl c0306201 200000c0 returned -14 [ 341.647479] binder: 12281:12282 ioctl c0306201 0 returned -14 13:05:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000100)='\x1e{eth0,\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000180)='/dev/binder#\x00'}, 0x30) getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000240)='/dev/binder#\x00'}, 0x30) sched_getaffinity(r2, 0x8, &(0x7f00000000c0)) epoll_create(0x9) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2040, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0xfff, 0x5eb8, 0x400, 0xf0}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000003c0)={r4, 0x100000000}, &(0x7f0000000400)=0x8) 13:05:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xc92, &(0x7f00000001c0)="0adc1fedf0123f3188a070f6d366c812d4c8b21f911d9ac452a18295f604e1ddd267b3ceb64cac6d2042f57c003f3b11a9924c32574dbda32ccebf84267b6b29b3e830d7cb90bcdea6c3d348ec4e5590271723f45bd613878407367f00d3537028835959") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 341.753891] binder: BINDER_SET_CONTEXT_MGR already set 13:05:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x101, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'ip6gre0\x00', 0x600}) 13:05:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:05:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x2, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:05:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.redirect\x00', &(0x7f0000000080)='/dev/binder#\x00', 0xd, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='rdma.current\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000002c0)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = accept$inet(0xffffffffffffff9c, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000140)={{{@in=@remote, @in=@multicast2}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 341.805157] binder: 12324:12326 ioctl c018620b 0 returned -14 [ 341.818607] binder: 12317:12321 ioctl 40046207 200000c0 returned -16 13:05:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x400000000000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:05:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$setstatus(r0, 0x4, 0x42800) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), 0x4) r2 = gettid() ptrace$getenv(0x4201, r2, 0x9, &(0x7f00000000c0)) [ 341.934384] binder: 12334:12339 ioctl c0306201 0 returned -14 13:05:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 342.009237] binder: 12334:12339 ioctl c0306201 200000c0 returned -14 13:05:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000100)="0adc1f023c123f3188a070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 342.083241] binder: 12334:12347 ioctl c0306201 0 returned -14 [ 342.096543] binder: BINDER_SET_CONTEXT_MGR already set [ 342.118739] binder: 12350:12357 ioctl 40046207 200000c0 returned -16 [ 342.125899] binder: BINDER_SET_CONTEXT_MGR already set 13:05:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x3) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x480100, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 342.142012] binder: 12340:12355 ioctl 40046207 0 returned -16 13:06:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x6c00, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:06:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x600000000000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:06:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8001, 0x10000) recvfrom$rose(r1, &(0x7f0000000080)=""/67, 0x43, 0x2100, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x2000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 342.297140] binder: 12370:12371 ioctl c018620b 0 returned -14 [ 342.368405] binder: 12377:12382 ioctl c0306201 0 returned -14 [ 342.382096] binder: BINDER_SET_CONTEXT_MGR already set 13:06:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) signalfd4(r0, &(0x7f0000000040)={0x6}, 0x8, 0x800) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:06:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {}], 0xa, "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"}, 0x1036) [ 342.418206] binder: 12380:12384 ioctl 40046207 200000c0 returned -16 [ 342.425778] binder: 12377:12391 ioctl c0306201 200000c0 returned -14 13:06:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 342.484592] binder: 12377:12382 ioctl c0306201 0 returned -14 [ 342.485310] binder: 12377:12391 ioctl c0306201 200000c0 returned -14 [ 342.498799] binder: BINDER_SET_CONTEXT_MGR already set [ 342.517133] binder: BINDER_SET_CONTEXT_MGR already set [ 342.523049] binder: 12385:12389 ioctl 40046207 200000c0 returned -16 13:06:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x3000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:06:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) fdatasync(r0) [ 342.539963] binder: 12388:12395 ioctl 40046207 0 returned -16 [ 342.554596] binder: 12400:12402 ioctl c018620b 0 returned -14 13:06:00 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000400)={0xb, {0xffffffffffffffff, 0x401, 0x702b9cb0, 0x12000000000}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x34, 0x1000, {"91e43bdec1b22a0348f39e8657a1a728475496fbca248e715e220b1c"}}, {0x0, "5aa2b952bae85424163cbb1fede0899e45aedbcf26c087aa0f7b48af62b85972e3342f95a3732b16ab11370fea76f41065553b553f7a658ebf4d85ac9a563703b3ef3e8f72590aa0107949b544c7b1ce14f874cad98d707d5ef94494ecd8df15127e58468b8376b6dfb1dfb964a112a248e3aaeeb14e9fed7ee48dc109bb6247a6b9c5d8bc1dca7aa70b08b702e907ff5c37823cbf3d49da0323923a0bc7015ef6d9e62a259f34aedadd5abc8ee876d626cbc00273481c12fa97adfa91f8d642eb5d3d8a133259f1126dd1b34457bf4e1e84e15fa334ab869d8de174d930af4ffb2d4c5e91"}}, &(0x7f0000000300)=""/222, 0x11b, 0xde, 0x1}, 0x20) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000140)={0xd, 0x7f, {0x52, 0x7a18, 0x8, {0x7, 0x1}, {0x8, 0x2}, @ramp={0x7, 0x7, {0x7f, 0x8001, 0x6, 0x6}}}, {0x57, 0x2, 0x100, {0x5, 0x9}, {0x4}, @rumble={0x9, 0x1}}}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:06:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 342.683891] binder: BINDER_SET_CONTEXT_MGR already set 13:06:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 342.729998] binder: BINDER_SET_CONTEXT_MGR already set [ 342.735780] binder: 12417:12425 ioctl c0306201 0 returned -14 [ 342.752749] binder: 12412:12416 ioctl 40046207 200000c0 returned -16 13:06:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x68, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000040)='syz1\x00') fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000140)=@v2={0x7, 0x1, 0x3, 0x1ff, 0xcb, "66c95fe649901bf34fe6fd575088e46dd5a4a5146b7e9e2244d5d9044061b1d4667fce65b19d65abc3f91fa73e56e6a89005865d3fc16ddc4a3f2cdb72003a58a7c33c69ae5ba4c34e8d6f2d5ade53a3aab7802766d632fb9402e2d28668c3963e317343826a597cc1df56b1f4bd6f1fa497dccbae35dc912b5c5ac2812c220f8dbd68128fb90e135d59faf401d4dd4f901f6b500c58e15891e26874e84305a1345c0914c844549c5d2c55af6cfd2fb3c5d9ee8484f3d322136dbae5301e466f545c59580957ac42aa4f31"}, 0xd5, 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 342.798827] binder: 12417:12425 ioctl c0306201 200000c0 returned -11 [ 342.800292] binder: 12419:12422 ioctl 40046207 200000c0 returned -16 [ 342.815860] binder: BINDER_SET_CONTEXT_MGR already set [ 342.821471] binder: 12431:12432 ioctl c018620b 0 returned -14 13:06:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x4c00, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 342.870605] binder: BINDER_SET_CONTEXT_MGR already set [ 342.916925] binder: 12428:12429 ioctl 40046207 0 returned -16 13:06:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000640)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000680)={@remote, @dev, 0x0}, &(0x7f00000006c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001b80)={@ipv4={[], [], @multicast2}, 0x0}, &(0x7f0000001bc0)=0x14) getpeername(0xffffffffffffff9c, &(0x7f0000002100)=@can={0x1d, 0x0}, &(0x7f0000002180)=0x80) getsockname$packet(0xffffffffffffff9c, &(0x7f00000021c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002200)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000002240)={@loopback, 0x0}, &(0x7f0000002280)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000003840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003880)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000038c0)={{{@in=@empty, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f00000039c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003a00)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000003b00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003b40)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000003c40)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004400)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000004500)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000004540)={0x0, @initdev, @multicast1}, &(0x7f0000004580)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000004900)={@remote, @multicast1, 0x0}, &(0x7f0000004940)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000004980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000049c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000004b00)={@remote, @multicast2, 0x0}, &(0x7f0000004b40)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000004b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000005100)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000005200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000005300)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000005340)={0x0, @loopback}, &(0x7f0000005380)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000054c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000005d00)={&(0x7f0000000600), 0xc, &(0x7f0000005cc0)={&(0x7f0000005500)={0x7a4, r2, 0xa790d46fa9559375, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x230, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xdb56}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x5, 0x2, 0x7, 0x3}, {0x7f, 0x3, 0x100, 0x3}, {0x5, 0x9, 0x77, 0x9}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xacda}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x8, 0x8, 0x5, 0x3}, {0x101, 0x3, 0x8001, 0x3}, {0x8000, 0x3ff, 0x3, 0x4}, {0x1, 0x80000001, 0x7, 0x10001}, {0x100000000, 0x3d6, 0x8, 0x8}, {0x3, 0x5, 0x40, 0xc59}]}}}]}}, {{0x8, 0x1, r7}, {0x1b8, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xc6}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r12}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}]}}, {{0x8, 0x1, r14}, {0x40, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r15}, {0x168, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r16}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r17}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r18}, {0x50, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0xd0cf, 0x10001, 0x7f, 0xfffffffffffffc26}, {0x0, 0x401, 0xffffffffffffffff, 0xfffffffffffff001}, {0x5, 0x4, 0x4, 0x1f}]}}}]}}, {{0x8, 0x1, r19}, {0x13c, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r20}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}]}, 0x7a4}, 0x1, 0x0, 0x0, 0x800}, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x3, &(0x7f0000000540)=[{&(0x7f0000000100)="d6668a5e1d2ad074f71f70af3b24b8d2f054727ec78cd3be8ea44d1b357ea6c01bff10d225b4e0b1f6d31744db13622be17aa74430e4bb732f639923abbd78bfc03c9dfff871cb5d6257ff5597fce47e863399bc1c34f1f2dc93f425f2a048ff55c94982a2646e6b0e15e17b16cb59ca027802d55fb7b084ca34aec0115255447629f825869c746880be67929e1770b95a2dbc745725a6c24838dfa029573a44bcd6ee774dacdb97d0c100dba381975638247cd9268052759214091eee81c38885a9ec3ecdff1f5ebbdd2b2e958dfc776579bc4e20caf4601a4aae671a620900fff6954dbe9d6d32", 0xe8, 0x98}, {&(0x7f00000004c0)="776b7667bc1f00c43e629f44b2fe23fcd348fbcc1011c3a182b3545ca785c769bef0", 0x22, 0x1}, {&(0x7f0000000500)="25d78059bc07815f6abf", 0xa, 0x5}], 0x100000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r22 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40800, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r22, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@empty, @in=@broadcast, 0x4e23, 0x101, 0x4e20, 0x4, 0x2, 0x20, 0x20, 0x0, r23, r24}, {0x2e, 0x9, 0x40, 0xffff, 0x9, 0x7, 0x3bfd}, {0xfff, 0xffff, 0x4, 0x5}, 0x5, 0x6e6bbc, 0x1, 0x0, 0x1, 0x3}, {{@in=@loopback, 0x4d4, 0x2b}, 0x2, @in=@remote, 0x34ff, 0x0, 0x1, 0x2, 0xfff, 0xae6e, 0x19}}, 0xe8) 13:06:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 342.957143] binder: 12421:12426 ioctl 40046207 0 returned -16 13:06:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:06:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept(r0, &(0x7f0000000140)=@can, &(0x7f0000000040)=0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x2a8, r2, 0x704, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}]}, @TIPC_NLA_MEDIA={0xec, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc896}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x611}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffdc02}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x71f0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa55e}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x546}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xb0, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x71}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 343.009857] binder: BINDER_SET_CONTEXT_MGR already set [ 343.015192] binder: 12450:12451 ioctl 40046207 200000c0 returned -16 [ 343.079513] binder: 12449:12459 ioctl c0306201 0 returned -14 [ 343.115337] binder: 12449:12459 ioctl c0306201 200000c0 returned -14 [ 343.131338] binder: BINDER_SET_CONTEXT_MGR already set [ 343.152769] binder: 12458:12468 ioctl 40046207 0 returned -16 [ 343.160439] binder: 12467:12467 ioctl c0306201 0 returned -14 [ 343.168949] binder: BINDER_SET_CONTEXT_MGR already set [ 343.174254] binder: 12450:12473 ioctl 40046207 200000c0 returned -16 [ 343.176675] binder: 12467:12472 ioctl c0306201 200000c0 returned -14 13:06:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:06:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 343.201590] binder: BINDER_SET_CONTEXT_MGR already set 13:06:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) fsetxattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000100)='}lo\x00', 0x4, 0x1) socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080)={0x3f2}, 0x1) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80440}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x198, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x64}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb7b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5b28}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x186000000000}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x38}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x51}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa7}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0xdb1f059fe9dc4a3a}, 0x40080) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) [ 343.258770] binder: 12458:12478 ioctl 40046207 0 returned -16 13:06:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000140)={0xf5, 0x0, [0x5df, 0x100, 0xe0be, 0x492]}) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:06:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x300000000000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:06:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 343.401383] binder: 12485:12490 ioctl c0306201 0 returned -14 13:06:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 343.458092] binder: 12485:12490 ioctl c0306201 200000c0 returned -11 [ 343.465727] binder: 12489:12495 ioctl c018620b 0 returned -14 [ 343.482045] binder: BINDER_SET_CONTEXT_MGR already set [ 343.484994] binder: BINDER_SET_CONTEXT_MGR already set [ 343.493029] binder: 12494:12504 ioctl 40046207 0 returned -16 [ 343.499893] binder: 12485:12490 ioctl c0306201 0 returned -14 13:06:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2002) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000540)={0x13, 0x10, 0xfa00, {&(0x7f0000000340), r1, 0x2}}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0)="eb51da3f002ec37b97173cc892dd45265c0d9e09faf6dcad83e7ccc5963601359194bc82b6e923f0bff0c7aa779b92bce67870869727660e4b5c6220fdec820f9a12c3"}, 0x10) clone(0x7ffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 343.537265] binder: 12493:12500 ioctl 40046207 200000c0 returned -16 13:06:01 executing program 4: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x2000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000180)=0x10) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r0, 0x409, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x8) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 343.580395] binder: BINDER_SET_CONTEXT_MGR already set 13:06:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) accept$ax25(r1, &(0x7f0000000140)={{0x3, @default}, [@null, @null, @bcast, @rose, @rose, @netrom, @bcast, @rose]}, &(0x7f0000000040)=0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x7c, 0xa7a0, {"166adb1f8bc0548abfa84e3d68b1c74d57fba7646291809daa2e9fc2c3793aa1a16a32ba3a4d898a254bc3675835c89162525e07b5a5dd7cabe5bffaf0b984dfac57d788eb220ab0c56d9b06f7b5a6765f7e614307a2ee7209be97447a1995e60cbae9"}}, {0x0, "5cd615dd10a664772979d645aa8f4e1bde7496e6ebcea3eb8b223425e5685074450fd0e7c1ce0f66ca32ef3713a59617c3efed"}}, &(0x7f0000000280)=""/4096, 0xb1, 0x1000, 0x1}, 0x20) 13:06:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x200000000000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 343.637896] binder: 12493:12514 ioctl 40046207 200000c0 returned -16 13:06:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x74, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 343.740714] binder: 12524:12529 ioctl c0306201 0 returned -14 [ 343.756504] binder: BINDER_SET_CONTEXT_MGR already set [ 343.775722] binder: 12524:12529 ioctl c0306201 200000c0 returned -14 13:06:01 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0x100000000, 0x80000000, 0x7, 0x1f, 0x6}) 13:06:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4800, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 343.800156] binder: 12536:12536 ioctl c0306201 0 returned -14 [ 343.809976] binder: 12536:12536 ioctl c0306201 200000c0 returned -14 [ 343.841539] binder: BINDER_SET_CONTEXT_MGR already set 13:06:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x200000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000140)={0x1, 0x2, 0x7ebe1135, 0x9}) ioctl$int_out(r0, 0x2, &(0x7f0000000040)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:06:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 343.866689] binder: 12540:12541 ioctl 40046207 200000c0 returned -16 [ 343.869311] binder: 12522:12528 ioctl 40046207 0 returned -16 13:06:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101080, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0x2, 0x8001}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 343.915291] binder: BINDER_SET_CONTEXT_MGR already set [ 343.968633] binder: 12542:12544 ioctl 40046207 200000c0 returned -16 13:06:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x4, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:06:01 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x40000) fgetxattr(r0, &(0x7f0000000080)=@random={'user.', '/dev/binder#\x00'}, &(0x7f00000000c0)=""/13, 0xd) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, 0x0) 13:06:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 344.037551] binder: BINDER_SET_CONTEXT_MGR already set 13:06:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) exit(0x154) syz_init_net_socket$ax25(0x3, 0x5, 0xf) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="66b882008ee066ba430066b8f60066ef47dcf7c4a3d55dd8cd420f2143b8010000000f01c1b8010000000f01d9400f01ca450fc76db566ba420066b8dc0066ef", 0x40}], 0x1, 0x0, 0x0, 0x0) [ 344.080537] binder: 12559:12566 ioctl c0306201 0 returned -14 [ 344.088918] binder: 12558:12560 ioctl 40046207 0 returned -16 13:06:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x80000001) [ 344.130116] binder: 12559:12566 ioctl c0306201 200000c0 returned -14 [ 344.169626] binder: BINDER_SET_CONTEXT_MGR already set [ 344.186293] binder: 12559:12571 ioctl c0306201 200000c0 returned -14 [ 344.186822] binder: 12567:12574 ioctl 40046207 200000c0 returned -16 [ 344.199357] binder: 12570:12578 ioctl c018620b 0 returned -14 13:06:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x600, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:06:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x0, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:06:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4000000, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xfff, 0x200) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0xe3f}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0x1}, &(0x7f00000001c0)=0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000080)={0x36, 0xfffffffffffffb18, 0x7, 0x4, 0x80000000, 0x81}) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 344.290942] binder: BINDER_SET_CONTEXT_MGR already set [ 344.328531] binder: 12585:12587 ioctl 40046207 0 returned -16 [ 344.342229] binder: BINDER_SET_CONTEXT_MGR already set [ 344.347547] binder: 12585:12593 ioctl 40046207 0 returned -16 13:06:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x0, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 344.429252] binder: 12597:12598 ioctl c018620b 0 returned -14 [ 344.436937] binder: 12600:12603 ioctl c0306201 0 returned -14 [ 344.465942] binder: BINDER_SET_CONTEXT_MGR already set 13:06:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x80000000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x8001, 0x4, 0x6, 0x100000000, 0x4, [{0xb34c, 0xe0, 0xc9c, 0x0, 0x0, 0x102}, {0x40, 0x5, 0x9, 0x0, 0x0, 0x2202}, {0x194d, 0x1, 0x101}, {0x7, 0x10001, 0x3}]}) [ 344.473592] binder: 12600:12603 ioctl c0306201 200000c0 returned -14 [ 344.484470] binder: 12602:12606 ioctl 40046207 200000c0 returned -16 [ 344.514522] binder: 12608:12608 ioctl c0306201 0 returned -14 [ 344.527960] binder: BINDER_SET_CONTEXT_MGR already set 13:06:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x100000000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x6, 0xfffffffffffffffc}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000280)={0x2d15, 0x2, 0xfffffffffffffffc, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB="fe000000665bcc5caed285c5f395eb27d896a2ef03023a46601276dad5ec277883e9aa767b7cd5fe4edd65eaeeff68708283ab0bccc510da09d4502290542c7ffae5bc637060dbb2d048b50e8a2cc1b0d0ca1b1d738c5c5341dd29497dd6e2b675996d60eb3c8af2273d04d51549ce39a106aafc657cce67fc55ace3acf19afb392354fe6a5044546890ff2fa0753b50d7c8c2d26b677a488c1f7af8466513ce486b1fd384867c30ecd922c670d714e6dc3992bf202da26cb99927c123facc358a211dfb06a68c3e872ea046600b2960602d8d6222a296babde7ae3976cfa1d503a0ea0a8854b1a04db825c9bab12b337477a6a761fe3756a7cc8e3c640239"], &(0x7f0000000240)=0x106) 13:06:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x4800, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:06:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x7400, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 344.550115] binder: 12607:12609 ioctl 40046207 200000c0 returned -16 [ 344.558582] binder: 12608:12613 ioctl c0306201 200000c0 returned -14 13:06:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x0, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 344.662011] binder: BINDER_SET_CONTEXT_MGR already set [ 344.709823] binder: BINDER_SET_CONTEXT_MGR already set [ 344.714008] binder: 12618:12624 ioctl 40046207 0 returned -16 [ 344.727995] binder: 12626:12627 ioctl 40046207 200000c0 returned -16 [ 344.728117] binder: BINDER_SET_CONTEXT_MGR already set [ 344.740698] binder: 12625:12631 ioctl c018620b 0 returned -14 [ 344.748736] binder: 12628:12637 ioctl c0306201 0 returned -14 [ 344.765281] binder: 12628:12637 ioctl c0306201 200000c0 returned -14 [ 344.795466] binder: 12638:12638 ioctl c0306201 0 returned -14 [ 344.813863] binder: 12632:12635 ioctl 40046207 200000c0 returned -16 [ 344.826484] binder: 12638:12640 ioctl c0306201 200000c0 returned -14 13:06:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") inotify_init1(0x80800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0), 0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) openat(r0, &(0x7f0000000140)='./file0\x00', 0x131080, 0x34) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:06:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:06:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:06:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) pwritev(r0, &(0x7f0000001100)=[{&(0x7f0000000000)="8fe2adbc4c2bb8855029d6a644d851ce914bb011e9ba65d5169cba0c05b9872355fe1619370b6fa726ce93b9241de56be26ab0a1deace3fdb7", 0x39}, {&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="892453213ce33974ffec4f4be4775356eb4a1180e3632fc614909909732949b6b62c2f40ae4cd5447f4eb6c8036507ed1bf08f5bfed971102585381e8867c351e279b7ac218ca41e8d9523e78c4bb9e002e5b99b6bbf8c05e358cf6730fbc50b62cdbd1e0c", 0x65}], 0x3, 0x0) 13:06:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:06:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 345.073482] binder: 12652:12657 ioctl c0306201 0 returned -14 [ 345.074232] binder: BINDER_SET_CONTEXT_MGR already set [ 345.088694] binder: 12651:12658 ioctl c018620b 0 returned -14 [ 345.106605] binder: 12652:12657 ioctl c0306201 200000c0 returned -11 13:06:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x0, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:06:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x700000000000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 345.129780] binder: 12666:12666 ioctl c0306201 0 returned -14 [ 345.149001] binder: 12654:12655 ioctl 40046207 200000c0 returned -16 [ 345.149012] binder: BINDER_SET_CONTEXT_MGR already set 13:06:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000840)='/proc/capi/capi20ncci\x00', 0x101, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x100000001, 0xffffffffffffffc1, 0x100, 0x757, 0xff, 0x10000, 0x8001, 0x81, 0x8001, 0x10001, 0xffff, 0x8, 0x3f, 0xffff, 0x10020000000007b, 0x3], 0x10000, 0x200104}) sendmsg$tipc(r1, &(0x7f00000007c0)={&(0x7f0000000280)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x3}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000600)="dea2d7560236a2d83f64db62af85909fa401d2c1eb607a3cfd8aee587172e41f9e4858f217cd2275fbac63660191464ebdcfc68e5a07b95ae94da2ba9e25b4bf74f43fd148a93160703c5339f98bab82cbf564c81d17", 0x56}, {&(0x7f0000000680)="ab7abe155a1aacdb7e38d9738c9f7d401f94c1a106b2af6f1bfcf5164873a702bf095b54785517a13ab28b3c5e147ae4057ec6af625dfb917e2cf33de5b4ba9dde14196cf60d35957360c25ef19d74a5d0f32e50fc86c124416b12e1013b1a0dcbfba4f4ff6e31877f7e8ad02496e354b0dd8c10425fdfa9dffd74e89a0b02c87916c617b6ae6a068a135d29ef728b9d6c35e4204450a0c477a1031bcbbc7aedb5e3963cffe7c7e99ac2fac3bb1ce03992ae3ca91d791449ebd5b1a05e80dc00e770cd7baf30365fbe40c872a70111c3e116a8d3a4fea00ce2d170de0c09a7", 0xdf}], 0x2, &(0x7f0000000780)="28f1e0d52b374fc9ac0a4793f2fef6923700f27d7e7dae30aa8d1ead7b6878", 0x1f}, 0x4000040) ioctl(r0, 0x5, &(0x7f0000000300)="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") r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x800, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="410f3166440f38813ac40181e9411566baf80cb870cb5f89ef66bafc0cecc74424008b000000c744240200200000ff2c24440fa167fe4600660ff1d2f342af0fc7490d", 0x43}], 0x1, 0x2, 0x0, 0x0) epoll_wait(r2, &(0x7f00000000c0)=[{}, {}, {}], 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x80000, 0x0) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000440)={[], 0x2, 0x2, 0x7fff, 0x0, 0x6a, 0x0, 0x7000, [], 0x7}) 13:06:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400001, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000180)={0xce, &(0x7f0000000080)="fc262791a9c857204ebce46c5fd0c9d6fdff49c5fff8ace97d60d66474c90ec4489cf3c360588e3aab5030e864dcd74be94b336fad3846ef683c9885300caa07d594aaf104f689ebc29ff7440b4b2324a0152776e1963ec1253d61ba9a791bd477c14830ee72b8ad746cf9d29502060be065ebe96a54c24cf2b1423ce9fc6809109e3df15bc234c292e5ff479bb07b0cfb0207fbfabfea4b475bda387192a6645c72421a4d74d419a246608910dd8dc5cbac83e0cf2b8a5949430d9b25bff7b399f5fb021b3e41f2c6d465138124"}) lseek(r1, 0x43, 0x3) 13:06:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$void(r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x99a, 0x10000) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xeb) [ 345.210055] binder: 12653:12661 ioctl 40046207 0 returned -16 13:06:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 345.328882] binder: 12680:12682 ioctl c0306201 0 returned -14 [ 345.379388] binder: 12691:12695 ioctl 0 0 returned -22 13:06:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x0, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:06:03 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vfio/vfio\x00', 0x400801, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x81, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'veth0\x00', 0x4}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000240)={'bcsf0\x00', 0x100}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x2, 0x0, "3bdecb5f1d08d9989c766a601ea57e7a66c69890c1f9aa395e78277e83e8bd1238f0a28971e321020ea946082860d8d2ae7f89ebb7be13992706a9e5b48c30835417cd9b6047da7006131c222c853341"}, 0xd8) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 345.399663] binder: BINDER_SET_CONTEXT_MGR already set [ 345.412629] binder: 12686:12697 ioctl c018620b 0 returned -14 [ 345.453366] binder: 12692:12696 ioctl 40046207 200000c0 returned -16 [ 345.453940] binder: BINDER_SET_CONTEXT_MGR already set 13:06:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 345.497132] binder: 12691:12695 ioctl 40046207 0 returned -16 [ 345.503291] binder: BINDER_SET_CONTEXT_MGR already set [ 345.510624] binder: 12700:12709 ioctl c0306201 0 returned -14 [ 345.544271] binder: 12698:12703 ioctl 40046207 200000c0 returned -16 [ 345.551933] binder: BINDER_SET_CONTEXT_MGR already set [ 345.563451] binder: 12700:12709 ioctl c0306201 200000c0 returned -11 [ 345.576087] binder: 12691:12695 ioctl 0 0 returned -22 13:06:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x7a000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:06:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x0, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:06:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x18000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000080)) [ 345.592776] binder: 12700:12709 ioctl c0306201 0 returned -14 [ 345.613904] binder: 12691:12701 ioctl 40046207 0 returned -16 [ 345.631130] Unknown ioctl 21665 13:06:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x6f, 0x0, 0xfffffc37) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r1}) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000000c0)) [ 345.669056] binder: 12719:12725 ioctl c018620b 0 returned -14 13:06:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x48, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 345.782503] binder: BINDER_SET_CONTEXT_MGR already set [ 345.823838] binder: BINDER_SET_CONTEXT_MGR already set [ 345.831634] binder: 12738:12741 ioctl 40046207 200000c0 returned -16 13:06:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 345.870015] binder: 12750:12751 ioctl c0306201 0 returned -14 [ 345.878706] binder: 12734:12743 ioctl 40046207 0 returned -16 [ 345.878876] binder: BINDER_SET_CONTEXT_MGR already set [ 345.893070] binder: 12752:12753 ioctl c018620b 0 returned -14 13:06:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000040)) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000140)={{0xf000, 0x3000, 0x9, 0x3dad, 0x4, 0x8, 0x400, 0x2, 0x2, 0x7f, 0x5, 0xbdfa}, {0xd000, 0x6000, 0x0, 0x7f, 0x10001, 0x4, 0x401, 0xfffffffffffffff8, 0x8, 0x163, 0x5, 0x5}, {0x107000, 0x3002, 0x0, 0x200, 0xfffffffffffffffe, 0x67, 0x3ff, 0xd14, 0x4, 0x80000000, 0x85, 0x63}, {0x10d000, 0x105000, 0xd, 0x3, 0xffe, 0xffffffffffffff65, 0x0, 0x200, 0x3c, 0x2, 0x8, 0x8dc1}, {0x1d000, 0x4, 0xc, 0x200, 0x9, 0x2, 0xbcd, 0x3, 0x0, 0x0, 0x1000, 0xffffffff}, {0x1, 0x1, 0xd, 0x4, 0x1, 0x1, 0x24c, 0x0, 0x7ff, 0x1, 0x80, 0x4}, {0xd000, 0x5000, 0x3, 0x5, 0x8000, 0x101, 0x2, 0x80, 0x1000, 0x8, 0x7, 0xfffffffffffffffc}, {0x10d000, 0xd000, 0x8, 0x4, 0xccad, 0xffff, 0x4, 0x1, 0x8001, 0x9b, 0x200, 0x10001}, {0x6, 0xf001}, {0x10f005}, 0x10000, 0x0, 0x7000, 0x8, 0x9, 0x8000, 0xf001, [0xfff, 0x7d681e34, 0x4fb, 0xffff]}) 13:06:03 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400001, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000100)=0x5) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) clone(0x2000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, 0x0) [ 345.920759] binder: 12750:12751 ioctl c0306201 200000c0 returned -11 [ 345.958554] binder: BINDER_SET_CONTEXT_MGR already set [ 345.963963] binder: 12742:12744 ioctl 40046207 200000c0 returned -16 13:06:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x7a, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:06:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 345.993381] binder: 12750:12751 ioctl c0306201 0 returned -14 [ 345.996499] binder: 12734:12749 ioctl 40046207 0 returned -16 13:06:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x48, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x5, 0x0, "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", 0x8a, 0x4, 0x40, 0x6, 0xf2, 0x7ff, 0xffffffff, 0x1}, r2}}, 0x120) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:06:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x20205, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 346.187830] binder: BINDER_SET_CONTEXT_MGR already set 13:06:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x100, 0x0) getpeername$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)=""/241) 13:06:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x100000000000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 346.249362] binder: 12776:12780 ioctl 40046207 200000c0 returned -16 13:06:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 346.296801] binder: 12785:12790 ioctl c0306201 0 returned -14 [ 346.303595] binder: BINDER_SET_CONTEXT_MGR already set 13:06:04 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x240002, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000180)={'bond_slave_1\x00', 0x1000000}) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000280)=[0xee00, 0xee00, 0xee01, 0xee01, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff]) r5 = getgid() r6 = getegid() getgroups(0x6, &(0x7f00000002c0)=[0xffffffffffffffff, 0xee00, 0xee00, 0xee01, 0x0, 0xee00]) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) r9 = getgid() r10 = getegid() fstat(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0xa, &(0x7f0000000500)=[r3, r4, r5, r6, r7, r8, r9, r10, r11, r12]) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='bic\x00', 0x4) [ 346.349545] binder: 12783:12792 ioctl 40046207 0 returned -16 [ 346.363243] binder: 12785:12790 ioctl c0306201 200000c0 returned -11 13:06:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000080)) [ 346.402408] binder: BINDER_SET_CONTEXT_MGR already set [ 346.422287] binder: 12785:12790 ioctl c0306201 0 returned -14 [ 346.436249] binder: 12793:12793 ioctl 40046207 0 returned -16 [ 346.436260] binder: BINDER_SET_CONTEXT_MGR already set 13:06:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3a6, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 346.449005] binder: BINDER_SET_CONTEXT_MGR already set [ 346.454299] binder: 12808:12809 ioctl 40046207 200000c0 returned -16 13:06:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:06:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, r2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/189) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:06:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x2000000000000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 346.537527] binder: 12800:12807 ioctl 40046207 200000c0 returned -16 [ 346.544597] binder: 12818:12819 ioctl c018620b 0 returned -14 13:06:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2, &(0x7f0000000240)="02dc17023c123f3188a041762d5c1578d047359078227525e78e032e8762") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000040)) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000140)={0x5, 0x0, [{0x80000008, 0x7, 0x2, 0x85af, 0x8, 0x3, 0x7}, {0x0, 0x8, 0x5, 0x6, 0x1, 0x0, 0x6}, {0x8000000f, 0x4, 0x2, 0x9, 0x100000000, 0x9, 0x6ae04e78}, {0x6, 0x6, 0x4, 0x6, 0x101, 0x6, 0x5}, {0xc0000001, 0x7fc00000, 0x2, 0x3ff, 0x4, 0x1, 0x57}]}) [ 346.643267] binder: 12823:12824 ioctl c0306201 0 returned -14 13:06:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x31, 0x0, @thr={&(0x7f0000000080)="783b2a8efa526f22f8b00bcad90dc04e6e46e6ad5e390b2887510827d63920cfeee8473b0977289425a30999593183be6ad4f8a0a2b3b9bd39cfac15e530ed7b8c8a89d1f234857491ac8a1dfbf66d1381937fda4de1ab3ae7c060d82a9d08929f728761faedffbb7f22290814d7e41e0f265c8ccad608b68dcf14", &(0x7f0000000100)="d874435f997113792a135a361d65da247d7118a88d42d3a81fd2f525df8cc4ef086b1a6d63e3642efbb4d9df01dd145ea31fdf8561b664febb7786b3b0bc33ebc4d7ba6969ed897c8912f0bfde813fd8c7c6e05261aaf447141d95187b79bb7e2ddb5773d2368b59d4f11f629c01c4653ca25f8e39127f0835d576041f67db2cb4ddb5b66d87dd4e1df20dbdbdbd6c7ae5226574a3349f998f607ebbe4cd5dbf0c07ea1ec2f2a961410723473c546f31135840808fac987cb942e29978223c"}}, &(0x7f00000001c0)=0x0) timer_delete(r1) [ 346.692699] binder: BINDER_SET_CONTEXT_MGR already set [ 346.712718] binder: 12823:12824 ioctl c0306201 200000c0 returned -11 13:06:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x7ff, 0x123600) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x0, 0xe, 0x4, 0x70000, {}, {0x3, 0x0, 0x8, 0x100, 0x8, 0x1, '*H^L'}, 0x7, 0x3, @fd=r2, 0x4}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6000, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000080)={0x0, 0x0, @stop_pts=0x1e}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:06:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 346.738752] binder: 12827:12831 ioctl 40046207 0 returned -16 [ 346.749556] binder: BINDER_SET_CONTEXT_MGR already set [ 346.780723] binder: 12823:12824 ioctl c0306201 0 returned -14 [ 346.797927] binder: 12836:12838 ioctl 40046207 200000c0 returned -16 13:06:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f00000001c0)={0x10, 0x0, 0x8}, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10803, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000140)={0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xc, 0x40000) sync_file_range(r1, 0x6, 0x2, 0x3) 13:06:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x500000000000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:06:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 346.925386] binder: BINDER_SET_CONTEXT_MGR already set 13:06:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x25, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001540)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000001640)=0xe8) r5 = getgid() r6 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001680)={0x0, 0x0}, &(0x7f00000016c0)=0xc) r8 = getgid() openat$vim2m(0xffffffffffffff9c, &(0x7f0000001d80)='/dev/video35\x00', 0x2, 0x0) r9 = getpgid(0x0) r10 = getuid() r11 = getgid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001780)={0x0, 0xffffffffffffff9c, 0x0, 0xf, &(0x7f0000001740)='/dev/sequencer\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000017c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000018c0)=0xe8) fstat(r0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000001980)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000019c0)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000001ac0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001b00)={0x0, 0x0, 0x0}, &(0x7f0000001b40)=0xc) fcntl$getownex(r0, 0x10, &(0x7f0000001b80)={0x0, 0x0}) r20 = getuid() fstat(r0, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000001d40)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0xaf32443559e042d}, 0xc, &(0x7f0000001500)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r2], 0x13b4}], 0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2000000000000000010000fd1600000086b7d2fb13a684c3d823303a6c5ef1f4a285343e5c786d24fb8d2b4e682f36394043e0033504e338b9bcfd3a8f95de283e", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r12, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB='\x00\x00\x00\x00'], 0x100}, 0x0) r22 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r22, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 346.990072] binder: BINDER_SET_CONTEXT_MGR already set 13:06:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 347.053897] binder: 12859:12858 ioctl 40046207 0 returned -16 [ 347.060384] binder: BINDER_SET_CONTEXT_MGR already set [ 347.071431] binder: 12854:12855 ioctl 40046207 0 returned -16 [ 347.081299] binder: 12868:12869 ioctl c0306201 0 returned -14 [ 347.088403] binder: 12862:12872 ioctl 40046207 200000c0 returned -16 [ 347.095735] binder: 12868:12869 ioctl c0306201 200000c0 returned -11 13:06:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x4c00000000000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:06:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 347.132792] binder: 12868:12869 ioctl c0306201 0 returned -14 13:06:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3bc, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 347.225906] binder: BINDER_SET_CONTEXT_MGR already set [ 347.270886] binder: 12885:12889 ioctl 40046207 0 returned -16 13:06:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setns(r1, 0x50000000) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000016c0)={0x7fffffff}) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000001780)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000001680)=@assoc_value, &(0x7f0000001740)=0x2e) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001800)=0x0) ioprio_set$pid(0x1, r4, 0x5) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000001600)={0x53, 0xffffffffffffffff, 0xca, 0x8, @scatter={0x8, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/137, 0x89}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/61, 0x3d}, {&(0x7f00000002c0)=""/16, 0x10}, {&(0x7f0000000300)=""/64, 0x40}, {&(0x7f0000000340)=""/59, 0x3b}, {&(0x7f0000000380)=""/186, 0xba}]}, &(0x7f00000004c0)="42c11179839747b4ee92d8ff9c095a0272056f098179a00d23bc4ec89c828bd9db72677f9135d7148a2659fdeef234df70897f5429e3a2369371a5018eae9dba39cb7565da01e87a34bb4614f999ce7fd0f8f552a99ad9332e8ff8f88cbafbca82416f57569fdd8091a4899e9459ecad2b2bd90894569ecb2ab2510cb3c403f40b34b6fc09059f259e0d6464e6642f57f728767f88d69a3d054ca99d0038dd47c045744b444af074f09f94fedf23a944a5b6c4cbda7c8fda0a28399a9bc68aa41fcac77b532c9fd0620d", &(0x7f00000005c0)=""/4096, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000015c0)}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000018c0)={0x80, 0x2, 0x0, 0x3, 0x2, [{0xfffffffffffffff7, 0x80, 0x4b2, 0x0, 0x0, 0x8}, {0x7, 0xd166, 0xb97, 0x0, 0x0, 0x200}]}) ioctl$BINDER_WRITE_READ(r5, 0xc018620b, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000017c0)=ANY=[@ANYBLOB="6807def8fc52be66", @ANYRES32=0x0], &(0x7f0000001700)=0x8) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000001840)={{0xa, 0x4e20, 0x0, @remote, 0x7f}, {0xa, 0x4e21, 0x5, @ipv4={[], [], @broadcast}, 0x9}, 0x0, [0x200, 0x20, 0x4, 0x6, 0x101, 0x7fff, 0x1, 0x3]}, 0x5c) arch_prctl$ARCH_GET_CPUID(0x1011) 13:06:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x40000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000200)={0x6, 0x7, 0x0, 0x0, 0xf}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000280)=0x7) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) accept4$unix(r2, &(0x7f0000000140)=@abs, &(0x7f0000000040)=0x6e, 0x800) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) 13:06:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x7) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:06:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 347.908956] binder: BINDER_SET_CONTEXT_MGR already set 13:06:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6}}}, 0x90) [ 347.947477] binder: 12901:12904 ioctl 40046207 0 returned -16 13:06:05 executing program 2: syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 348.021770] binder: BINDER_SET_CONTEXT_MGR already set 13:06:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x7000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 348.066943] binder: 12901:12909 ioctl 40046207 0 returned -16 13:06:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) dup2(r0, r0) 13:06:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x300, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:06:06 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)={0x2ac, r1, 0x70e, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xd8, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9e3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54bc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffa82}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'eql\x00'}}]}, @TIPC_NLA_LINK={0xec, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x25e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2ad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ccd}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x78, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7d3e, @mcast1, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x10, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x10}, 0x4000050) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a80)={&(0x7f0000000a40)='./file0\x00', r0}, 0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="8700000029020065240000020100000005000000000000000200000000000000ff07002e2f66696c65304003000000080000000000000003000000000000000507002e2f66696c653011040000000400000000000000ff7f0000000000000807002e2f66696c65301504000000000000000000000009000000000000000307002e2366696c6530ca0166875ca45a39a2b8364853c9c57b4663876e439b56960db179af4a2c350b4ab926540d592539acb3ae2087d209775b2978227ed0ca076ce51c3278651199cfbaa5"], 0x87) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000140)=""/173, 0xad}, {&(0x7f0000000200)=""/111, 0x6f}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/140, 0x8c}, {&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f00000000c0)}, {&(0x7f0000000400)=""/117, 0x75}, {&(0x7f0000000480)=""/82, 0x52}], 0x8) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 348.282275] IPVS: ftp: loaded support on port[0] = 21 [ 348.312053] binder: BINDER_SET_CONTEXT_MGR already set 13:06:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}}}, 0x90) [ 348.336679] binder: 12924:12925 ioctl 40046207 0 returned -16 [ 348.338388] binder: BINDER_SET_CONTEXT_MGR already set [ 348.359749] binder: 12927:12929 ioctl 40046207 0 returned -16 [ 348.467981] IPVS: ftp: loaded support on port[0] = 21 [ 348.604344] IPVS: ftp: loaded support on port[0] = 21 [ 348.656424] chnl_net:caif_netlink_parms(): no params data found [ 348.802832] chnl_net:caif_netlink_parms(): no params data found [ 348.821440] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.827907] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.836583] device bridge_slave_0 entered promiscuous mode [ 348.847855] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.854321] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.862447] device bridge_slave_1 entered promiscuous mode [ 348.915822] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 348.931696] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.938763] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.945792] device bridge_slave_0 entered promiscuous mode [ 348.953246] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.960341] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.967325] device bridge_slave_1 entered promiscuous mode [ 348.983032] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 349.005047] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 349.012720] team0: Port device team_slave_0 added [ 349.063917] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 349.072443] team0: Port device team_slave_1 added [ 349.079985] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 349.087876] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 349.106818] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 349.124060] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 349.200437] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 349.207995] team0: Port device team_slave_0 added [ 349.281630] device hsr_slave_0 entered promiscuous mode [ 349.308846] device hsr_slave_1 entered promiscuous mode [ 349.349182] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 349.356126] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 349.363732] team0: Port device team_slave_1 added [ 349.372351] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 349.384800] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 349.396330] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 349.410508] chnl_net:caif_netlink_parms(): no params data found [ 349.501755] device hsr_slave_0 entered promiscuous mode [ 349.548862] device hsr_slave_1 entered promiscuous mode [ 349.621692] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.628053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.634732] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.641134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.655891] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 349.665182] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 349.717854] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.724450] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.733101] device bridge_slave_0 entered promiscuous mode [ 349.742200] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.748605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.755208] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.761629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.771137] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.777503] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.785707] device bridge_slave_1 entered promiscuous mode [ 349.792677] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.800241] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.808352] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.815586] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.867810] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 349.877710] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 349.914844] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 349.922593] team0: Port device team_slave_0 added [ 349.930235] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 349.937650] team0: Port device team_slave_1 added [ 349.951328] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 349.964265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.972032] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 350.011455] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 350.061690] device hsr_slave_0 entered promiscuous mode [ 350.098996] device hsr_slave_1 entered promiscuous mode [ 350.180166] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 350.186653] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 350.214917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 350.222069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 350.233590] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 350.240227] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.246683] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 350.269129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.294059] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 350.303823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 350.316231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 350.324035] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.330430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.343245] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 350.373387] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 350.381661] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 350.390675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 350.399920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 350.407582] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.413999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.422676] device bridge_slave_1 left promiscuous mode [ 350.428153] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.490630] device bridge_slave_0 left promiscuous mode [ 350.496069] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.550630] device bridge_slave_1 left promiscuous mode [ 350.556117] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.599350] device bridge_slave_0 left promiscuous mode [ 350.604779] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.650465] device bridge_slave_1 left promiscuous mode [ 350.655930] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.699455] device bridge_slave_0 left promiscuous mode [ 350.704941] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.913637] device hsr_slave_1 left promiscuous mode [ 350.964548] device hsr_slave_0 left promiscuous mode [ 351.024272] team0 (unregistering): Port device team_slave_1 removed [ 351.035488] team0 (unregistering): Port device team_slave_0 removed [ 351.046446] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 351.085795] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 351.187758] bond0 (unregistering): Released all slaves [ 351.311957] device hsr_slave_1 left promiscuous mode [ 351.354530] device hsr_slave_0 left promiscuous mode [ 351.394186] team0 (unregistering): Port device team_slave_1 removed [ 351.405118] team0 (unregistering): Port device team_slave_0 removed [ 351.416172] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 351.456987] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 351.555479] bond0 (unregistering): Released all slaves [ 351.663577] device hsr_slave_1 left promiscuous mode [ 351.704258] device hsr_slave_0 left promiscuous mode [ 351.741884] team0 (unregistering): Port device team_slave_1 removed [ 351.754938] team0 (unregistering): Port device team_slave_0 removed [ 351.765664] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 351.804251] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 351.901333] bond0 (unregistering): Released all slaves [ 352.009009] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 352.027326] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 352.033853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 352.042537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 352.051129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.060789] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 352.068878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 352.078227] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 352.085296] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.095792] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 352.105573] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 352.113102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 352.121545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 352.129799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 352.137506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.145237] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.151666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.172749] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 352.180152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 352.190217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 352.198164] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 352.223762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.233840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 352.244258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 352.252968] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 352.260700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 352.269549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.277251] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.283696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.294176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 352.301982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 352.312026] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 352.322158] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 352.330113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 352.338282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 352.346445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 352.356917] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 352.367188] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 352.374225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 352.382930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 352.390652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.404230] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 352.410766] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.418633] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 352.424680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 352.434669] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 352.444975] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 352.456029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 352.464873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 352.473278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 352.483314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 352.491774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.500057] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.506400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.513851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 352.522399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.530449] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.536792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.543965] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 352.551205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 352.564167] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 352.577885] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 352.584880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 352.597193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 352.610841] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 352.629553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.636319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 352.644377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 352.653596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 352.664281] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 352.677817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 352.697833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 352.715483] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 352.730833] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 352.742315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.756080] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 352.763416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 352.771776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 13:06:10 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x8000) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x14040600, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, 0x0) 13:06:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup(r0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000000)={0x1, 0x7, [@remote, @dev={[], 0x13}, @broadcast, @empty, @random="856a23c405fd", @remote, @dev={[], 0xc}]}) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000100)=""/246, &(0x7f0000000200)=0xf6) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080)) 13:06:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}}}, 0x90) 13:06:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pwritev(r0, &(0x7f0000000a00)=[{&(0x7f0000000380)="baf6af9f270cce203e166d457e85d7f3c02ef27cb38a890f3f674929dacee7e9a46fbbc7931db38afd59d02a93543010b9dc94e597b47bb1aa0553fdabad7211e7ed04ee32205bb6cf4c26d54f801b7b73b88a5bd41742575d06c0f9f99b51fa1bf10d3b097de5715b6bb559b00b4ad2002ece69f76f04", 0x77}, {&(0x7f0000000400)="161eea931d7b44ada0dfb3b06167e0750d3878f7fa595ac1ff849a9dc50ae711c97809abc55f313060fdcaf50fbc93c4a02e7c2e384cdabf1e4d60cd4bc5b8a4ae0d32f5d4ef2bd279ca3fd5ada63ec52f3cfd692bf9f044689622835d99858e2ee646c27e836bf91c5db0449693c4edce86d72f692b9f3de8e1a9945bb53c86e1beac8205a114acdf88d325cea191d0696e8d3e2dc851081ccbb2d043c674f4ebfbe7da32d095c1cdfe10409ee87ce25a305079dee13589e4c3cebb4380bdc60ad84927ef93dcb1fe3023e4d4e9ed95fdfc", 0xd2}, {&(0x7f0000000500)="28c7db084f91eb9dedff4549553df2b2f3ce2fb465a43f37daa3aa092056703f7f071da6da24acf152f320f547dcfe943d3ce84dee2b2505f174a764c6bfd39f5b949322d3b5ff3891ca93116d2d57d0d8b10a72b6d6456c26a2cd6314e98e28994d4d18eb580d35a957f6c0b8732273cde332558433eb70d80b80b62e1711814cc4704f60f03b0cff7aba3520b7b5a5a1da2a793d43193e8ac4b350b29f0c316b053529806150137c020178c377978ce7a56cb633d9a1b78c4b9fc7e3c8c0f719a0cbe204870eda247cec9b83f7612d095498a2050ce1984c5f75f1ee5d46ea93", 0xe1}, {&(0x7f0000000600)="1fde33044efc208eab6d7d5af291dcfe1e093e1e41541c289e480b6e3968660cb65300d335cba7be71a31a759b1f767b2f5b5f0bdb036d8bc7db14e67222c1ab68ef2d4f7642ecd3e4ef3d59e3eec2e539f8d736eeacc34b899b0d0f", 0x5c}, {&(0x7f0000000680)="cde4a3a6d6aff6c7a4107432e58648988254f410b508def06860ed48d243903b6647cd199dca2d62c75cb03b89438b5a8821683e7e90150d5071c4bef573fcb29c4df3373f89ab219fa0c2348cc5f96550021151a3ed7487f2ad17b20f0063d9ae13da0923269b8d2c595d646b639b6633f475710da641a330f5f2afe367a6c4b9170024667030faacf9d89daf22eb199521d935b419e9ac2998ec235b1d4dbd2ec5896a7b1ddb8e5c37b0dbca568c87b90d6475c6c93bcaa666dad7a9f92f7abea7b365f35bc836dbd4214dac83e648ee", 0xd1}, {&(0x7f0000000780)="a2640634154cafd1e3c7a43b412d009f2680d0ef6873a20de57b33efbfbca98e16", 0x21}, {&(0x7f00000007c0)="1d245ecd1f8f6dd385b3f43b58f4b4b79c95b08ba0ebff1801f1c87790c444f4c42a0e555aac6251e7134091feb54e2846a653a03ca17245a10a8605f4417536831ecdefba90613135adcd599071b10b542c7058fc315c49a1c772f828b3310fe85e74619020591c38050149e36d8086f42004e78ac00ad58f85594730c6f3fea215e885feb9b0b4518c01aa1a659d025ba317657dc799fc48ec0271", 0x9c}, {&(0x7f0000000880)="e728c40a5aea74933a7a855de6342ed31ecce04e92c43548c7fa72dec7f43fd12b40fb44e246d08cb5071b5e77f1c9cab38e1efd67be4e65e5ad97486af13ffa8f19a39418664d4ec84c76edb6451f51a1b70caddddb375f47414e0f98eb85f6c2ddc5ba8da050d7900e9eefaedc12ece8488aa1b8bfb06b6cf28ef2127dac10dc55e5a01ec409520bcf54f19bad5b6b0365684584f17923dd8143734b6d0122daf021bb39125e621ead9038d57c362d481a725b27d3a953476a2d8404483d35fc94f03a7fa615032a2e446e49a81f7bd61f5c9059e8d8b9db712c16b752c15ee9e6e269d72b1bfc701c5d9ef6125d29", 0xf0}, {&(0x7f0000000980)="5172c9891339d6b9ca803b3072ed731f620cd9797935493c2342fba8949088ebf9971fe4d9e43d8bd700d3a9b6c5cbe4935d92270ff6dad57c02ee90cdfd859e5fb045e236bfaa7c8c6b1d326dfaa980cde1", 0x52}], 0x9, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @multicast1}, &(0x7f00000000c0)=0xc) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)="8733da4e251c12a937f854b6d58da25cadf9a1009e0b948d135f6da3f3e7269f0ffa4be57508062725cd32c8b0071f949b62cbf7229b3e4d1f6d3beaf8a9885234b5b6f31a4aa3b97d914976fc2f67a331d753bbfcda486b20974c4c035f5c76a42e0c02b4cde9a2746d81c48a92834d88f26ae81e20c12d95ed1f8e91b0a0e90b3d194f7532d64c872f62b29c5ff5dfd8dd57afb1b652abcf6098e6524b71857dd4ee1be88a5a423f9a9b63fc1745a5449597589665e58aa38c45c712800ade8b78d4457ce726fc3752", 0xca}, {&(0x7f00000002c0)="f07bb73b75e03934d5adf6bb2c2a2ec283b8c66fed81c9306304a0cee66f3d8bf5f1bf5d7e79cc794af7f722309662400109147414ffb63525ff3ab556db5bca1989d3efdb8c479ae9412fc7089900fd02625e0f6099c69b52e022c3b013a3ab503c2de014afa77439457063fed35e", 0x6f}], 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="400f01f80f1c93c43e00002e260f3566baf80cb8cca68286ef66bafc0c66b8000066efb9150101c0b800680000ba000000000f30c4417950e7650fc7ad00000000440fc0680d460f01cb66b814008ee0"}], 0x0, 0x0, 0x0, 0xfffffffffffffed1) [ 352.780717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 352.798792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 352.806815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 352.848905] binder: 12958:12963 ioctl 400454d1 20000000 returned -22 [ 352.869702] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 352.883551] binder: 12958:12963 ioctl 2284 0 returned -22 [ 352.890742] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 13:06:10 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x3b, @multicast1, 0x4e20, 0x0, 'wlc\x00', 0x8, 0x2, 0x2b}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 352.905270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 352.912406] binder: 12966:12968 ioctl c018620b 0 returned -14 [ 352.917839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 352.920060] binder: 12966:12969 ioctl c018620b 0 returned -14 [ 352.938287] binder: BINDER_SET_CONTEXT_MGR already set [ 352.941287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 13:06:10 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000880)='/proc/capi/capi20\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000008c0)={0x0, 0x8000}, &(0x7f0000000900)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000940)={r1, 0x8, 0xfff}, 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x181201, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x8, 0x3, @loopback, 0x8}}, [0x0, 0x300000, 0x2, 0x10000, 0x2, 0x9, 0x69cc, 0x8, 0x6, 0x6, 0x3f, 0x7, 0x2, 0x87, 0xffff]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0x27}, 0x5}}, [0x866, 0x4, 0x98d, 0x2, 0x80000001, 0x13e4, 0x1, 0x7fffffff, 0x1f, 0x4, 0x7, 0x3, 0x58f, 0x0, 0x4]}, &(0x7f00000002c0)=0x100) ioctl$BINDER_WRITE_READ(r2, 0xc018620b, 0x0) [ 352.961286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 352.972820] binder: 12958:12964 ioctl 40046207 0 returned -16 [ 353.019237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.050367] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 353.067152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.134343] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 353.159728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 353.169211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.205301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.310822] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 353.371800] 8021q: adding VLAN 0 to HW filter on device batadv0 13:06:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x2000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:06:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000080)) [ 353.433443] binder: BINDER_SET_CONTEXT_MGR already set [ 353.439925] binder: 12997:12999 ioctl 40046207 200000c0 returned -16 [ 353.447145] binder: BINDER_SET_CONTEXT_MGR already set [ 353.455930] binder: 13000:13002 ioctl 40046207 200000c0 returned -16 [ 353.497006] binder: 13005:13006 ioctl c018620b 0 returned -14 [ 353.526499] binder: 13005:13011 ioctl c018620b 0 returned -14 [ 353.533884] binder: BINDER_SET_CONTEXT_MGR already set [ 353.539775] binder: 13010:13013 ioctl 40046207 200000c0 returned -16 13:06:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x63, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0xc0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x100, 0x7, {0x0, 0x1f, 0xab7, 0x7fff}}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 13:06:11 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f00000000c0)={0x1b}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) bind$bt_l2cap(r0, &(0x7f0000002200)={0x1f, 0x2, {0x0, 0x1a00, 0x4, 0xffff, 0x9, 0x20}, 0x5, 0x7}, 0xe) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000180)={0x0, 0x0, 0x2080}) 13:06:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}}}, 0x90) 13:06:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x3a, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:06:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r2, 0x7, 0x3ff}, &(0x7f00000001c0)=0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40, 0x0) r3 = getpgid(0x0) waitid(0x1, r3, &(0x7f0000000200), 0x80000003, &(0x7f0000000280)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f00000000c0)) [ 353.549760] binder: 13009:13015 ioctl c0306201 0 returned -14 [ 353.556534] binder: 13009:13015 ioctl c0306201 200000c0 returned -11 [ 353.602351] binder: BINDER_SET_CONTEXT_MGR already set [ 353.647521] binder: 13020:13021 ioctl 40046207 0 returned -16 [ 353.649077] binder: 13028:13031 ioctl c018620b 0 returned -14 [ 353.686387] binder: BINDER_SET_CONTEXT_MGR already set 13:06:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$tipc(0x1e, 0x4, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:06:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 353.704723] binder: BINDER_SET_CONTEXT_MGR already set [ 353.711972] binder: 13029:13034 ioctl 40046207 200000c0 returned -16 [ 353.718728] binder: 13020:13022 ioctl 40046207 0 returned -16 [ 353.743716] binder: 13035:13043 ioctl c0306201 0 returned -14 [ 353.749391] binder: BINDER_SET_CONTEXT_MGR already set 13:06:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 353.755100] binder: 13020:13021 ioctl 40046207 0 returned -16 [ 353.784369] binder: BINDER_SET_CONTEXT_MGR already set 13:06:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x2, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 353.807316] binder: 13035:13043 ioctl c0306201 200000c0 returned -11 [ 353.808953] binder: BINDER_SET_CONTEXT_MGR already set [ 353.819706] binder: 13020:13037 ioctl 40046207 0 returned -16 [ 353.839117] binder: 13036:13039 ioctl 40046207 200000c0 returned -16 13:06:11 executing program 4: syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x80) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:06:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 353.865670] binder: 13050:13055 ioctl c018620b 0 returned -14 13:06:11 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={0xffffffffffffff9c}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0xad, @mcast1, 0x4}, @in={0x2, 0x4e22, @rand_addr=0x81}, @in6={0xa, 0x4e23, 0x6}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e23, 0xfffffffffffffffb, @local, 0x8}], 0x84) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000080)={0x7, "9abafceb3a4502a26aa7d533f0dae8064c9326939cb610776544cd7a46b9cd55", 0xc08, 0x2, 0xfff, 0x2, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, 0x0) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x2) 13:06:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 13:06:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000880)='/dev/dsp\x00', 0x7229d90c0942820d, 0x0) r2 = getuid() fstat(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000940)={0xa0, 0x3ebd98d0be32b567, 0x1, {{0x3, 0x2, 0x4, 0x401, 0x1, 0x80000001, {0x5, 0x1, 0x5, 0x3, 0xffff, 0x1, 0x4, 0x56e, 0x1, 0xe845, 0x200, r2, r3, 0xfffffffffffffff7, 0xcaeb}}, {0x0, 0x5}}}, 0xa0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000780)='/dev/rtc0\x00', 0x400, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x18, &(0x7f00000007c0), &(0x7f0000000800)=0x4) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x558, 0x330, 0x0, 0x0, 0x470, 0x470, 0x470, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:modules_object_t:s0\x00'}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x10}, 0xffffffff, 0xff000000, @mac, {[0xff, 0x0, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, 0x7ff, 0x5d0a, 0x8, 0x7, 0xff, 0x100000001, 'veth1_to_bond\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x8}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@local, @broadcast, 0xff000000, 0x0, @mac=@local, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}, @mac, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}, 0x4, 0x8001, 0xffffffffbe8f1707, 0xff, 0x1, 0x20, 'syzkaller1\x00', 'rose0\x00', {0xff}}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @multicast1, 0xf, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x5a8) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000840)='tls\x00', 0x4) getsockname$ax25(r5, &(0x7f0000000140)={{0x3, @rose}, [@default, @null, @default, @rose, @remote, @bcast, @null, @rose]}, &(0x7f0000000040)=0x48) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 354.016080] binder: 13059:13065 ioctl c0306201 0 returned -14 [ 354.031442] binder: BINDER_SET_CONTEXT_MGR already set [ 354.054770] binder: BINDER_SET_CONTEXT_MGR already set [ 354.057022] binder: 13068:13070 ioctl c018620b 0 returned -14 13:06:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000240)={{r1, r2+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000280)) 13:06:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000240)={{0x9, 0x3b800}, 0x0, 0x81, 0x200, {0x9, 0x1}, 0x3, 0x401}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x14403, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x4, 0x200, 0x3, 0x7, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYBLOB="01016909001742d4764006b47dd7e4f31be82697677509848e8474908a2e9f3db323e6707448acbb82d8a194e6e80000000000000000fed5de6708afe8c3f7a5f40cec6149d424f9bcfdbec8ffd9cf276c48fec8bfa9c06df1421c8603fda3aced8faf3670b67c46d3182337ac3cdfff0300004f9be9918385d581b8a5964425d6815f88e1f2ff95e4cf1f030c90ef97da86f9da2967105dc066d8c915fe2b6084337e75bf0d17e93a2637a39eae0e584c06c18f4eb227e2c048471b4d78227432ab3ea5d0c6b0d0f901365a307b6157c8ba692ee1e4ff23697f0000000200000000"], 0x71) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 354.060636] binder: 13062:13063 ioctl 40046207 0 returned -16 [ 354.078506] binder: 13059:13065 ioctl c0306201 200000c0 returned -11 [ 354.097294] binder: 13061:13074 ioctl 40046207 200000c0 returned -16 [ 354.103572] binder: 13059:13065 ioctl c0306201 0 returned -14 [ 354.154767] binder: BINDER_SET_CONTEXT_MGR already set 13:06:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 354.179156] binder: 13061:13091 ioctl 40046207 200000c0 returned -16 13:06:12 executing program 3: 13:06:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x9, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 354.226359] binder: BINDER_SET_CONTEXT_MGR already set 13:06:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x8000000000000006) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x250000) r2 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18) inotify_rm_watch(r1, r2) [ 354.273544] binder: 13092:13095 ioctl 40046207 0 returned -16 13:06:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 13:06:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x68002) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x28) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000240)=""/224) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23, 0xfffffffffffffff8, @mcast1, 0x4ad}}}, 0x84) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) 13:06:12 executing program 3: [ 354.358918] binder: 13097:13101 ioctl c018620b 0 returned -14 [ 354.390030] binder: 13107:13110 ioctl c0306201 0 returned -14 [ 354.460439] binder: BINDER_SET_CONTEXT_MGR already set [ 354.468778] binder: 13107:13110 ioctl c0306201 200000c0 returned -11 [ 354.491170] binder: BINDER_SET_CONTEXT_MGR already set [ 354.497195] binder: 13107:13110 ioctl c0306201 0 returned -14 [ 354.499212] binder: 13097:13119 ioctl c018620b 0 returned -14 [ 354.505538] binder: 13111:13123 ioctl 40046207 0 returned -16 13:06:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) clone(0xa80001fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) socket$unix(0x1, 0x7ffff, 0x0) 13:06:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3d1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000140)=""/123) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 354.539186] binder: 13113:13121 ioctl 40046207 200000c0 returned -16 13:06:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:06:12 executing program 3: [ 354.690687] binder: BINDER_SET_CONTEXT_MGR already set [ 354.717496] binder: 13113:13142 ioctl 40046207 200000c0 returned -16 [ 354.728345] binder: 13139:13140 ioctl c018620b 0 returned -14 [ 354.739982] binder: 13143:13144 ioctl c0306201 0 returned -14 13:06:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x22050100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xff, 0x101000) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000080)={0x200, 0x7fff, 0x3}, 0xc) [ 354.769676] binder: BINDER_SET_CONTEXT_MGR already set [ 354.783995] binder: 13149:13155 ioctl c018620b 0 returned -14 [ 354.785283] binder: 13143:13144 ioctl c0306201 200000c0 returned -11 [ 354.798558] binder: 13146:13153 ioctl 40046207 0 returned -16 13:06:12 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:06:12 executing program 3: [ 354.822948] binder: 13157:13157 ioctl c0306201 0 returned -14 13:06:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x7ffffff9, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 354.937852] binder: 13163:13167 ioctl c018620b 0 returned -14 13:06:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x6c, 0xfdfdffff00000000, 0x0}) 13:06:12 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@empty, 0x30, r1}) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r2, 0x40046207, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x1000000, 0xd9, 0x5}, 0xc) [ 355.001950] binder: 13163:13173 ioctl c018620b 0 returned -14 13:06:12 executing program 3: [ 355.043578] binder: BINDER_SET_CONTEXT_MGR already set [ 355.051475] binder: 13174:13179 ioctl c0306201 0 returned -14 13:06:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x3, 0x30001) renameat(r1, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00') ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 355.093051] binder: 13174:13179 ioctl c0306201 200000c0 returned -11 [ 355.108527] binder: 13175:13177 ioctl 40046207 0 returned -16 13:06:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x845c0, 0x0) [ 355.141353] binder: BINDER_SET_CONTEXT_MGR already set [ 355.150239] binder: 13184:13184 ioctl c0306201 0 returned -14 13:06:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000006, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:13 executing program 3: [ 355.188768] binder: 13180:13186 ioctl 40046207 200000c0 returned -16 [ 355.189314] binder: BINDER_SET_CONTEXT_MGR already set [ 355.256641] binder: 13201:13202 ioctl c018620b 0 returned -14 [ 355.282215] binder: BINDER_SET_CONTEXT_MGR already set [ 355.288243] binder: 13178:13185 ioctl 40046207 0 returned -16 13:06:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x200, 0x4) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="22292bf143a5f8fb52a6e63b374078c7874fbdab641925398bc73e82bbb10b4538e3c116ef7ed34d55789d076eaae8a84bf10cc9e5cf4f553a83e29dff6b788172d0bf9dd44d425281eeb48f42441e7234e8d0281237a8ffb8cafec504f2d6decf549365e5b77b6b149edb03928d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x28) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x4, 0x4, 0xb22b, 0x9, 0x201}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x8, 0x3, 0x1, r2}, &(0x7f00000001c0)=0x10) 13:06:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x1) clone(0x4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x105140, 0x0) getpeername$netlink(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x8, 0x4) bind$isdn(r1, &(0x7f0000000140)={0x22, 0x1, 0x0, 0x7e}, 0x6) get_thread_area(&(0x7f0000000180)={0x4, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x2, 0x8, 0x8}) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) 13:06:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x24000, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x84, 0x2) gettid() 13:06:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3, 0xfdfdffff00000000, 0x0}) 13:06:13 executing program 3: [ 355.308356] binder: 13187:13196 ioctl 40046207 200000c0 returned -16 [ 355.344066] binder: 13204:13208 ioctl c0306201 0 returned -14 [ 355.423877] binder: BINDER_SET_CONTEXT_MGR already set [ 355.430208] binder: 13204:13208 ioctl c0306201 200000c0 returned -11 13:06:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000007, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 355.469520] binder: 13212:13213 ioctl 40046207 200000c0 returned -16 13:06:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:06:13 executing program 3: [ 355.514158] binder: BINDER_SET_CONTEXT_MGR already set [ 355.517874] binder: 13223:13226 ioctl c018620b 0 returned -14 [ 355.526694] binder: 13214:13220 ioctl 40046207 200000c0 returned -16 [ 355.541657] binder: 13229:13231 ioctl c018620b 0 returned -14 13:06:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x7, 0xfdfdffff00000000, 0x0}) [ 355.572705] binder: 13230:13234 ioctl c0306201 0 returned -14 13:06:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000040)=0x6, &(0x7f00000000c0)=0x4) [ 355.641650] binder: 13230:13234 ioctl c0306201 200000c0 returned -11 [ 355.675780] binder: BINDER_SET_CONTEXT_MGR already set [ 355.681065] binder: 13230:13234 ioctl c0306201 0 returned -14 13:06:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = semget(0x2, 0x2, 0x0) semctl$GETVAL(r1, 0x0, 0xc, &(0x7f0000000140)=""/224) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000080)={0x1, 0x8f, 0xd67d, 'queue0\x00', 0xc29}) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 355.706499] binder: 13238:13240 ioctl 40046207 200000c0 returned -16 [ 355.734498] binder: 13247:13251 ioctl 541b 20000000 returned -22 13:06:13 executing program 3: 13:06:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff03000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 355.767598] binder: 13247:13251 ioctl c018620b 0 returned -14 [ 355.779750] binder: BINDER_SET_CONTEXT_MGR already set 13:06:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x440, 0x0) io_setup(0xf4bf, &(0x7f00000000c0)=0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0x9f, "61bc4fd87b5c62d338429ef37d5137069781912d62fe5514e09fc30b10e9b57d6e078b4ba18e13aae130df6083ad89104abe959d9f4899666a7bae47d4c43989538281f3b100ca51eeb8d4cf579043fd338f66c50ce278ce957189914803094571388df1549426822e35d7e9298322c306dd5bac266b37712f7b238dec963fbd70c3b37eff499cace1b29515ba5184a9797aa0d320a0e666afb532df41a9df"}, &(0x7f00000003c0)=0xa7) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f00000004c0)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000680)={r3, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={r3, @in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x6}, 0x90) io_submit(r2, 0x2, &(0x7f00000002c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000100)="8f1969b81244ac7f89405d23cf369d36ead52e7e36aab19b250d72a266665b01ca706ca7cb77d85857898fe73ba7f1999ca75060f2ffd99c55bf6100354a6315811744c7f69750610cf33dfa48d456edd7013a79e6ef66d0da8dfb55bc07eca73098f2bde71a666d2be4d519e0d1f4899b8b7befcd4fcb2794f5a29de81eee74b5deea7559936c0e39dcad", 0x8b, 0x9, 0x0, 0x1, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000200)="f8bf1a53f3a27b276fc6cee8b93b36939fca71a6adfb526864e8d4ffeb9de24eb084a8286aec916ed0de3860c6a603263c23fc751f1c20674ac485ece4fc1720e60dd6dd7bb4527ef894", 0x4a, 0x3f, 0x0, 0x3, r1}]) bind$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x3de4, @mcast1, 0x3}}, 0x24) 13:06:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f00000003c0)={0x1, 0x0, {0x101, 0x732, 0x3e6a, 0x4}}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0, [{0x40000000, 0x6, 0x2, 0x7, 0xff, 0x2, 0x2}, {0x40000007, 0x3, 0x1, 0x81, 0x800, 0x100, 0x2}]}) accept4$netrom(r1, &(0x7f0000000300)={{0x3, @default}, [@default, @remote, @bcast, @null, @rose, @remote, @null, @bcast]}, &(0x7f0000000380)=0x48, 0x80800) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x100000000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000001c0)={r2, 0xf3, "487e8ac9d64776cdcd6ea81e949df5e1a9058334ca852da0ff3a0f881536fdfd6bef4a0ab4175e34a9cd028b1c78ea4c957da4e987048b3ae020044fe87b1ff7ece57a35241276e493198134077f1fa688e111857da2d58a6b1d5de6c6a677655fc657c85d19d25490529db3e7020d636e5e3811afedd71c3ef5859f626a1ed722c5686eb1d8039e05373e04a34f999a376ce0a53b4da1dbc11597390d6585e2db35251df7a72790e51e4a76bc1e408255fc7ef315df093b0a328c607ff5552dad56c079ff0b75db3bf4dfa134f7b849767ca0fd6bcefd10d078399473f9ff5341e89d0a3e6ef06270685849b5163458dc3e35"}, &(0x7f00000002c0)=0xfb) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 355.817708] binder: 13238:13256 ioctl 40046207 200000c0 returned -16 [ 355.883325] binder: BINDER_SET_CONTEXT_MGR already set 13:06:13 executing program 3: 13:06:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2180, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000080)) [ 355.931400] binder: 13259:13263 ioctl 40046207 0 returned -16 [ 355.943520] binder: 13266:13271 ioctl c018620b 0 returned -14 [ 355.950023] binder: 13268:13273 ioctl c0306201 0 returned -14 13:06:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x6c000000, 0xfdfdffff00000000, 0x0}) [ 355.980676] binder: 13268:13273 ioctl c0306201 200000c0 returned -11 [ 356.026955] binder: 13275:13275 ioctl c0306201 0 returned -14 13:06:13 executing program 3: 13:06:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000140)={0x7, 0x2, {0x56, 0x6bc, 0x400, {0xb5}, {0x2, 0x6}, @ramp={0x6, 0xfc00000000000000, {0x5, 0x6, 0x101, 0x8}}}, {0x55, 0x1, 0x10000, {0x3, 0x80}, {0x5e2a, 0x7}, @const={0x3, {0x8, 0x1e, 0x400000000, 0x200}}}}) 13:06:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000048, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 356.100327] binder: 13266:13277 ioctl c018620b 0 returned -14 [ 356.120672] binder: BINDER_SET_CONTEXT_MGR already set [ 356.155917] binder: BINDER_SET_CONTEXT_MGR already set 13:06:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x20800400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:06:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x4c000000, 0xfdfdffff00000000, 0x0}) [ 356.191552] binder: 13283:13288 ioctl 40046207 200000c0 returned -16 [ 356.219123] binder: 13289:13292 ioctl 40046207 200000c0 returned -16 [ 356.228132] binder: 13297:13300 ioctl c0306201 0 returned -14 13:06:14 executing program 3: 13:06:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getuid() clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 356.268027] binder: 13297:13300 ioctl c0306201 200000c0 returned -11 13:06:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x46000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000140)={{0x1, 0x3, 0xffff, 0x3, 0x1}, 0x3be181f1, 0x2, 0xec}) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:06:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff3f000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 356.330269] binder: 13304:13304 ioctl c0306201 0 returned -14 [ 356.346646] binder: BINDER_SET_CONTEXT_MGR already set 13:06:14 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x4140000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$zero(0xffffffffffffff9c, 0xfffffffffffffffd, 0x0, 0x0) clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@loopback}, &(0x7f0000000200)=0x14) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000080)={0x0, {0xa5}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x81, 0x2, 0xff, 0x4, 0x4, 0x1ff}, 0x20) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="3122e200000000000003ff28448c744a86bd1759e49e172d0f975f1dec24896e77df0d952c7265dd915aa93d39b9112b5f7ca16c67d6d61f12f5db7ca8577781011e6db4f29ed500220000000008", @ANYRES32=r1, @ANYBLOB="00000000feefffff010000000300000001000000", @ANYRES32=r1, @ANYBLOB="0000000000f0ffff000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000d0ffffffffffff0000000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="000000000000000000000000004000f0ffffffff", @ANYRES32=r1, @ANYBLOB="0000000000100000000000000020000000000000104c5448c293385a1c57e0052465fdced6a111b833dee8019dc5753bb157c3f8"]) ioctl$UI_DEV_DESTROY(r1, 0x5502) 13:06:14 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e21, 0x373, @mcast2, 0x8}}, [0x4, 0x6, 0x7e, 0x7fff, 0x1, 0xd8, 0x9, 0x3, 0x4, 0x2, 0xea9, 0x4, 0x1, 0x1, 0x1]}, &(0x7f0000000200)=0x100) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000080)={0x10001, 0x1ff, 0x9, 0x3}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, 0x0) [ 356.431994] binder: 13307:13309 ioctl 40046207 200000c0 returned -16 [ 356.446756] binder: 13319:13321 ioctl c018620b 0 returned -14 [ 356.472059] binder: BINDER_SET_CONTEXT_MGR already set 13:06:14 executing program 3: 13:06:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x7400, 0xfdfdffff00000000, 0x0}) [ 356.500016] binder: 13320:13324 ioctl c0306201 0 returned -14 [ 356.504415] binder: 13312:13326 ioctl 40046207 200000c0 returned -16 13:06:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000140)=""/250) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@rand_addr=0x7, @in=@broadcast, 0x4e21, 0x0, 0x4e21, 0x1, 0xa, 0x80, 0x20, 0x3c, r2, r3}, {0x7, 0x7, 0x9, 0x8, 0xfff, 0xc39, 0x3}, {0x5a, 0x5, 0x8, 0x3}, 0x10000, 0x0, 0x3, 0x1, 0x2}, {{@in6=@loopback, 0x4d5, 0xff}, 0xa, @in=@rand_addr=0x10001, 0x3505, 0x4, 0x3, 0x6, 0x3, 0x1}}, 0xe8) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x200000, 0x0) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = geteuid() mount$9p_virtio(&(0x7f0000000040)='\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x4080, &(0x7f0000000340)={'trans=virtio,', {[{@fscache='fscache'}, {@nodevmap='nodevmap'}, {@fscache='fscache'}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@mmap='mmap'}], [{@seclabel='seclabel'}, {@fowner_eq={'fowner', 0x3d, r6}}, {@seclabel='seclabel'}, {@fsname={'fsname', 0x3d, '/dev/vbi#\x00'}}]}}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 356.570130] binder: 13320:13324 ioctl c0306201 200000c0 returned -11 13:06:14 executing program 3: 13:06:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3ff, 0x181800) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000080)={0x10001, 0xc2, 0x200, 0xba3bb3c1f9fa55ba, 0x6}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:06:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 356.668752] binder: BINDER_SET_CONTEXT_MGR already set [ 356.675060] binder: 13320:13324 ioctl c0306201 0 returned -14 [ 356.718819] binder: 13339:13347 ioctl 40046207 200000c0 returned -16 [ 356.753771] binder: BINDER_SET_CONTEXT_MGR already set 13:06:14 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x4, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) tee(r0, r2, 0x5, 0x4) 13:06:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff68000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 356.768895] binder: 13352:13358 ioctl c018620b 0 returned -14 13:06:14 executing program 3: 13:06:14 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x2000) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x100, 0x1, 0x4, 0xffffffffffffff4f, 0x5, 0x5, 0x20, 0x3, 0x1, 0x7, 0x7fffffff, 0x6}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) socket$caif_stream(0x25, 0x1, 0x0) [ 356.815723] binder: 13349:13356 ioctl 40046207 200000c0 returned -16 13:06:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x300, 0xfdfdffff00000000, 0x0}) [ 356.864667] binder: 13359:13364 ioctl c018620b 0 returned -14 13:06:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x220040) write$P9_RSTAT(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="8a0000007d0100000083003f000200000020020000000100000000000000090008007f000000f58d000029d70000000000000d002f6465762f62696e64657223000d002f6465762f62696e64657223000f002d3a626465766574683138657468312700707070306367726f757073656c666b657972696e67232e706f7369785f61636c5f616363657373"], 0x8a) 13:06:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x820000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x105000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) connect$can_bcm(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6, @in=@empty, 0x4e21, 0x7fffffff, 0x4e24, 0x0, 0x2, 0x20, 0x80, 0x0, r2, r3}, {0x100, 0x4, 0x2, 0x10000, 0xba, 0x7, 0x1, 0x8}, {0x2, 0x7, 0x9}, 0x1, 0x6e6bbd, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x1e}, 0x4d3, 0xff}, 0x2, @in=@multicast2, 0x0, 0x3, 0x1, 0x100, 0x4, 0x0, 0xffff}}, 0xe8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x230, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0x134, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfb9786f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x61e9, @mcast1, 0x5f}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x10000, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, [], 0xd}, 0x100000001}}}}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x68, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xaf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xeff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2983}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4000}, 0xc081) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000280)={0x1, 0x6b1, 0xcbe6, 0xcdc}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)="b441cb98f462bcc402b3434577790aa8d1", 0x11, r0}, 0x68) [ 356.943773] binder: 13372:13373 ioctl c0306201 0 returned -14 [ 356.966744] binder: BINDER_SET_CONTEXT_MGR already set 13:06:14 executing program 3: 13:06:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x9, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 357.003741] binder: 13372:13373 ioctl c0306201 200000c0 returned -11 [ 357.014028] binder: 13375:13376 ioctl 40046207 200000c0 returned -16 13:06:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x100000000000000, 0xfdfdffff00000000, 0x0}) [ 357.077240] binder: 13372:13373 ioctl c0306201 0 returned -14 [ 357.133447] binder: 13390:13394 ioctl c018620b 0 returned -14 13:06:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000500, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:15 executing program 3: 13:06:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40000, 0x0) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000080)={0x0, 0x2}) [ 357.183168] binder: BINDER_SET_CONTEXT_MGR already set [ 357.202691] binder: 13390:13401 ioctl c018620b 0 returned -14 [ 357.240376] binder: 13397:13399 ioctl 40046207 200000c0 returned -16 [ 357.279748] binder: BINDER_SET_CONTEXT_MGR already set 13:06:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 13:06:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff0000004c, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x109200, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000080)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 357.285079] binder: 13400:13412 ioctl 40046207 200000c0 returned -16 [ 357.292199] binder: 13409:13411 ioctl c0306201 0 returned -14 [ 357.314875] binder: 13409:13411 ioctl c0306201 200000c0 returned -11 13:06:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x6c00000000000000, 0xfdfdffff00000000, 0x0}) 13:06:15 executing program 3: 13:06:15 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xfffffffffffffe01, 0x40) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3ff, 0xc0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x4}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 357.487656] binder: 13423:13426 ioctl c018620b 0 returned -14 [ 357.532784] binder: BINDER_SET_CONTEXT_MGR already set [ 357.543694] binder: 13424:13429 ioctl c0306201 0 returned -14 [ 357.552396] binder: 13423:13434 ioctl c018620b 0 returned -14 [ 357.562968] binder: 13425:13430 ioctl 40046207 200000c0 returned -16 13:06:15 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) [ 357.579447] binder: 13424:13429 ioctl c0306201 200000c0 returned -11 [ 357.596270] binder: BINDER_SET_CONTEXT_MGR already set 13:06:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x400000) ioctl$TCSBRK(r1, 0x5409, 0x7fffffff) 13:06:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x5, 0xfdfdffff00000000, 0x0}) [ 357.627965] binder: 13432:13436 ioctl 40046207 200000c0 returned -16 13:06:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@mcast2}, &(0x7f00000000c0)=0x14) [ 357.668356] binder: 13424:13429 ioctl c0306201 0 returned -14 13:06:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff48000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 357.755385] binder: 13447:13452 ioctl c018620b 0 returned -14 [ 357.919652] binder: 13462:13464 ioctl c0306201 0 returned -14 [ 357.934045] binder: 13462:13464 ioctl c0306201 200000c0 returned -11 [ 357.959725] binder: 13465:13465 ioctl c0306201 0 returned -14 13:06:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) fcntl$notify(r0, 0x402, 0x20) 13:06:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00007a00, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:16 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={0xfffffffffffffdb0}, 0x8, 0x0) read(r1, &(0x7f0000000080)=""/128, 0xae3f1a6) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000001c0)) 13:06:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x6800, 0xfdfdffff00000000, 0x0}) 13:06:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x100802106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) prctl$PR_SET_PTRACER(0x59616d61, r1) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x8, 0x1, 0x7fffffff, 0x46, 0x2, 0x7, 0x693e, 0x1af, 0x40, 0x17c, 0x9, 0x0, 0x38, 0x2, 0x1, 0x8c, 0x4}, [{0x60000000, 0x2, 0x7, 0x7, 0x7, 0x9, 0x0, 0x9}, {0x6474e551, 0x7fffffff, 0x101, 0x3ff, 0x0, 0x22, 0x66ec, 0x8}], "", [[], [], [], [], [], [], [], [], [], []]}, 0xab0) 13:06:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 358.435638] binder: BINDER_SET_CONTEXT_MGR already set [ 358.453901] binder: 13472:13483 ioctl c018620b 0 returned -14 [ 358.460509] binder: 13471:13486 ioctl c0306201 0 returned -14 [ 358.469465] binder: 13473:13480 ioctl 40046207 200000c0 returned -16 [ 358.483186] binder: 13471:13486 ioctl c0306201 200000c0 returned -11 13:06:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00004c00, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:16 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) fcntl$setstatus(r0, 0x4, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f00000000c0)={0x2, 0x6}, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0x8, 0x4) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000140)={0xd7, 0xd8da, 0x7}) 13:06:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x4c00000000000000, 0xfdfdffff00000000, 0x0}) 13:06:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) clone(0x80003fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:06:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000004740)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0x0, @local}, 0x80, 0x0}, 0x0) 13:06:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x82, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') gettid() ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000240)={r1, 0x800, 0x2, "3f240724f027304618c1c673ed3a7d6298786d7f882c86b9f0db1122019dafadfcdaa1265feb37920045f729ef8852b56e8888fdb5222c856a07a7b00da66293f180ed5f916659e7afa229"}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x600, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x2, 0x7, 0x0, 0x3ff}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004800}, 0x1) [ 358.714746] binder: 13496:13502 ioctl c018620b 0 returned -14 [ 358.721150] binder: 13508:13509 ioctl c018620b 0 returned -14 [ 358.728843] binder: 13497:13499 ioctl c0306201 0 returned -14 [ 358.748011] IPVS: ftp: loaded support on port[0] = 21 [ 358.751829] binder: 13497:13499 ioctl c0306201 200000c0 returned -11 [ 358.817477] binder: 13511:13511 ioctl c0306201 0 returned -14 [ 359.040459] chnl_net:caif_netlink_parms(): no params data found [ 359.083232] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.090381] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.097776] device bridge_slave_0 entered promiscuous mode [ 359.105985] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.112930] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.120701] device bridge_slave_1 entered promiscuous mode [ 359.144729] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 359.155993] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 359.177860] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 359.186929] team0: Port device team_slave_0 added [ 359.196012] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 359.213370] team0: Port device team_slave_1 added [ 359.221760] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 359.229365] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 359.281583] device hsr_slave_0 entered promiscuous mode [ 359.318884] device hsr_slave_1 entered promiscuous mode [ 359.379263] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 359.386300] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 359.404313] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 359.449811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.460601] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 359.470429] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 359.477849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 359.485926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 359.505330] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 359.512760] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.522788] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 359.530932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 359.539303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 359.546972] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.553380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.563570] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 359.571596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 359.579442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.587164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.595249] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.601686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.611549] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 359.618993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 359.629153] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 359.635990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 359.647449] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 359.654745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 359.663847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 359.672339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 359.692043] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 359.700543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 359.708278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 359.721432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 359.737774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.748536] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 359.754555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 359.762510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 359.775204] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 359.793920] 8021q: adding VLAN 0 to HW filter on device batadv0 13:06:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fchdir(r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) sendto$llc(r1, &(0x7f0000000080)="8e49cd0f349c8426692dd294d602bc2fe0edaaf469c58748b703ee53b518870a7146782b10d77c42965d53572723193e7cc2ebeecd288724f9a9aaa81ac2eaab4048f5c79698436be4b13d4ccc108ca5745facc8599e7c1345ee7784b106fefc34f49b4f98ac8243851637932af71b976c3c1c30303d1db1dbe995fd5d196d0c", 0x80, 0x80, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000100)=0x44f8, 0x8) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:06:17 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7fffffff, 0x2) sendmsg$rds(r0, &(0x7f0000001400)={&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/138, 0x8a}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xa3}, {&(0x7f0000001240)=""/4, 0x4}, {&(0x7f0000001280)=""/38, 0x26}, {&(0x7f00000012c0)=""/147, 0x93}], 0x6, 0x0, 0x0, 0x10}, 0x20000000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:06:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x60000000, 0xfdfdffff00000000, 0x0}) 13:06:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00006800, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:17 executing program 3: setreuid(0x0, 0xee01) r0 = semget(0x0, 0x0, 0x0) semctl$GETPID(r0, 0x0, 0x4, 0x0) 13:06:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c163f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r2, 0x3}}, 0x18) [ 359.862636] binder: BINDER_SET_CONTEXT_MGR already set [ 359.869834] binder: 13532:13536 ioctl 40046207 0 returned -16 13:06:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x101000, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x400, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000001c0)={0x3, r2}) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) membarrier(0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x100) getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000)=0x200, 0x4) [ 359.936523] binder: 13542:13549 ioctl c0306201 0 returned -14 [ 359.962240] binder: 13542:13549 ioctl c0306201 200000c0 returned -11 [ 359.970896] binder: 13554:13554 ioctl c0306201 0 returned -14 13:06:17 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') pwritev(r0, &(0x7f0000001400), 0x2a6, 0x0) [ 360.000564] binder: BINDER_SET_CONTEXT_MGR already set 13:06:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:06:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000300, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 360.021487] binder: 13538:13557 ioctl 40046207 200000c0 returned -16 13:06:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x2000, 0xfdfdffff00000000, 0x0}) 13:06:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x800, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 360.085130] binder: 13559:13570 ioctl c018620b 0 returned -14 [ 360.114255] binder: BINDER_SET_CONTEXT_MGR already set [ 360.191393] binder: 13560:13567 ioctl 40046207 0 returned -16 [ 360.209699] device bridge_slave_1 left promiscuous mode [ 360.215906] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.254528] binder: BINDER_SET_CONTEXT_MGR already set [ 360.256017] binder: 13580:13581 ioctl c0306201 0 returned -14 [ 360.278081] binder: 13583:13591 ioctl c018620b 0 returned -14 [ 360.289172] binder: 13582:13589 ioctl 40046207 200000c0 returned -16 13:06:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xa40, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:06:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x81, 0x6924e98, {0x3, 0x3, 0x7f, 0x401, 0x6, 0x5, 0xfff, 0x0, 0x5, 0x1, 0x4, 0x0, 0x0, 0x8, 0x6}}}, 0x90) 13:06:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'gretap0\x00', 0x8000}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000000)=0x80, 0x80000) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) 13:06:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e21, 0x7, @ipv4={[], [], @multicast2}, 0x4}}, 0x7, 0x3f, 0x3ff, 0x4, 0x8}, &(0x7f0000000200)=0x98) pselect6(0x40, &(0x7f0000000240)={0x6369, 0xd0f, 0x2, 0x9, 0xff, 0x6, 0x44cf, 0x20}, &(0x7f0000000280)={0x8, 0x3, 0xc27, 0x8, 0x3f, 0xc77, 0x6, 0x6}, &(0x7f00000002c0)={0xffffffff, 0x4, 0x6, 0x1, 0x9, 0x89, 0x8}, &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340)={0x4}, 0x8}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r3) [ 360.300307] device bridge_slave_0 left promiscuous mode [ 360.305796] bridge0: port 1(bridge_slave_0) entered disabled state 13:06:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff02000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 360.356562] binder: 13599:13602 ioctl 8914 20000100 returned -22 13:06:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x60, 0xfdfdffff00000000, 0x0}) 13:06:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x60000000, 0x5, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) [ 360.456395] binder: BINDER_SET_CONTEXT_MGR already set [ 360.504834] binder: 13606:13614 ioctl 40046207 0 returned -16 [ 360.521460] binder: 13617:13620 ioctl c0306201 0 returned -14 [ 360.522068] binder: 13616:13619 ioctl c018620b 0 returned -14 [ 360.541549] binder: 13617:13620 ioctl c0306201 200000c0 returned -11 13:06:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e23, 0x7e35, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000200)={@remote, @multicast2, 0x0}, &(0x7f00000002c0)=0xc) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="100726bdda078345ff039f17b2a1277000fbdbdf250300000800023f000000000000000009cfff00080002002000000008000100f20000000865c04a000200ff070000000000000000000000000000000000000000000000000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x899e072a19b3f7a) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @local}, 0x10) 13:06:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x6800000000000000, 0xfdfdffff00000000, 0x0}) 13:06:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x28, &(0x7f0000000040)}, 0x10) io_setup(0x0, &(0x7f0000000140)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x187) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000001c0)) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000080)={0x3, 0x1, [0x4, 0xd77, 0x4, 0x3, 0x2, 0x2, 0x7, 0x400]}) set_mempolicy(0x4003, &(0x7f0000000140)=0x6, 0x9) r5 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r5, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r6, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0xff010000, 0x8, 0x1, 0x0, r5, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) request_key(0x0, &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) eventfd(0x0) [ 360.566484] binder: BINDER_SET_CONTEXT_MGR already set [ 360.578308] binder: 13617:13620 ioctl c0306201 0 returned -14 [ 360.592046] binder: 13626:13627 ioctl 40046207 200000c0 returned -16 13:06:18 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x307080, 0x0) r1 = syz_open_dev$radio(&(0x7f0000001600)='/dev/radio#\x00', 0x1, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc018620b, 0x0) 13:06:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00003f00, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 360.730213] binder: BINDER_SET_CONTEXT_MGR already set [ 360.769585] binder: 13638:13642 ioctl 40046207 200000c0 returned -16 [ 360.781760] binder: 13650:13652 ioctl c018620b 0 returned -14 [ 360.792454] device hsr_slave_1 left promiscuous mode [ 360.793091] binder: BINDER_SET_CONTEXT_MGR already set [ 360.799363] binder: 13651:13655 ioctl c0306201 0 returned -14 13:06:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x74, 0xfdfdffff00000000, 0x0}) [ 360.816546] binder: BINDER_SET_CONTEXT_MGR already set [ 360.822915] binder: 13650:13656 ioctl c018620b 0 returned -14 [ 360.833814] binder: 13646:13647 ioctl 40046207 200000c0 returned -16 [ 360.838634] binder: 13651:13655 ioctl c0306201 200000c0 returned -11 [ 360.846631] binder: 13636:13644 ioctl 40046207 0 returned -16 [ 360.872894] device hsr_slave_0 left promiscuous mode [ 360.894402] binder: 13657:13657 ioctl c0306201 0 returned -14 [ 360.948346] team0 (unregistering): Port device team_slave_1 removed [ 361.081083] team0 (unregistering): Port device team_slave_0 removed [ 361.124396] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 361.200620] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 361.361739] bond0 (unregistering): Released all slaves 13:06:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x28, &(0x7f0000000040)}, 0x10) io_setup(0x0, &(0x7f0000000140)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x187) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000001c0)) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000080)={0x3, 0x1, [0x4, 0xd77, 0x4, 0x3, 0x2, 0x2, 0x7, 0x400]}) set_mempolicy(0x4003, &(0x7f0000000140)=0x6, 0x9) r5 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r5, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r6, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0xff010000, 0x8, 0x1, 0x0, r5, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) request_key(0x0, &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) eventfd(0x0) 13:06:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000003, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x14f3, 0xffc, 0x4, 0x6, 0x800, 0x9}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000000c0)={0x3, 0xde2d}) msgget$private(0x0, 0x201) 13:06:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:06:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x500000000000000, 0xfdfdffff00000000, 0x0}) [ 361.569521] binder: 13673:13676 ioctl c018620b 0 returned -14 [ 361.578561] binder: 13675:13679 ioctl c0306201 0 returned -14 13:06:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000080)=@ng={0x4, 0x6, '}'}, 0x3, 0x2) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x402042, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@local}}, &(0x7f0000000880)=0xe8) getresuid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4e21, 0x564a7423, 0x4e21, 0x6, 0xa, 0x20, 0x20, 0x32, r2, r3}, {0x401, 0x7fff, 0x8, 0x101, 0x0, 0x7, 0x10001, 0x7f}, {0x54, 0x4, 0x4}, 0x6, 0x6e6bbe, 0x1, 0x1, 0x2, 0x3}, {{@in6=@mcast2, 0x4d3, 0xff}, 0xa, @in6, 0x3504, 0x3, 0x3, 0x1be59161, 0x4, 0x100, 0x10001}}, 0xe8) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:06:19 executing program 3 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x200000000000000, 0xfdfdffff00000000, 0x0}) [ 361.614548] binder: BINDER_SET_CONTEXT_MGR already set [ 361.624725] binder: 13675:13679 ioctl c0306201 200000c0 returned -11 [ 361.637906] binder: 13675:13679 ioctl c0306201 0 returned -14 13:06:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000002, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 361.692689] binder: 13671:13680 ioctl 40046207 0 returned -16 13:06:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x7400000000000000, 0xfdfdffff00000000, 0x0}) 13:06:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_udp_int(r1, 0x11, 0x6f, &(0x7f0000000100)=0x6, 0x4) r2 = request_key(&(0x7f00000002c0)='syzkaller\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r2) getsockopt$inet6_buf(r1, 0x29, 0x7f, &(0x7f0000000080)=""/96, &(0x7f0000000000)=0x60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006a5adcff000000009500000000000000158ff76ca1d4d1a4e19f9bca3b90c71856d4e3c7eea620ba062a934119ded13230abe1a4c6e05883c7fff915f2a1abcb27cad1526f43fcb4d5f3cfa91d0b6bcee5361f9959a995523fb7ce1cd342addad71c601c4f59f5f99d84bf191a371d53e430ab0ec67876d123b518bd7970d495ca7adc3e2d829a5c07b6fb35619702144e93a9958a6780f60c8da8b1866f4cee907e22d24752a698fbaf1d1251b44044fefc60316054d95bfb13db84d7f2352b4503c1e84b6be10221b47f898a1e135a904cf925dddfa830807fbf8de92e3d574f5249b1e6"], &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000140)) [ 361.969445] binder: 13710:13715 ioctl c0306201 0 returned -14 [ 362.002793] binder: 13716:13719 ioctl 80081270 20000140 returned -22 [ 362.010318] binder: 13710:13715 ioctl c0306201 200000c0 returned -11 [ 362.025313] binder: BINDER_SET_CONTEXT_MGR already set [ 362.031923] binder: 13721:13721 ioctl c0306201 0 returned -14 [ 362.042377] binder: 13718:13722 ioctl 40046207 200000c0 returned -16 [ 362.071157] binder: BINDER_SET_CONTEXT_MGR already set [ 362.085919] binder: 13718:13728 ioctl 40046207 200000c0 returned -16 13:06:20 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x20400) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r0}}, 0x18) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0xfffffffffffffff8}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={r3, @in={{0x2, 0x4e23, @remote}}, 0x9, 0x100000000}, &(0x7f00000002c0)=0x90) 13:06:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x20) listen(r1, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) getpriority(0x1, r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r6 = accept(r1, 0x0, 0x0) write$nbd(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="675131ee1c3da6000400000000100000207438c6afe838274f7d8b498a048bb46e7f5a97ffcfe81ec1b5065a2bc4f473cb95d7416006a2144849baf0147153c31edd4ed66547f8b63d2c14343a17a7440ba666cadfc47f72f63ff045318374ddd6acf000b1fc4bf5c8"], 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:06:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x200002d0, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff0000007a, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x8000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:06:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x5000000, 0xfdfdffff00000000, 0x0}) 13:06:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x7000000, 0xfdfdffff00000000, 0x0}) 13:06:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x3, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 362.591852] binder: 13734:13744 ioctl c0306201 0 returned -14 13:06:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x10b340) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000080)=0x3ff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 362.653974] binder: 13734:13744 ioctl c0306201 200000c0 returned -11 [ 362.683288] binder: 13734:13744 ioctl c0306201 0 returned -14 [ 362.772054] binder: BINDER_SET_CONTEXT_MGR already set 13:06:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000005, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x7, 0x0, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:20 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@fat=@fmask={'fmask'}}]}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x200, 0x4, &(0x7f0000000440)=[{&(0x7f00000000c0)="6111c42916da94ec42bfa795d163afeaba157da063ee54", 0x17, 0x4}, {&(0x7f0000000200)="a596b466894bb7e8533b0299bdf83e6b1532054f928566f70cb927bc6679eafbd750fb51506bdc0aeb0c12dd5a5669985a2f09aa7847a87d65e3b4a20fc39bd27a982e1ecfbd99eb94966808ff5d0fce9715ad769bec7340980e3edec5c5daaaf3693218ebbcec38f882dc19b10f0b43f39b1f8a8cc265c7a4b95d4483aad7279df4408cb322ca20bf58d57779ec0e2d9e802be7b2dc046d8e73650885a9dfcbd6a750143113e0a5c064fa34fe25f7115b615cce", 0xb4, 0x4}, {&(0x7f0000000340)="cc01871841196e1969e5cf9c57d08e5be26e9a9f231d85f241977737201a946d0c314616e193318a324f0cf464e4ef4efe7a629be911f1afefde27a9c74ab6c078c42efb8fe1329ff90e5842e90d7d9be5710ef38f44db6e4a41ffc8e83b42b6272b7cea51b4eab2aaa9005b0e3bd7091a877c0a63905ffadff26814c83041a6d5abb87de10d34e1b4f5f13ba0876b0939e285e8f8e60d667a5ef3c5bddbbcc6af20c02482bcd1920f0e135af3c9c495f7cfa1d6fdab9019df14c55d1297e4b96f1af70734337bedd5f9154b637cc7e5e2ae8b5288344357d47e330f2ab226b2bd271b15615561ab26b5cdfc6a88c30aa790b6b210ba43", 0xf7, 0xffffffff}, {&(0x7f0000000140)="4c5857a90a98", 0x6, 0x7}], 0x2000000, &(0x7f0000000540)={[{@fat=@dmask={'dmask', 0x3d, 0x7}}, {@dots='dots'}, {@fat=@showexec='showexec'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}, {@nodots='nodots'}, {@dots='dots'}, {@nodots='nodots'}], [{@context={'context', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'em1keyring'}}, {@euid_eq={'euid', 0x3d, r1}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@smackfshat={'smackfshat', 0x3d, ':\\&'}}, {@smackfsroot={'smackfsroot', 0x3d, 'fmask'}}]}) [ 362.813923] binder: BINDER_SET_CONTEXT_MGR already set [ 362.819787] binder: 13735:13761 ioctl 40046207 0 returned -16 [ 362.841365] binder: 13764:13766 ioctl 40046207 200000c0 returned -16 13:06:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000000c0)={0x1, r1}) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000080)=0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:06:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x700, 0xfdfdffff00000000, 0x0}) [ 362.980769] FAT-fs (loop2): bogus number of reserved sectors 13:06:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x3ff, 0x0, 0x100000001, 0x6, 0xe9}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 363.028630] binder: 13786:13789 ioctl c0306201 0 returned -14 [ 363.029284] FAT-fs (loop2): Can't find a valid FAT filesystem [ 363.066944] binder: 13786:13789 ioctl c0306201 200000c0 returned -11 13:06:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x93ffffff00000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff6c000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 363.123804] binder: 13791:13791 ioctl c0306201 0 returned -14 13:06:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x4c, 0xfdfdffff00000000, 0x0}) [ 363.193205] binder: 13797:13798 ioctl 801c581f 20000000 returned -22 [ 363.217841] binder: BINDER_SET_CONTEXT_MGR already set 13:06:21 executing program 4: syslog(0x0, &(0x7f0000000080)=""/103, 0x67) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = mmap$binder(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x0, 0x30, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={r1}) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 363.237917] binder: 13799:13799 ioctl 801c581f 20000000 returned -22 [ 363.255413] binder: 13797:13798 ioctl 40046207 0 returned -16 [ 363.418322] FAT-fs (loop2): bogus number of reserved sectors [ 363.453816] FAT-fs (loop2): Can't find a valid FAT filesystem [ 363.454386] binder: 13810:13811 ioctl c0306201 0 returned -14 [ 363.466546] binder: BINDER_SET_CONTEXT_MGR already set 13:06:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xfffffffe, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x400000000000000, 0xfdfdffff00000000, 0x0}) [ 363.515639] binder: 13808:13816 ioctl 40046207 200000c0 returned -16 [ 363.524507] binder: BINDER_SET_CONTEXT_MGR already set [ 363.545915] binder: 13812:13814 ioctl 40046207 0 returned -16 [ 363.552066] binder: 13810:13811 ioctl c0306201 200000c0 returned -11 13:06:21 executing program 2: mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r2 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) truncate(&(0x7f0000000280)='./bus\x00', 0x0) [ 363.608981] binder: 13810:13811 ioctl c0306201 0 returned -14 13:06:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000140)={0x80000000, 0x2, {0x1, 0x3, 0x8000, 0x1, 0x868}}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000080)=""/162) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) 13:06:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff07000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 363.862469] binder: 13846:13849 ioctl c0306201 0 returned -14 [ 363.889635] binder: BINDER_SET_CONTEXT_MGR already set [ 363.899527] binder: 13847:13848 ioctl 40046207 0 returned -16 [ 363.907865] binder: 13846:13849 ioctl c0306201 200000c0 returned -11 13:06:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3000000, 0xfdfdffff00000000, 0x0}) 13:06:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x200000000000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x3) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x80, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000400)=""/190) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000b, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c6300000d63000009631040", @ANYRES64=r2, @ANYBLOB="000000000000000008631040", @ANYRES64=r2, @ANYBLOB="04000000000000000d63000009631040edec6707f455efd01a63ee88e60f66d2623fad18bcff7249ebfd3046685dcc1d9a509448feb379fd385141f59499cb436507709ece3e5ad83ac2dd8980ae5dde9661c74232c960e76d928f43d11394dd83a96553000000008e91596a0ce8182ad251c7a83ce683194dbaf3", @ANYRES64=r2, @ANYBLOB="0100000000000000"], 0x14, 0x0, &(0x7f0000000280)="57e788a3c623619e82a45db214cd88b399445b66"}) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000001c0)="559f4a9d7aa128527b827574e55b63b5a73b8f19184ede80f309f36f129d859cc9c81aee2f239723ee4cc830930820fd9d4ca5ccb41174a261e47cd5457cf7e1e75f74a0c3e3d7b08993f1cb2a4c19fc64b2e834b20783dab2e76f03a8527dd7cb2102a12dae3c7aebb82106e73b63f60ccf1c19") getsockopt$netlink(r1, 0x10e, 0xd, &(0x7f0000000300)=""/200, &(0x7f0000000000)=0xc8) 13:06:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff7a000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:21 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'rose0\x00', {0x2, 0x4e22, @remote}}) 13:06:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000001c0)={r2, 0x80000, r3}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000080)=""/117) [ 364.051278] binder: BINDER_SET_CONTEXT_MGR already set 13:06:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x2, 0xfdfdffff00000000, 0x0}) [ 364.097369] binder: 13857:13858 ioctl 40046207 0 returned -16 [ 364.112772] binder: 13867:13872 ioctl c0306201 0 returned -14 13:06:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xfdffffff00000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 364.179395] binder: 13867:13872 ioctl c0306201 200000c0 returned -11 [ 364.191521] binder: 13867:13872 ioctl c0306201 0 returned -14 13:06:22 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x22083, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f00000001c0)={{0x3, @addr=0x401}, 0x8, 0x8000, 0x7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000240)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0x5ffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200002, 0x0) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f0000000080)={0xf, 0x1, 0x59}) 13:06:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x1}], 0x65, 0x0, &(0x7f0000000080)="f8fa20c48f1ae6363d74fb75084f25feb66b9e38d7dda660df2eab177d08ca14d9fbf64c6ee2ca681f8951ed7461b422dbefbf2990e8fb2a2d912ca8bce040501c2259b35c8f44b9f6b74ef638aeaab25594b177fcfa2ee6e75914e76e97fa2dcccf5d6c60"}) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:06:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x6000000, 0xfdfdffff00000000, 0x0}) [ 364.330423] binder: 13888:13889 Release 1 refcount change on invalid ref 1 ret -22 13:06:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff01000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 364.373104] binder: BINDER_SET_CONTEXT_MGR already set [ 364.398656] binder: 13888:13889 ioctl 40046207 0 returned -16 13:06:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x40000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 364.441237] binder: 13888:13898 Release 1 refcount change on invalid ref 1 ret -22 13:06:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x48, 0xfdfdffff00000000, 0x0}) [ 364.499309] binder: 13901:13902 ioctl c0306201 0 returned -14 [ 364.500112] binder: BINDER_SET_CONTEXT_MGR already set [ 364.529795] binder: 13901:13902 ioctl c0306201 200000c0 returned -11 13:06:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x92ffffff, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000700, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 364.560573] binder: 13888:13904 ioctl 40046207 0 returned -16 [ 364.585765] binder: 13908:13908 ioctl c0306201 0 returned -14 [ 364.599556] IPVS: ftp: loaded support on port[0] = 21 13:06:22 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x30000, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x8000, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0x40046207, 0x0) [ 364.772935] binder: 13919:13926 ioctl c0306201 0 returned -14 [ 364.814839] binder: 13919:13926 ioctl c0306201 200000c0 returned -11 [ 364.864141] binder: 13919:13926 ioctl c0306201 0 returned -14 [ 365.006458] chnl_net:caif_netlink_parms(): no params data found [ 365.077127] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.093268] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.104968] device bridge_slave_0 entered promiscuous mode [ 365.118016] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.135347] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.147045] device bridge_slave_1 entered promiscuous mode [ 365.181171] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 365.202004] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 365.224445] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 365.231984] team0: Port device team_slave_0 added [ 365.237578] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 365.245479] team0: Port device team_slave_1 added [ 365.251127] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 365.258695] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 365.321736] device hsr_slave_0 entered promiscuous mode [ 365.368995] device hsr_slave_1 entered promiscuous mode [ 365.419193] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 365.426234] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 365.445731] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.452108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.458834] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.465227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.516934] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 365.523897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.534514] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 365.555155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 365.569371] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.586549] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.595163] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 365.608086] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 365.614518] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.623360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 365.631777] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.638130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.660066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 365.667812] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.674226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.682506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 365.700503] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 365.708246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 365.716358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 365.726882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 365.736863] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 365.743806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 365.762018] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 365.775047] 8021q: adding VLAN 0 to HW filter on device batadv0 13:06:23 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7fff, 0x202000) getpeername$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x1, 0x0) 13:06:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x4800, 0xfdfdffff00000000, 0x0}) 13:06:23 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x12000080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="18020000", @ANYRES16=r1, @ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x802) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@rand_addr=0xff, @broadcast, @remote}, 0xc) ioctl$BINDER_WRITE_READ(r3, 0x40046207, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x80013, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x311, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01634040020000000000000001000000000000000000000011000000000000000000000032000000000000001000000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="8561646600000000010000000000000004000000000000000600000000000000852a62770a010000", @ANYRES64=r4, @ANYBLOB="0500000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000300000000000000"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00']], 0x1000, 0x0, &(0x7f0000000700)="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"}) 13:06:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xfffffffd, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:23 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x22083, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f00000001c0)={{0x3, @addr=0x401}, 0x8, 0x8000, 0x7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000240)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0x5ffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200002, 0x0) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f0000000080)={0xf, 0x1, 0x59}) 13:06:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000004, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 365.849090] binder: 13943:13944 ioctl c018620b 0 returned -14 [ 365.857090] binder: 13943:13946 ioctl c018620b 0 returned -14 13:06:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000000)=0x80) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/fscreate\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='-:]bdev}\x00') ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 365.900384] binder: 13950:13951 ioctl c0306201 0 returned -14 [ 365.934690] binder: 13950:13951 ioctl c0306201 200000c0 returned -11 13:06:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff74000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:23 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7fffffff, 0x4400) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000002c0)=0x1003, 0xfffffffffffffc50) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockname(r0, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x1d, r2}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0x8, 0x2, {0x77359400}, {}, {0x2, 0x0, 0x7, 0x8}, 0x1, @can={{0x1, 0x3, 0xfffffffffffffffc, 0x9}, 0x7, 0x3, 0x0, 0x0, "18435331e7b66af7"}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, 0x0) getpeername$unix(r0, &(0x7f0000000300)=@abs, &(0x7f0000000080)=0x6e) 13:06:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x500, 0xfdfdffff00000000, 0x0}) 13:06:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xffffff92, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 366.158182] binder: BINDER_SET_CONTEXT_MGR already set [ 366.164050] binder: 13975:13978 ioctl 40046207 0 returned -16 [ 366.172171] binder: BINDER_SET_CONTEXT_MGR already set [ 366.185065] binder: 13979:13980 ioctl 40046207 0 returned -16 13:06:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4800) clock_gettime(0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$input_event(r1, &(0x7f0000000280)={{r2, r3/1000+30000}, 0x1f, 0xffffffff, 0xdb6}, 0x18) setsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000180)=0x7ff, 0x4) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @remote}, {0x2, 0x4e22, @remote}, 0x1, 0x0, 0x0, 0x0, 0xc7, &(0x7f0000000080)='bond_slave_1\x00', 0x7ff, 0x1, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:06:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xffffff94, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 366.229596] binder: 13983:13984 ioctl c0306201 0 returned -14 [ 366.253499] binder: 13986:13987 ioctl c018620b 0 returned -14 13:06:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x68, 0xfdfdffff00000000, 0x0}) [ 366.276882] binder: 13983:13984 ioctl c0306201 200000c0 returned -11 [ 366.310600] binder: BINDER_SET_CONTEXT_MGR already set 13:06:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x400000000000000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:06:24 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x10, 0x200000005) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80323, 0x5}) [ 366.341200] binder: 13983:13984 ioctl c0306201 0 returned -14 [ 366.357435] binder: BINDER_SET_CONTEXT_MGR already set [ 366.419711] binder: 13991:13995 ioctl 40046207 0 returned -16 [ 366.441886] binder: 14008:14011 ioctl c018620b 0 returned -14 [ 366.458574] binder: 13996:13996 ioctl 40046207 0 returned -16 13:06:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x2000) write$FUSE_INTERRUPT(r1, &(0x7f0000000080)={0x10, 0x0, 0x4}, 0x10) 13:06:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff05000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 366.466477] binder: 14012:14015 ioctl c018620b 0 returned -14 13:06:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r2, 0x0) socket$kcm(0x11, 0x10000000000002, 0x300) bind$inet(r2, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x14}, 0x14}}, 0x4000004) sendto$inet(r2, &(0x7f0000000b40), 0xfffffffffffffee3, 0x0, 0x0, 0xffffffffffffff61) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000077000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x20300) ioctl$RTC_WIE_OFF(r3, 0x7010) 13:06:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x700000000000000, 0xfdfdffff00000000, 0x0}) 13:06:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() lsetxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.SMACK64IPOUT\x00', &(0x7f0000000140)='\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000580)={0x200, 0x7f, 0x0, 0x4, r1, 0x8, 0x100000000, 0x9}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) ioctl$SG_GET_REQUEST_TABLE(r0, 0x227c, 0x0) 13:06:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x800000000000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 366.559165] device bridge_slave_1 left promiscuous mode [ 366.564719] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.599493] binder: BINDER_SET_CONTEXT_MGR already set [ 366.644000] binder: 14019:14022 ioctl 40046207 0 returned -16 [ 366.644863] binder: 14027:14029 ioctl c0306201 0 returned -14 [ 366.664333] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 366.685188] binder: BINDER_SET_CONTEXT_MGR already set 13:06:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x7a00000000000000, 0xfdfdffff00000000, 0x0}) [ 366.694798] binder: 14027:14029 ioctl c0306201 200000c0 returned -11 [ 366.703431] binder: 14019:14022 ioctl 40046207 0 returned -16 [ 366.712043] binder: 14040:14040 ioctl c0306201 0 returned -14 [ 366.725692] device bridge_slave_0 left promiscuous mode 13:06:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4040, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x300, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:06:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2002001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_FP_MODE(0x2d, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x104, r1, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3f}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffb}]}, 0x104}}, 0x20000040) [ 366.748681] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.771165] binder: 14026:14030 ioctl c018620b 0 returned -14 13:06:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff04000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 366.859801] binder: BINDER_SET_CONTEXT_MGR already set 13:06:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x4800000000000000, 0xfdfdffff00000000, 0x0}) 13:06:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)='net/anycast6\x00') setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000014c0)={0x1, 0x8001, 0xc058, 0x9, 0x3}, 0x14) [ 366.912589] binder: 14050:14052 ioctl 40046207 0 returned -16 [ 366.935172] binder: 14056:14059 ioctl c0306201 0 returned -14 [ 366.969711] binder: 14056:14059 ioctl c0306201 200000c0 returned -11 13:06:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00006c00, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 367.014442] binder: 14061:14061 ioctl c0306201 0 returned -14 [ 367.033647] binder: 14062:14067 ioctl c018620b 0 returned -14 13:06:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3f000000, 0xfdfdffff00000000, 0x0}) [ 367.071118] binder: 14069:14069 ioctl c018620b 0 returned -14 13:06:24 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200000, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:06:24 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000140)=0x101) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x2) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x8, 0x180) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x724f, 0x6, 0x80000000, 0x8, 0x9, 0x1}, 0x1c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x1ff, 0xf5c5, 0x0, 0x6}, 'syz0\x00', 0x3b}) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) [ 367.172218] device hsr_slave_1 left promiscuous mode [ 367.192017] binder: 14079:14083 ioctl c0306201 0 returned -14 [ 367.225375] device hsr_slave_0 left promiscuous mode [ 367.244029] binder: 14079:14083 ioctl c0306201 200000c0 returned -11 [ 367.279860] team0 (unregistering): Port device team_slave_1 removed [ 367.299696] binder: 14079:14083 ioctl c0306201 0 returned -14 [ 367.309824] binder: 14087:14094 ioctl c018620b 0 returned -14 [ 367.316315] binder: BINDER_SET_CONTEXT_MGR already set [ 367.342681] team0 (unregistering): Port device team_slave_0 removed [ 367.343460] binder: 14088:14092 ioctl 40046207 0 returned -16 [ 367.359808] binder: 14087:14098 ioctl c018620b 0 returned -14 [ 367.360995] binder: BINDER_SET_CONTEXT_MGR already set [ 367.407251] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 367.409378] binder: 14088:14097 ioctl 40046207 0 returned -16 [ 367.482438] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 367.677354] bond0 (unregistering): Released all slaves 13:06:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() lsetxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.SMACK64IPOUT\x00', &(0x7f0000000140)='\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000580)={0x200, 0x7f, 0x0, 0x4, r1, 0x8, 0x100000000, 0x9}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) ioctl$SG_GET_REQUEST_TABLE(r0, 0x227c, 0x0) 13:06:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r2 = getpgrp(0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)=r2) 13:06:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x74000000, 0xfdfdffff00000000, 0x0}) 13:06:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000074, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:25 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x114, 0x41, 0x400, 0x70bd29, 0x25dfdbfd, {0x1d}, [@generic="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", @generic]}, 0x114}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) 13:06:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xffffff80, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 367.975401] binder: 14116:14118 ioctl c0306201 0 returned -14 [ 367.990138] binder: 14112:14119 ioctl c018620b 0 returned -14 [ 368.004991] binder: BINDER_SET_CONTEXT_MGR already set [ 368.015616] binder: 14116:14118 ioctl c0306201 200000c0 returned -11 13:06:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x6c00, 0xfdfdffff00000000, 0x0}) 13:06:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x81ffffff00000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 368.020592] binder: 14110:14122 ioctl 40046207 0 returned -16 [ 368.041858] binder: 14112:14127 ioctl c018620b 0 returned -14 13:06:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x4000002, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) 13:06:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00007400, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 368.068020] binder: 14124:14124 ioctl c0306201 0 returned -14 13:06:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x8000, 0x0) mq_timedsend(r1, &(0x7f0000000180)="b2adcbee088cc6780001570a8f", 0xd, 0x6, &(0x7f00000001c0)) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xba, 0x40000) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @default, @bpq0='bpq0\x00', 0x3, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast]}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x100, 0x0) ioctl$KDMKTONE(r3, 0x4b30, 0x2) 13:06:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x7a00, 0xfdfdffff00000000, 0x0}) [ 368.238407] binder: 14141:14143 ioctl c0306201 0 returned -14 [ 368.261104] binder: BINDER_SET_CONTEXT_MGR already set [ 368.266422] binder: 14139:14144 ioctl 40046207 0 returned -16 [ 368.280702] binder: 14145:14148 ioctl c018620b 0 returned -14 [ 368.307714] binder: 14141:14143 ioctl c0306201 200000c0 returned -11 [ 368.339672] binder: 14149:14155 ioctl c018620b 0 returned -14 [ 368.341083] binder: 14141:14143 ioctl c0306201 0 returned -14 [ 368.408254] binder: BINDER_SET_CONTEXT_MGR already set [ 368.435204] binder: 14139:14159 ioctl 40046207 0 returned -16 13:06:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="b7da122b891bfc4e2f00000000000000", 0x10) r1 = socket$netlink(0x10, 0x3, 0x20000000000004) r2 = fcntl$dupfd(r1, 0x1, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2349}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0xfffffffffffffffc, 0x2) r4 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x2) pwritev(r4, &(0x7f0000000480)=[{&(0x7f00000004c0)="2bd83b0010947db9141978d2d9c93f59a4f3ec7e1e3f09811624c2f43040cc8b8d570728e9fafff91e41a78f52db481db6f8", 0x32}], 0x1, 0x81806) sendfile(r2, r3, &(0x7f0000000300), 0x2000006) 13:06:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xc877f4354000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x80000001) 13:06:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x6000000000000000, 0xfdfdffff00000000, 0x0}) 13:06:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00002000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1ffffffffffe) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RMKNOD(r0, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x44, 0x4}}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 369.075329] binder: 14168:14169 ioctl c018620b 0 returned -14 13:06:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, r0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x5, 0x100) r2 = geteuid() pread64(r1, &(0x7f0000000200)=""/246, 0xf6, 0x0) r3 = getgid() write$FUSE_ATTR(r0, &(0x7f0000000180)={0x78, 0x0, 0x3, {0x5, 0x3, 0x0, {0x5, 0xffffffffffffffff, 0x6, 0x400, 0x1000, 0x2, 0x7f, 0x9, 0x0, 0x6, 0xc38a, r2, r3, 0x8003, 0x2}}}, 0x78) prctl$PR_SET_ENDIAN(0x14, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000080)={@rand_addr, @local, @empty}, &(0x7f00000000c0)=0xc) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 13:06:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x10000, 0x200) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) [ 369.120856] binder: 14168:14179 ioctl 1 20000000 returned -22 [ 369.129283] binder: 14171:14178 ioctl c0306201 0 returned -14 13:06:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x300000000000000, 0xfdfdffff00000000, 0x0}) [ 369.180070] binder: 14171:14178 ioctl c0306201 200000c0 returned -11 [ 369.217304] binder: 14189:14189 ioctl c0306201 0 returned -14 13:06:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x4000000000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00004800, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 369.255343] binder: 14190:14195 ioctl c018620b 0 returned -14 13:06:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0xffff}) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0xf27f, @loopback, 0x9}, {0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xc5}, 0x10000000000000, [0x1f, 0x6, 0xfcf, 0xffffffffffffff7f, 0x2, 0x76, 0x0, 0x1000]}, 0x5c) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000001c0)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000200)={r2, r3, 0x101}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000002c0)={r4, 0x7fff, 0x7ff}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r5 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x500) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000000080)={{0x0, 0x3, 0x3, 0xdc8, 0x79a8, 0x2}, 0xf11e, 0x0, 0x8001, 0x7, 0x1, "75d32afb0e51345a1e708c3d8c932ae08cf9b1665e025deef61b6d4403523a16fd89c27e8f8ad100056316e55101f9daf6fcb9a35fb3e72791de187aa9456d00c3df0e6381b71d69b042c9feb4c164c46a23b987cd72cbacc8f0769a2faa1817866e93c1a3ac6b1fe5612d97bae884b0158fb37d081340baf6461effda5f5667"}) [ 369.316003] binder: 14198:14204 ioctl c018620b 0 returned -14 13:06:27 executing program 2: openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x8, 0x10900) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x4000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:06:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x600, 0xfdfdffff00000000, 0x0}) [ 369.364842] binder: BINDER_SET_CONTEXT_MGR already set 13:06:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) [ 369.418706] binder: 14199:14200 ioctl 40046207 0 returned -16 13:06:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x93ffffff, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 369.510140] binder: 14220:14222 ioctl c018620b 0 returned -14 [ 369.518893] binder: 14214:14224 ioctl c0306201 0 returned -14 13:06:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x68000000, 0xfdfdffff00000000, 0x0}) 13:06:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffd) socketpair(0x1b, 0x0, 0x3f, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}}, 0x20000000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000080)={0x1, 0xff, [{0x9, 0x0, 0x9}]}) 13:06:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000068, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 369.562647] binder: 14223:14223 ioctl c018620b 0 returned -14 [ 369.569722] binder: BINDER_SET_CONTEXT_MGR already set [ 369.581891] binder: 14214:14224 ioctl c0306201 200000c0 returned -11 [ 369.639293] binder: 14225:14230 ioctl 40046207 0 returned -16 [ 369.680363] binder: BINDER_SET_CONTEXT_MGR already set 13:06:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x81ffffff, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 369.714315] binder: 14225:14241 ioctl 40046207 0 returned -16 13:06:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x4, 0xfdfdffff00000000, 0x0}) 13:06:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000000000)={0x8}, 0x8, 0x800) 13:06:27 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) [ 369.811252] binder: 14248:14254 ioctl c0306201 0 returned -14 13:06:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x8000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 369.885638] binder: 14248:14254 ioctl c0306201 200000c0 returned -11 13:06:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff0000006c, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 369.932707] binder: BINDER_SET_CONTEXT_MGR already set [ 369.979740] binder: 14263:14266 ioctl 40046207 0 returned -16 13:06:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3f00000000000000, 0xfdfdffff00000000, 0x0}) 13:06:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0x4008ae6a, &(0x7f0000000000)={0xfffffffffffffffd, 0x10002}) [ 370.026131] binder: BINDER_SET_CONTEXT_MGR already set 13:06:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x200000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x40000, 0x0) accept$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) clone(0x8002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:06:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x8, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 370.067825] binder: 14263:14281 ioctl 40046207 0 returned -16 13:06:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x8, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000002c0)={@loopback, @dev={0xac, 0x14, 0x14, 0x21}, r5}, 0xc) r6 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0xffffffff, 0x0) r7 = syz_open_dev$cec(&(0x7f0000001380)='/dev/cec#\x00', 0x2, 0x2) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xd49dfe7d83ac9600}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x78, r3, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xa7f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 13:06:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x6, 0xfdfdffff00000000, 0x0}) [ 370.197188] binder: 14280:14287 ioctl c0306201 0 returned -14 13:06:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff20000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x3, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 370.256483] binder: 14280:14287 ioctl c0306201 200000c0 returned -11 [ 370.275359] binder: 14295:14296 ioctl 660c 0 returned -22 [ 370.289775] binder: BINDER_SET_CONTEXT_MGR already set [ 370.321843] binder: BINDER_SET_CONTEXT_MGR already set [ 370.334641] binder: 14295:14296 ioctl c018620b 0 returned -14 [ 370.359681] binder: 14293:14303 ioctl 40046207 0 returned -16 13:06:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0xfffffffffffffffa}, &(0x7f0000000140)=0x8) [ 370.370083] binder: 14311:14316 ioctl 660c 0 returned -22 [ 370.384290] binder: 14304:14308 ioctl 40046207 0 returned -16 13:06:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xa1}], 0x1, 0x0) getpgrp(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) write$FUSE_LK(r0, &(0x7f0000000000)={0x28, 0xfffffffffffffff5, 0x5, {{0x4, 0x7, 0x1, r1}}}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000280)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=r3, 0x4) 13:06:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xffffffff, 0x80, 0x5, 0x7, 0x14, 0x7, 0x2, 0x9, 0x8, 0x3}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x1a}) 13:06:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x400000000000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff06000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:28 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x6a0240, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x101000, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x0) ioctl$BLKPG(r0, 0x125d, 0x0) 13:06:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xfeffffff00000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 370.729357] binder: 14338:14340 ioctl c018620b 0 returned -14 [ 370.743437] binder: 14338:14343 ioctl c018620b 0 returned -14 13:06:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff4c000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x80300) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000280)={"b61d3bbe52d75028290785806c026a89b9b1f382d910b3a4aa7b7a3be01627489bc78960dc4a8d8006367a195b9537b7da7acbd83e0c7d61ff9ee151c07b4a894822001e51c79ea8d975f519bd4c83773fab6d212d3bc009fdbe498bc54a964bc215400866865357fa8e35ef56474dc150404bf29ed0456914aa67901bf3d7bb3ba29e324fca8bd4a0b1b2bd278ea3a0576d82c8ae7d8e1fa5e723eee2bb10337bbd3c66f17e7948f81d8da2527dde4a2cd834303701ba103fd94a0c993fa9b5aa87cac21aa20bbe3c531f3c9e8669beca073b815e7c537fa9be19d59d746dda736ce163d030baae4f0950b5b23c7075cf9d19230bc6bf00eb1f130720d75a0f79ba1dd1d46a35bb539fc1d8a9393157a475375c53ed18909358365b478f1fbbea0a1ca9f467747ffb219a8c84c16bc5eb0f2799ef3bb223983ae829346b4f97dd22a040076fcd796b6c96b69b772fc9647ccfb451421195eab4dcec01a0ae5cf1eeb88cbf60a9a58a252997574fa4d3fa15bd5730bcb6b3dcbd030a02b62adf0c5f9b866d768f638248db923b0360cb0ebee0377228f71abe62f9c8b381f7d43be979417a721d041799eaddcaf7f92ffc2b207469251cab19ede5712a340c7c809ae5071851eae8307e464c4c9f04a6be73b0131401cbead4c9772e1bff9a75610e5ef0f22ea700bdac176d1d303bc4fc45f1a80cf38dd8cc2040c0fdec25243ab41e2d5b4371e25c4374926e7ef808821f05ff339ceca62ad91e010389279989f4146fe45ed09b80d32bce8176eeb5b00ef3c7cc5594f59d0dc9e48a4744f6d380ffb7dd8a7f662c1487e78c6941dd35a8d17c29d2c6905a770da057b33ee6e7a03a228ba26b3b9d703548ee6b2a680ee570919d73055421056009ad7f97409b83769aa2be3cbde957d65ea0396d045ad838d993ead88f01649a9c0e868ca9ee0fdd32fe11d1d18fb37bb61537f83680a80aa67c3a7b1bc26025b0286042bc453c3487fabc7d173a4edc3cb978f55cbdcc8d84d85dbaff93970e623f235b40485ca6ffdea0d56c9b87879fbcbea0f1e3e3d70d6d804d4de7e09bfa292d63b68139abe327863c86f559c3933ddc3651fd6fe5552e1654b1bca74f0dd11734a38f4de120a13f5a28fa4a16bc886c47f2a1c47572ec37de795a9aa8c943ee5162219171c3f78603e3ffeec37c20fbbd1394eda40b7e9d8a6b863f1ba8bfe778bb98527aa6e65f8d192f1b50b6d9890ae25c1ffc8e0fa432fe93d4cc7cd80d2715722a8e65f811f20176bc92e5cb1845824fc21c65d654e2d5f7d2810bcaefd14b26fb183f48606343fc981b35133d50f125bdc32f7510a7bb866b9f7d57c393ea253834ca0726e00640ebf77cffcd343dd203946443b16f59d43e59dff2e35701bc5852fafa68c03d486e2a4a65a0ef69fe29931828d5ba94ce954f3b21b493db"}) shmget(0x1, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)=0x6, 0x4) r1 = semget(0x1, 0x7, 0x200) semtimedop(r1, &(0x7f00000001c0)=[{0x7, 0xfe, 0x1000}], 0x1, &(0x7f0000000240)={0x0, 0x1c9c380}) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000006c00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000740)="7c9b2e60f31b7284c53a671ab0eb3936247fc0a474fa6beabe04abcd1744724c220f4fc574c7ab0b2980cf8be424d4e74b") ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) [ 371.380725] loop2: p1 p2 p3 p4 < > 13:06:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1000000, 0xfdfdffff00000000, 0x0}) 13:06:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xff03000000000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9, 0x4804c0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000100)={0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}]}) 13:06:29 executing program 4: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0xfffffffffffffffe, 0x80000001}, {0xa, 0x0, 0x0, @remote, 0x1}, 0x0, [0x0, 0x0, 0x250f8000000, 0x200]}, 0x1bd) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1000007f07d31808000000000000009e425a00c893e6d2a891c0974aa64f07218a0621bbf7c590b7dfeec8b114a0167bff15848b8490901a60cc425b02fcedbcd67fe744adf08ae14df2e5c1395907af191c88ec6506"], 0x1}], 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x0) r1 = semget(0x1, 0x3, 0x0) semctl$SETVAL(r1, 0x98856084217fddf4, 0x10, &(0x7f00000000c0)=0x8) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x8002) ioctl$TIOCCBRK(r2, 0x5428) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) [ 371.737184] __loop_clr_fd: partition scan of loop2 failed (rc=-22) [ 371.779665] binder: 14365:14373 ioctl c018620b 0 returned -14 [ 371.816830] print_req_error: 6 callbacks suppressed [ 371.816857] print_req_error: I/O error, dev loop2, sector 101 flags 80700 13:06:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x94ffffff00000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 371.826263] print_req_error: I/O error, dev loop2, sector 201 flags 80700 [ 371.829996] print_req_error: I/O error, dev loop2, sector 301 flags 80700 [ 371.840894] binder: 14375:14377 ioctl c018620b 0 returned -14 [ 371.858830] print_req_error: I/O error, dev loop2, sector 1 flags 80700 [ 371.866219] print_req_error: I/O error, dev loop2, sector 1 flags 0 [ 371.872820] buffer_io_error: 5 callbacks suppressed [ 371.872831] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 371.894925] print_req_error: I/O error, dev loop2, sector 201 flags 0 [ 371.901643] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 371.909453] print_req_error: I/O error, dev loop2, sector 205 flags 0 [ 371.916064] Buffer I/O error on dev loop2p3, logical block 1, async page read [ 371.923427] print_req_error: I/O error, dev loop2, sector 101 flags 0 [ 371.930564] Buffer I/O error on dev loop2p2, logical block 0, async page read [ 371.937891] print_req_error: I/O error, dev loop2, sector 105 flags 0 [ 371.944819] Buffer I/O error on dev loop2p2, logical block 1, async page read [ 371.953195] print_req_error: I/O error, dev loop2, sector 301 flags 0 [ 371.960076] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 371.967421] Buffer I/O error on dev loop2p2, logical block 0, async page read 13:06:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x92ffffff00000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000600, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 371.975010] Buffer I/O error on dev loop2p2, logical block 1, async page read [ 371.982426] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 371.989804] Buffer I/O error on dev loop2p2, logical block 0, async page read 13:06:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x5c3, @dev={0xfe, 0x80, [], 0x25}}}, 0xc082, 0x9e}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0xdbb, 0x2}, 0x8) 13:06:29 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x80300) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000280)={"b61d3bbe52d75028290785806c026a89b9b1f382d910b3a4aa7b7a3be01627489bc78960dc4a8d8006367a195b9537b7da7acbd83e0c7d61ff9ee151c07b4a894822001e51c79ea8d975f519bd4c83773fab6d212d3bc009fdbe498bc54a964bc215400866865357fa8e35ef56474dc150404bf29ed0456914aa67901bf3d7bb3ba29e324fca8bd4a0b1b2bd278ea3a0576d82c8ae7d8e1fa5e723eee2bb10337bbd3c66f17e7948f81d8da2527dde4a2cd834303701ba103fd94a0c993fa9b5aa87cac21aa20bbe3c531f3c9e8669beca073b815e7c537fa9be19d59d746dda736ce163d030baae4f0950b5b23c7075cf9d19230bc6bf00eb1f130720d75a0f79ba1dd1d46a35bb539fc1d8a9393157a475375c53ed18909358365b478f1fbbea0a1ca9f467747ffb219a8c84c16bc5eb0f2799ef3bb223983ae829346b4f97dd22a040076fcd796b6c96b69b772fc9647ccfb451421195eab4dcec01a0ae5cf1eeb88cbf60a9a58a252997574fa4d3fa15bd5730bcb6b3dcbd030a02b62adf0c5f9b866d768f638248db923b0360cb0ebee0377228f71abe62f9c8b381f7d43be979417a721d041799eaddcaf7f92ffc2b207469251cab19ede5712a340c7c809ae5071851eae8307e464c4c9f04a6be73b0131401cbead4c9772e1bff9a75610e5ef0f22ea700bdac176d1d303bc4fc45f1a80cf38dd8cc2040c0fdec25243ab41e2d5b4371e25c4374926e7ef808821f05ff339ceca62ad91e010389279989f4146fe45ed09b80d32bce8176eeb5b00ef3c7cc5594f59d0dc9e48a4744f6d380ffb7dd8a7f662c1487e78c6941dd35a8d17c29d2c6905a770da057b33ee6e7a03a228ba26b3b9d703548ee6b2a680ee570919d73055421056009ad7f97409b83769aa2be3cbde957d65ea0396d045ad838d993ead88f01649a9c0e868ca9ee0fdd32fe11d1d18fb37bb61537f83680a80aa67c3a7b1bc26025b0286042bc453c3487fabc7d173a4edc3cb978f55cbdcc8d84d85dbaff93970e623f235b40485ca6ffdea0d56c9b87879fbcbea0f1e3e3d70d6d804d4de7e09bfa292d63b68139abe327863c86f559c3933ddc3651fd6fe5552e1654b1bca74f0dd11734a38f4de120a13f5a28fa4a16bc886c47f2a1c47572ec37de795a9aa8c943ee5162219171c3f78603e3ffeec37c20fbbd1394eda40b7e9d8a6b863f1ba8bfe778bb98527aa6e65f8d192f1b50b6d9890ae25c1ffc8e0fa432fe93d4cc7cd80d2715722a8e65f811f20176bc92e5cb1845824fc21c65d654e2d5f7d2810bcaefd14b26fb183f48606343fc981b35133d50f125bdc32f7510a7bb866b9f7d57c393ea253834ca0726e00640ebf77cffcd343dd203946443b16f59d43e59dff2e35701bc5852fafa68c03d486e2a4a65a0ef69fe29931828d5ba94ce954f3b21b493db"}) shmget(0x1, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)=0x6, 0x4) r1 = semget(0x1, 0x7, 0x200) semtimedop(r1, &(0x7f00000001c0)=[{0x7, 0xfe, 0x1000}], 0x1, &(0x7f0000000240)={0x0, 0x1c9c380}) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000006c00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000740)="7c9b2e60f31b7284c53a671ab0eb3936247fc0a474fa6beabe04abcd1744724c220f4fc574c7ab0b2980cf8be424d4e74b") ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) 13:06:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x80ffffff00000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:30 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8, 0x800) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, 0x0) r2 = socket(0xd, 0x0, 0x6) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x15}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080029bd7000fedbdf25020000000c00050004693333eb84d7d16d7029048965000000000000000c00030008000000000000000c00040000000000000000000c00020002000000000000000c00030005000000000000000c000800ffffffff00000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000000)="43c78a3ce3", 0x5) [ 372.175344] binder: 14391:14394 ioctl c018620b 0 returned -14 [ 372.181718] binder: 14396:14397 ioctl c018620b 0 returned -14 [ 372.246716] IPVS: ftp: loaded support on port[0] = 21 13:06:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xffffffff00000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 372.375716] IPVS: ftp: loaded support on port[0] = 21 [ 372.430586] binder: 14408:14409 ioctl c018620b 0 returned -14 [ 372.514471] loop2: p1 p2 p3 p4 < > [ 372.554406] IPVS: ftp: loaded support on port[0] = 21 [ 372.797835] chnl_net:caif_netlink_parms(): no params data found [ 372.849850] __loop_clr_fd: partition scan of loop2 failed (rc=-22) [ 372.971425] chnl_net:caif_netlink_parms(): no params data found [ 373.060984] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.067467] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.081787] device bridge_slave_0 entered promiscuous mode [ 373.147038] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.154238] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.161878] device bridge_slave_1 entered promiscuous mode [ 373.233025] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 373.270724] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.277085] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.284837] device bridge_slave_0 entered promiscuous mode [ 373.293517] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 373.328562] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.334930] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.343804] device bridge_slave_1 entered promiscuous mode [ 373.387706] chnl_net:caif_netlink_parms(): no params data found [ 373.395981] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 373.403872] team0: Port device team_slave_0 added [ 373.411474] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 373.432072] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 373.445228] team0: Port device team_slave_1 added [ 373.452253] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 373.478014] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 373.531131] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 373.545748] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 373.553639] team0: Port device team_slave_0 added [ 373.559403] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 373.566818] team0: Port device team_slave_1 added [ 373.593574] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.601693] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.609650] device bridge_slave_0 entered promiscuous mode [ 373.616978] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 373.682035] device hsr_slave_0 entered promiscuous mode [ 373.729035] device hsr_slave_1 entered promiscuous mode [ 373.779469] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 373.786612] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 373.793819] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.800573] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.808204] device bridge_slave_1 entered promiscuous mode [ 373.815275] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 373.910469] device hsr_slave_0 entered promiscuous mode [ 373.949585] device hsr_slave_1 entered promiscuous mode [ 373.999291] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 374.011246] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 374.032068] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 374.047180] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 374.073201] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 374.082416] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 374.090941] team0: Port device team_slave_0 added [ 374.096525] device bridge_slave_1 left promiscuous mode [ 374.102555] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.149739] device bridge_slave_0 left promiscuous mode [ 374.155240] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.210666] device bridge_slave_1 left promiscuous mode [ 374.216252] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.269639] device bridge_slave_0 left promiscuous mode [ 374.275165] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.320766] device bridge_slave_1 left promiscuous mode [ 374.326293] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.379639] device bridge_slave_0 left promiscuous mode [ 374.385152] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.623231] device hsr_slave_1 left promiscuous mode [ 374.693729] device hsr_slave_0 left promiscuous mode [ 374.754201] team0 (unregistering): Port device team_slave_1 removed [ 374.792027] team0 (unregistering): Port device team_slave_0 removed [ 374.832814] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 374.889894] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 375.033345] bond0 (unregistering): Released all slaves [ 375.174196] device hsr_slave_1 left promiscuous mode [ 375.214741] device hsr_slave_0 left promiscuous mode [ 375.254718] team0 (unregistering): Port device team_slave_1 removed [ 375.267651] team0 (unregistering): Port device team_slave_0 removed [ 375.278891] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 375.314047] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 375.389850] bond0 (unregistering): Released all slaves [ 375.532446] device hsr_slave_1 left promiscuous mode [ 375.574709] device hsr_slave_0 left promiscuous mode [ 375.634214] team0 (unregistering): Port device team_slave_1 removed [ 375.646705] team0 (unregistering): Port device team_slave_0 removed [ 375.657907] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 375.714984] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 375.797339] bond0 (unregistering): Released all slaves [ 375.896636] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 375.904253] team0: Port device team_slave_1 added [ 375.918915] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 375.927405] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 375.940753] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 375.993231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.040949] device hsr_slave_0 entered promiscuous mode [ 376.088923] device hsr_slave_1 entered promiscuous mode [ 376.144473] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 376.152846] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 376.160624] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 376.179912] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 376.189998] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 376.196072] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.206087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 376.213774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 376.228212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.239197] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 376.248369] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 376.258094] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 376.267994] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 376.278826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 376.279391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.299043] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.305434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.312481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 376.319698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 376.327011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 376.340772] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 376.346853] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.356189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 376.368211] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 376.375927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 376.384158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.392185] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.398610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.405576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 376.414197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.421922] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.428272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.435249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 376.444165] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 376.465671] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 376.473722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 376.485981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.494152] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.500591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.507980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 376.520800] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 376.532624] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 376.541102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 376.553652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 376.565726] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 376.576053] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 376.584703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 376.593321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 376.601357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 376.619180] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 376.626294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 376.633930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 376.642250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 376.653847] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 376.668810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 376.676762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 376.690023] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 376.698862] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 376.711977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 376.720421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 376.727901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.736945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 376.744671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 376.756125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.770997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 376.782255] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 376.790150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 376.797883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 376.805892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 376.813931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.824403] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 376.830646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 376.845763] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 376.855842] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 376.866250] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 376.875323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.886434] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 376.892695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 376.950569] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 376.957276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 376.965855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 376.974170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 376.981928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 376.992970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.091796] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 377.097905] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.134968] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 377.172521] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 377.188832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 377.196765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.213682] binder: BINDER_SET_CONTEXT_MGR already set [ 377.222812] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.229204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.245770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 377.254729] binder: 14432:14435 ioctl 40046207 200000c0 returned -16 [ 377.272572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 13:06:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x20000000, 0xfdfdffff00000000, 0x0}) 13:06:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x85e, 0x2000) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000080)=0x7, 0x4) 13:06:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x500, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 377.296868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 377.335038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.355534] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.362163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.363278] binder: 14437:14439 ioctl c018620b 0 returned -14 [ 377.387442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 377.399449] binder: 14442:14444 ioctl c018620b 0 returned -14 [ 377.416207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.437153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 377.459740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 377.471063] binder: BINDER_SET_CONTEXT_MGR already set [ 377.476379] binder: 14443:14451 ioctl 40046207 200000c0 returned -16 [ 377.485626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 377.524366] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 377.555178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 377.565394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 377.599288] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 377.612830] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 377.620473] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 377.628048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 377.636691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 377.645239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 377.653539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 377.664987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 377.672712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 377.684838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.695746] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 377.702502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 377.748506] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 377.778248] 8021q: adding VLAN 0 to HW filter on device batadv0 13:06:35 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000080)=ANY=[@ANYBLOB="f819a8351c91b879398f4fd2d067ae6220078898c9c9bdd2563ba42f6c62ee87a58f08bf2ad45a84b055c6d41495e6341272350ec8a894a4a3c3e83e39209c1d72001b05ffc88d377101bd"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) semget$private(0x0, 0x0, 0x5) clock_gettime(0x0, &(0x7f00000078c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x1e6) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7d95c750e5ae4fe69825c429eee90ec439ec503f2a6ba791395aa14afd6837b3fba1d4459c59d154d0c4f00f424195eff54a84c12a63bbc8065ab08cc7383b72c7323"], 0x110) futimesat(r0, &(0x7f0000007880)='./file0\x00', &(0x7f0000007940)={{r2, r3/1000+30000}, {r4, r5/1000+10000}}) close(r1) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000780)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000007c0)={0x0, 0x200}, &(0x7f0000000800)=0x8) syz_extract_tcp_res(&(0x7f0000000000), 0x0, 0x8001) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000b40)={r8, 0xff, 0xfff}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000002540)={0x0, 0x1, 0x4, [0x2, 0x5, 0x7ff, 0x20]}, &(0x7f0000002580)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000002980)={0x7, 0xa, 0x6, 0x7}, &(0x7f00000029c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000002c00)={0x0, 0x2fe7, 0x4}, &(0x7f0000002c40)=0x8) sendmmsg$inet_sctp(r7, &(0x7f0000004280)=[{&(0x7f0000002d00)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000004040)=[{&(0x7f0000003fc0)}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x4001) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') recvmmsg(r0, &(0x7f0000007500)=[{{&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=""/146, 0x92}}, {{&(0x7f00000046c0)=@ethernet={0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000004a00)=""/205, 0xcd}}], 0x2, 0x0, 0x0) sendfile(r7, r9, &(0x7f0000000180), 0x100000001) mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 13:06:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x80300) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000280)={"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"}) shmget(0x1, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)=0x6, 0x4) r1 = semget(0x1, 0x7, 0x200) semtimedop(r1, &(0x7f00000001c0)=[{0x7, 0xfe, 0x1000}], 0x1, &(0x7f0000000240)={0x0, 0x1c9c380}) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000006c00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000740)="7c9b2e60f31b7284c53a671ab0eb3936247fc0a474fa6beabe04abcd1744724c220f4fc574c7ab0b2980cf8be424d4e74b") ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) 13:06:35 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0xc0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000002c0)=""/64) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xbbed5659865d45c0) clone(0x4c840400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x100, 0x410000) write$UHID_CREATE2(r2, &(0x7f0000000080)={0xb, 'syz0\x00', 'syz1\x00', 'syz0\x00', 0xd1, 0x83f, 0xffffffffffffff80, 0x6de, 0x3, 0x1, "2848e6f3739148b520a598f909e81150e1f08a32b7845e9b8b77a5343d1dbedcff0779dfc857ee9588422127a95653c348547e883a9a8f53c1fc5bac0b7983a213218bf0a067f77b20008cf4b2d01c7bd2ea36f0e04b7bb3bd4fafc08f776357a671b3f39e3dca9d5e8088d28c8bda63e98714db17f1cba3b81b6ee118b60949dba829e460f87f8d1979844114a246e52e316e3f52645c08cf0c03ed699bc2420d98f6e005df1671d1fae564dd267042ab942490c199ca983f3edae47411dc1058c87d8bd7e74230e28c19fc6bc1ea9588"}, 0x1e9) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, 0x0) [ 378.039947] loop2: p1 p2 p3 p4 < > [ 378.094460] binder: 14479:14480 ioctl c0306201 0 returned -14 13:06:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x5, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x48000000, 0xfdfdffff00000000, 0x0}) 13:06:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='H'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x30000, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) [ 378.139156] binder: 14479:14480 ioctl c0306201 200000c0 returned -11 [ 378.238864] binder: BINDER_SET_CONTEXT_MGR already set [ 378.314841] binder: 14485:14493 ioctl c018620b 0 returned -14 [ 378.328620] binder: 14484:14489 ioctl 40046207 200000c0 returned -16 [ 378.374901] binder: 14495:14496 ioctl c0306201 0 returned -14 13:06:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xbf, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 378.416351] binder: 14495:14496 ioctl c0306201 200000c0 returned -11 13:06:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:06:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x7a, 0xfdfdffff00000000, 0x0}) [ 378.535218] binder: 14495:14496 ioctl c0306201 0 returned -14 13:06:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='\n'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 378.758584] binder: BINDER_SET_CONTEXT_MGR already set 13:06:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xbf000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 378.795078] binder: 14514:14524 ioctl 40046207 200000c0 returned -16 [ 378.893165] binder: 14528:14531 ioctl c0306201 0 returned -14 [ 378.899694] __loop_clr_fd: partition scan of loop2 failed (rc=-22) [ 378.948268] binder: 14528:14531 ioctl c0306201 200000c0 returned -11 [ 378.984957] binder: 14528:14531 ioctl c0306201 0 returned -14 13:06:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x600000000000000, 0xfdfdffff00000000, 0x0}) 13:06:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80102, 0x0) 13:06:36 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x8000) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_ifreq(r0, 0x100000200008914, &(0x7f0000000080)={'bond0\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', @ifru_names='\np_vti0\x00'}) 13:06:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x2000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xffffffffffffffcb}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e23, @local}}, 0xfffffffffffffffd, 0x7f}, &(0x7f0000000280)=0x90) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x501000, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x153, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)=','}) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000003c0), 0x4) fcntl$getownex(r2, 0x10, &(0x7f0000000340)={0x0, 0x0}) write$FUSE_LK(r2, &(0x7f0000000300)={0x28, 0xfffffffffffffff5, 0x8, {{0x1, 0x2, 0x0, r3}}}, 0x28) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) pause() getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={r1, 0x2}, &(0x7f0000000440)=0x8) r4 = accept4$rose(r2, 0x0, &(0x7f00000000c0), 0x800) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000002c0)=0x7) 13:06:36 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000080)=ANY=[@ANYBLOB="f819a8351c91b879398f4fd2d067ae6220078898c9c9bdd2563ba42f6c62ee87a58f08bf2ad45a84b055c6d41495e6341272350ec8a894a4a3c3e83e39209c1d72001b05ffc88d377101bd"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) semget$private(0x0, 0x0, 0x5) clock_gettime(0x0, &(0x7f00000078c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x1e6) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7d95c750e5ae4fe69825c429eee90ec439ec503f2a6ba791395aa14afd6837b3fba1d4459c59d154d0c4f00f424195eff54a84c12a63bbc8065ab08cc7383b72c7323"], 0x110) futimesat(r0, &(0x7f0000007880)='./file0\x00', &(0x7f0000007940)={{r2, r3/1000+30000}, {r4, r5/1000+10000}}) close(r1) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000780)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000007c0)={0x0, 0x200}, &(0x7f0000000800)=0x8) syz_extract_tcp_res(&(0x7f0000000000), 0x0, 0x8001) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000b40)={r8, 0xff, 0xfff}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000002540)={0x0, 0x1, 0x4, [0x2, 0x5, 0x7ff, 0x20]}, &(0x7f0000002580)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000002980)={0x7, 0xa, 0x6, 0x7}, &(0x7f00000029c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000002c00)={0x0, 0x2fe7, 0x4}, &(0x7f0000002c40)=0x8) sendmmsg$inet_sctp(r7, &(0x7f0000004280)=[{&(0x7f0000002d00)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000004040)=[{&(0x7f0000003fc0)}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x4001) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') recvmmsg(r0, &(0x7f0000007500)=[{{&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=""/146, 0x92}}, {{&(0x7f00000046c0)=@ethernet={0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000004a00)=""/205, 0xcd}}], 0x2, 0x0, 0x0) sendfile(r7, r9, &(0x7f0000000180), 0x100000001) mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 379.139524] binder: 14547:14550 ioctl c018620b 0 returned -14 [ 379.150883] binder: BINDER_SET_CONTEXT_MGR already set [ 379.162680] binder: 14546:14559 ioctl c0306201 0 returned -14 13:06:37 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) getsockname(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000140)=0x80) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x20000, 0x0) [ 379.186029] binder: 14544:14557 ioctl 40046207 200000c0 returned -16 [ 379.206061] binder: 14563:14563 ioctl c0306201 0 returned -14 13:06:37 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000080)=ANY=[@ANYBLOB="f819a8351c91b879398f4fd2d067ae6220078898c9c9bdd2563ba42f6c62ee87a58f08bf2ad45a84b055c6d41495e6341272350ec8a894a4a3c3e83e39209c1d72001b05ffc88d377101bd"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) semget$private(0x0, 0x0, 0x5) clock_gettime(0x0, &(0x7f00000078c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x1e6) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7d95c750e5ae4fe69825c429eee90ec439ec503f2a6ba791395aa14afd6837b3fba1d4459c59d154d0c4f00f424195eff54a84c12a63bbc8065ab08cc7383b72c7323"], 0x110) futimesat(r0, &(0x7f0000007880)='./file0\x00', &(0x7f0000007940)={{r2, r3/1000+30000}, {r4, r5/1000+10000}}) close(r1) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000780)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000007c0)={0x0, 0x200}, &(0x7f0000000800)=0x8) syz_extract_tcp_res(&(0x7f0000000000), 0x0, 0x8001) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000b40)={r8, 0xff, 0xfff}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000002540)={0x0, 0x1, 0x4, [0x2, 0x5, 0x7ff, 0x20]}, &(0x7f0000002580)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000002980)={0x7, 0xa, 0x6, 0x7}, &(0x7f00000029c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000002c00)={0x0, 0x2fe7, 0x4}, &(0x7f0000002c40)=0x8) sendmmsg$inet_sctp(r7, &(0x7f0000004280)=[{&(0x7f0000002d00)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000004040)=[{&(0x7f0000003fc0)}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x4001) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') recvmmsg(r0, &(0x7f0000007500)=[{{&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=""/146, 0x92}}, {{&(0x7f00000046c0)=@ethernet={0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000004a00)=""/205, 0xcd}}], 0x2, 0x0, 0x0) sendfile(r7, r9, &(0x7f0000000180), 0x100000001) mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 13:06:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x4000000, 0xfdfdffff00000000, 0x0}) 13:06:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xff030000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @rand_addr=0x200}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) prlimit64(r2, 0x6, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x600242, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000100)={0x0, 0x7, 0x5, 0x101, 0x1, 0x68}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x2000, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x2f, &(0x7f0000000080)={@multicast1, @multicast1, @initdev}, &(0x7f00000000c0)=0xc) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 379.443556] binder: 14581:14586 ioctl c0306201 0 returned -14 [ 379.483728] binder: BINDER_SET_CONTEXT_MGR already set 13:06:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x123000, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000140)={0x3a, 0x3, 0xa, &(0x7f0000000100)="0e46b77f6f0e7a932057"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 379.512619] binder: 14584:14592 ioctl 40046207 200000c0 returned -16 [ 379.532759] binder: 14581:14586 ioctl c0306201 200000c0 returned -11 13:06:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xff03, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x4c00, 0xfdfdffff00000000, 0x0}) 13:06:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xffffff81, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 379.738293] binder: 14602:14604 ioctl c0306201 0 returned -14 [ 379.796458] binder: BINDER_SET_CONTEXT_MGR already set [ 379.850011] binder: 14602:14604 ioctl c0306201 200000c0 returned -11 [ 379.889550] binder: 14603:14608 ioctl 40046207 200000c0 returned -16 13:06:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xffffff93, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 379.919835] binder: 14602:14604 ioctl c0306201 0 returned -14 13:06:38 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x800, 0x404000) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080)=0x7fffffff, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000040), 0x4) 13:06:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x6000, 0xfdfdffff00000000, 0x0}) 13:06:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x4, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:38 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000080)=ANY=[@ANYBLOB="f819a8351c91b879398f4fd2d067ae6220078898c9c9bdd2563ba42f6c62ee87a58f08bf2ad45a84b055c6d41495e6341272350ec8a894a4a3c3e83e39209c1d72001b05ffc88d377101bd"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) semget$private(0x0, 0x0, 0x5) clock_gettime(0x0, &(0x7f00000078c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x1e6) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7d95c750e5ae4fe69825c429eee90ec439ec503f2a6ba791395aa14afd6837b3fba1d4459c59d154d0c4f00f424195eff54a84c12a63bbc8065ab08cc7383b72c7323"], 0x110) futimesat(r0, &(0x7f0000007880)='./file0\x00', &(0x7f0000007940)={{r2, r3/1000+30000}, {r4, r5/1000+10000}}) close(r1) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000780)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000007c0)={0x0, 0x200}, &(0x7f0000000800)=0x8) syz_extract_tcp_res(&(0x7f0000000000), 0x0, 0x8001) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000b40)={r8, 0xff, 0xfff}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000002540)={0x0, 0x1, 0x4, [0x2, 0x5, 0x7ff, 0x20]}, &(0x7f0000002580)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000002980)={0x7, 0xa, 0x6, 0x7}, &(0x7f00000029c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000002c00)={0x0, 0x2fe7, 0x4}, &(0x7f0000002c40)=0x8) sendmmsg$inet_sctp(r7, &(0x7f0000004280)=[{&(0x7f0000002d00)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000004040)=[{&(0x7f0000003fc0)}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x4001) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') recvmmsg(r0, &(0x7f0000007500)=[{{&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=""/146, 0x92}}, {{&(0x7f00000046c0)=@ethernet={0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000004a00)=""/205, 0xcd}}], 0x2, 0x0, 0x0) sendfile(r7, r9, &(0x7f0000000180), 0x100000001) mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 380.340153] binder: 14624:14629 ioctl c0306201 0 returned -14 [ 380.369877] binder: BINDER_SET_CONTEXT_MGR already set [ 380.396867] binder: 14624:14629 ioctl c0306201 200000c0 returned -11 [ 380.408199] binder: 14624:14629 ioctl c0306201 0 returned -14 [ 380.409123] binder: 14626:14635 ioctl 40046207 200000c0 returned -16 13:06:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x500000000000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:39 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x121000, 0x0) ftruncate(r0, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f636370726f746f3d6c6f636b5ffeae99a07ee4619b610dfca6f8a70892566e6f6c6f636b2c6c6f636b74"]) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x101000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x200, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @broadcast}}}, 0x118) 13:06:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000100)={0x9c, ""/156}) 13:06:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x2000000, 0xfdfdffff00000000, 0x0}) 13:06:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xfdffffff, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:39 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x28) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:06:39 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000080)=ANY=[@ANYBLOB="f819a8351c91b879398f4fd2d067ae6220078898c9c9bdd2563ba42f6c62ee87a58f08bf2ad45a84b055c6d41495e6341272350ec8a894a4a3c3e83e39209c1d72001b05ffc88d377101bd"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) semget$private(0x0, 0x0, 0x5) clock_gettime(0x0, &(0x7f00000078c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x1e6) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7d95c750e5ae4fe69825c429eee90ec439ec503f2a6ba791395aa14afd6837b3fba1d4459c59d154d0c4f00f424195eff54a84c12a63bbc8065ab08cc7383b72c7323"], 0x110) futimesat(r0, &(0x7f0000007880)='./file0\x00', &(0x7f0000007940)={{r2, r3/1000+30000}, {r4, r5/1000+10000}}) close(r1) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000780)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000007c0)={0x0, 0x200}, &(0x7f0000000800)=0x8) syz_extract_tcp_res(&(0x7f0000000000), 0x0, 0x8001) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000b40)={r8, 0xff, 0xfff}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000002540)={0x0, 0x1, 0x4, [0x2, 0x5, 0x7ff, 0x20]}, &(0x7f0000002580)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000002980)={0x7, 0xa, 0x6, 0x7}, &(0x7f00000029c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000002c00)={0x0, 0x2fe7, 0x4}, &(0x7f0000002c40)=0x8) sendmmsg$inet_sctp(r7, &(0x7f0000004280)=[{&(0x7f0000002d00)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000004040)=[{&(0x7f0000003fc0)}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x4001) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') recvmmsg(r0, &(0x7f0000007500)=[{{&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=""/146, 0x92}}, {{&(0x7f00000046c0)=@ethernet={0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000004a00)=""/205, 0xcd}}], 0x2, 0x0, 0x0) sendfile(r7, r9, &(0x7f0000000180), 0x100000001) mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 381.478625] binder: BINDER_SET_CONTEXT_MGR already set [ 381.490813] binder: 14656:14666 ioctl c0306201 0 returned -14 [ 381.511169] binder: 14656:14666 ioctl c0306201 200000c0 returned -11 13:06:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x80ffffff, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 381.549047] binder: 14657:14665 ioctl 40046207 200000c0 returned -16 13:06:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x7a000000, 0xfdfdffff00000000, 0x0}) [ 381.599218] binder: 14656:14666 ioctl c0306201 0 returned -14 [ 381.683547] gfs2: invalid mount option: loccproto=lock_þ®™ ~äa›a ü¦ø§’Vnolock [ 381.718194] gfs2: can't parse mount arguments 13:06:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0xffffffff, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000100), r2, 0x2}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x2000000000000000, 0xfdfdffff00000000, 0x0}) 13:06:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x3000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 381.854386] gfs2: invalid mount option: loccproto=lock_þ®™ ~äa›a ü¦ø§’Vnolock [ 381.937463] gfs2: can't parse mount arguments [ 381.970039] binder: 14693:14695 ioctl c0306201 0 returned -14 13:06:39 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x121000, 0x0) ftruncate(r0, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f636370726f746f3d6c6f636b5ffeae99a07ee4619b610dfca6f8a70892566e6f6c6f636b2c6c6f636b74"]) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x101000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x200, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @broadcast}}}, 0x118) [ 382.010282] binder: 14693:14695 ioctl c0306201 200000c0 returned -11 [ 382.014928] IPVS: ftp: loaded support on port[0] = 21 [ 382.040777] binder: BINDER_SET_CONTEXT_MGR already set [ 382.052195] binder: 14697:14697 ioctl c0306201 0 returned -14 13:06:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x0, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x7, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x100000001, 0x2000) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000100)={0x0, 0x0, [], {0x0, @reserved}}) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f00000001c0)='/dev/dsp#\x00', 0xa) [ 382.078739] binder: 14696:14699 ioctl 40046207 200000c0 returned -16 [ 382.128219] binder: BINDER_SET_CONTEXT_MGR already set [ 382.194182] binder: 14696:14706 ioctl 40046207 200000c0 returned -16 [ 382.256525] binder: 14710:14712 ioctl c0306201 0 returned -14 [ 382.290512] binder: 14710:14712 ioctl c0306201 200000c0 returned -11 [ 382.316722] gfs2: invalid mount option: loccproto=lock_þ®™ ~äa›a ü¦ø§’Vnolock [ 382.329868] binder: 14718:14718 ioctl c0306201 0 returned -14 [ 382.337482] gfs2: can't parse mount arguments [ 382.576174] chnl_net:caif_netlink_parms(): no params data found [ 382.661721] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.668217] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.685409] device bridge_slave_0 entered promiscuous mode [ 382.693349] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.699883] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.706865] device bridge_slave_1 entered promiscuous mode [ 382.729676] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 382.739371] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 382.758297] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 382.765809] team0: Port device team_slave_0 added [ 382.771441] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 382.779026] team0: Port device team_slave_1 added [ 382.784418] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 382.792021] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 382.871737] device hsr_slave_0 entered promiscuous mode [ 382.918934] device hsr_slave_1 entered promiscuous mode [ 382.959246] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 382.966392] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 382.985647] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.992070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.998794] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.005150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.043139] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 383.050929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.060927] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 383.070524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 383.077968] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.085335] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.094040] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 383.105235] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 383.112247] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.122569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 383.131083] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.137419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.460397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 383.468074] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.474489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.482864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 383.491848] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 383.661707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 383.673692] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 383.680846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 383.688994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 383.849364] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 383.856265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 383.864664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 383.874212] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 383.882387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 384.044994] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 384.056627] 8021q: adding VLAN 0 to HW filter on device batadv0 13:06:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) r1 = semget(0x3, 0x0, 0x548) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x8, 0x1000}, {0x7, 0x3, 0x800}, {0x7, 0x10001, 0x1000}, {0x3, 0x7, 0x800}], 0x4, &(0x7f0000000080)={0x0, 0x1c9c380}) 13:06:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x300, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x2000, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000200), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102011ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x2, 0x1f2b, 0x7, 0x0, 0x0, [{r0, 0x0, 0x101}, {r0, 0x0, 0x4}, {r0, 0x0, 0x4}, {r0, 0x0, 0x400}, {r0, 0x0, 0xffffffffffffff01}, {r0, 0x0, 0x9}, {r0, 0x0, 0x8}]}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3f00, 0xfdfdffff00000000, 0x0}) 13:06:41 executing program 2: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') r1 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0xd}}, 0x20) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x400000, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r2, r3}}, 0x18) r4 = dup(r0) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000140)=0x4) socket$inet(0x2, 0x80f, 0x1c0) setns(r0, 0x100002000000) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) 13:06:41 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vhci\x00', 0x200) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000001780)=ANY=[]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000300)={0x8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x113}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, 0x2, {{0x9, 0x4, 0x3, r0}}}, 0x28) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000001640)) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)=0x80000002) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x100000000000000}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 384.180310] binder: BINDER_SET_CONTEXT_MGR already set [ 384.185662] binder: 14734:14735 ioctl 40046207 200000c0 returned -16 [ 384.191931] binder: 14740:14741 ioctl c0306201 0 returned -14 [ 384.213231] binder: 14740:14741 ioctl c0306201 200000c0 returned -11 13:06:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff03000000, 0x0}) [ 384.241459] binder: 14740:14748 ioctl c0306201 0 returned -14 13:06:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) syz_open_dev$sndctrl(&(0x7f0000000380)='/dev/snd/controlC#\x00', 0x0, 0x400000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000040), 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x7ffff}}}}}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x9, 0x2, @thr={&(0x7f0000000540)="58e5ad7883eebd2909935a7bc8a559c970f31a577d11870a0451481f8696e0490be43f951ac7c3eaf07552c2cec1d8b9e7a3f1ebb066021c2b58d2c760e2590e8c3a851aa67f325f7630e1301d0a5c0de0b95192f0138c5f89e9b03651c638b78ebcfb51aeac9554d3d0a8923b098c9232701645117cb4b0bc19e7485dc5e86aa5e56dad064ad47ff2bcd4a72d03185aaaef2892bb8b42044657f8377a1f447cb18998e14f", 0x0}}, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000001c0)) timer_delete(0x0) semget$private(0x0, 0x3, 0x481) [ 384.297864] overlayfs: missing 'lowerdir' [ 384.311045] binder: 14746:14753 ioctl c018620b 0 returned -14 13:06:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getflags(r0, 0xb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 384.342095] binder: 14755:14757 ioctl c018620b 0 returned -14 13:06:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='\xbdwlan0eth0\x00', 0xfffffffffffffffb) keyctl$set_timeout(0xf, r1, 0x200) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x900, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140), 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 384.475486] binder: 14761:14764 ioctl c0306201 0 returned -14 [ 384.504128] binder: 14761:14764 ioctl c0306201 200000c0 returned -11 [ 384.531871] binder: BINDER_SET_CONTEXT_MGR already set 13:06:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x293) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5f61, 0x4000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x28, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000240)=0x1, &(0x7f0000000280)=0x4) [ 384.579434] binder: 14763:14767 ioctl 40046207 200000c0 returned -16 [ 384.631994] binder: 14769:14770 ioctl c018620b 0 returned -14 13:06:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000080)=@sha1={0x1, "09e8fa9a8003a323ac64111468e2712484b7c779"}, 0x15, 0x3) [ 384.672732] binder: BINDER_SET_CONTEXT_MGR already set 13:06:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff7a000000, 0x0}) [ 384.723226] binder: 14768:14772 ioctl 40046207 200000c0 returned -16 [ 384.794159] binder: 14782:14785 ioctl c0306201 0 returned -14 [ 384.803809] binder: 14781:14784 ioctl c018620b 0 returned -14 [ 384.816113] binder: 14786:14788 ioctl c018620b 0 returned -14 [ 384.840477] binder: 14782:14785 ioctl c0306201 200000c0 returned -11 [ 384.885455] binder: BINDER_SET_CONTEXT_MGR already set [ 384.897562] binder: 14782:14785 ioctl c0306201 0 returned -14 [ 384.907860] binder: 14790:14794 ioctl 40046207 200000c0 returned -16 [ 384.913830] binder: BINDER_SET_CONTEXT_MGR already set [ 384.934456] binder: 14795:14796 ioctl 40046207 200000c0 returned -16 13:06:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x2, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='\xbdwlan0eth0\x00', 0xfffffffffffffffb) keyctl$set_timeout(0xf, r1, 0x200) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x900, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140), 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 13:06:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00003f00, 0x0}) 13:06:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @local}}, 0x7, 0x1ff, 0x401, 0x5, 0x1}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={r1, 0x39, "238474b7a8b10b3735c15547c37593022d39ba1c3b800d84a80737d6805e367691bdca8e05bcf14e677a13eda2bde7fae951673b2f4403a082"}, &(0x7f0000000280)=0x41) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="23000000470000000000000000010000000100000000000000"], 0x23) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 385.114282] binder: 14805:14812 ioctl c0306201 0 returned -14 [ 385.125863] binder: BINDER_SET_CONTEXT_MGR already set [ 385.128403] binder: 14806:14811 ioctl c018620b 0 returned -14 [ 385.145295] binder: 14805:14812 ioctl c0306201 200000c0 returned -11 [ 385.155024] binder: 14807:14810 ioctl 40046207 200000c0 returned -16 [ 385.174716] binder: 14805:14812 ioctl c0306201 0 returned -14 [ 385.175276] binder: BINDER_SET_CONTEXT_MGR already set [ 385.233806] binder: 14814:14817 ioctl 40046207 200000c0 returned -16 13:06:43 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vhci\x00', 0x200) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000001780)=ANY=[]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000300)={0x8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x113}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, 0x2, {{0x9, 0x4, 0x3, r0}}}, 0x28) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000001640)) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)=0x80000002) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x100000000000000}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 13:06:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x8000801) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102005ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x100, 0x0) write$P9_RREADDIR(r1, 0x0, 0xffffff51) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000140)) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="ac1414bbac1e00010100000002000000ac14bc28ffffffff"], 0x18) [ 385.426062] binder: 14830:14833 ioctl c0306201 0 returned -14 [ 385.463613] binder: 14834:14834 ioctl c0306201 0 returned -14 [ 385.550727] overlayfs: missing 'lowerdir' 13:06:43 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r1 = request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='\x00', 0x0) r2 = request_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x2}, r2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 13:06:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000007, 0x0}) 13:06:43 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) syz_open_dev$sndctrl(&(0x7f0000000380)='/dev/snd/controlC#\x00', 0x0, 0x400000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000040), 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x7ffff}}}}}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x9, 0x2, @thr={&(0x7f0000000540)="58e5ad7883eebd2909935a7bc8a559c970f31a577d11870a0451481f8696e0490be43f951ac7c3eaf07552c2cec1d8b9e7a3f1ebb066021c2b58d2c760e2590e8c3a851aa67f325f7630e1301d0a5c0de0b95192f0138c5f89e9b03651c638b78ebcfb51aeac9554d3d0a8923b098c9232701645117cb4b0bc19e7485dc5e86aa5e56dad064ad47ff2bcd4a72d03185aaaef2892bb8b42044657f8377a1f447cb18998e14f", 0x0}}, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000001c0)) timer_delete(0x0) semget$private(0x0, 0x3, 0x481) 13:06:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000200)=0x1e) r2 = socket$packet(0x11, 0x8000000000000003, 0x300) listen(r2, 0x1f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000340)=0x8) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000180)) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, [], @bt={0x8, 0x3f, 0x1ff, 0x68, 0x4, 0x6, 0x1d, 0x7}}) 13:06:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000002, 0x0}) [ 385.837709] binder: BINDER_SET_CONTEXT_MGR already set [ 385.843945] binder: 14840:14848 ioctl c0306201 0 returned -14 [ 385.866251] binder: 14841:14844 ioctl 40046207 200000c0 returned -16 [ 385.873874] binder: 14840:14848 ioctl c0306201 200000c0 returned -11 13:06:43 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(r2, 0x4, 0x2001) syz_open_dev$sndctrl(&(0x7f0000000380)='/dev/snd/controlC#\x00', 0x0, 0x400000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000040), 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x7ffff}}}}}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x9, 0x2, @thr={&(0x7f0000000540)="58e5ad7883eebd2909935a7bc8a559c970f31a577d11870a0451481f8696e0490be43f951ac7c3eaf07552c2cec1d8b9e7a3f1ebb066021c2b58d2c760e2590e8c3a851aa67f325f7630e1301d0a5c0de0b95192f0138c5f89e9b03651c638b78ebcfb51aeac9554d3d0a8923b098c9232701645117cb4b0bc19e7485dc5e86aa5e56dad064ad47ff2bcd4a72d03185aaaef2892bb8b42044657f8377a1f447cb18998e14f", 0x0}}, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000001c0)) timer_delete(0x0) semget$private(0x0, 0x3, 0x481) [ 385.905407] binder: 14840:14848 ioctl c0905664 20000240 returned -22 13:06:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x94ffffff, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 385.970334] binder: 14840:14848 ioctl c0306201 0 returned -14 [ 386.009208] protocol 88fb is buggy, dev hsr_slave_0 [ 386.014824] protocol 88fb is buggy, dev hsr_slave_1 [ 386.026493] binder: 14840:14848 ioctl c0306201 200000c0 returned -11 [ 386.029133] binder: 14840:14859 ioctl c0905664 20000240 returned -22 [ 386.044939] binder: BINDER_SET_CONTEXT_MGR already set [ 386.054213] binder: 14860:14863 ioctl 40046207 200000c0 returned -16 13:06:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff0000006c, 0x0}) [ 386.077407] binder: BINDER_SET_CONTEXT_MGR already set [ 386.091451] binder: 14864:14866 ioctl 40046207 200000c0 returned -16 13:06:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x2, @local, 0x1e}}, 0xf39, 0x8, 0x8000, 0x1, 0x2}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000002c0)={r2}, 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x100, 0x0) syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 386.239750] binder: BINDER_SET_CONTEXT_MGR already set [ 386.270868] binder: 14876:14878 ioctl 40046207 200000c0 returned -16 [ 386.270964] binder: BINDER_SET_CONTEXT_MGR already set [ 386.282511] binder: 14879:14884 ioctl c0306201 0 returned -14 13:06:44 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vhci\x00', 0x200) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000001780)=ANY=[]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000300)={0x8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x113}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, 0x2, {{0x9, 0x4, 0x3, r0}}}, 0x28) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000001640)) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)=0x80000002) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x100000000000000}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 386.315404] binder: 14879:14884 ioctl c0306201 200000c0 returned -11 [ 386.321852] binder: 14880:14882 ioctl 40046207 200000c0 returned -16 [ 386.342620] binder: 14879:14884 ioctl c0306201 0 returned -14 [ 386.579443] overlayfs: missing 'lowerdir' 13:06:44 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vhci\x00', 0x200) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000001780)=ANY=[]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000300)={0x8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x113}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, 0x2, {{0x9, 0x4, 0x3, r0}}}, 0x28) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000001640)) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)=0x80000002) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x100000000000000}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 13:06:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff74000000, 0x0}) 13:06:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000140)={0x128f3785, "a1f89921955f21f1113f79f823e4b0e3e47269abec9e726d048fc030bf76abe1", 0x3, 0x224, 0x6, 0x6, 0xa, 0x2, 0x1, 0x10001}) write$P9_RREADDIR(r1, 0x0, 0xfffffffffffffcc4) 13:06:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xbf00000000000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 386.899828] binder: 14896:14900 ioctl c0306201 0 returned -14 [ 386.918946] binder: BINDER_SET_CONTEXT_MGR already set [ 386.939484] binder: 14896:14900 ioctl c0306201 200000c0 returned -11 [ 386.951110] binder: 14896:14900 ioctl c0306201 0 returned -14 [ 386.953762] binder: 14898:14902 ioctl 40046207 200000c0 returned -16 13:06:44 executing program 0: r0 = syz_open_dev$video(&(0x7f00000006c0)='/dev/video#\x00', 0x3382, 0x20000) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0x2, {0x0, 0xffe7}}) [ 387.019361] binder: BINDER_SET_CONTEXT_MGR already set 13:06:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff01000000, 0x0}) [ 387.050538] binder: 14903:14908 ioctl 40046207 200000c0 returned -16 13:06:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x200000802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x1ffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x194c7e4354000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}, [0x2, 0x400, 0x3, 0x7, 0x2, 0x4, 0x3f, 0x7, 0x20, 0x9, 0x6, 0x4, 0x4, 0x2]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000280)={r2, @in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x18, 0xfffffffffffff000, 0x9, 0xd2}, &(0x7f00000001c0)=0x98) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x10001d, 0x405, 0x0, 0x0, {0x2}, [@nested={0x8, 0x10, [@generic='!']}]}, 0x1c}}, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x4002, 0x0) [ 387.294292] overlayfs: missing 'lowerdir' [ 387.308966] binder: 14919:14921 ioctl c0306201 0 returned -14 [ 387.319773] binder: 14919:14924 ioctl c0306201 0 returned -14 [ 387.347677] binder: BINDER_SET_CONTEXT_MGR already set [ 387.370834] binder: BINDER_SET_CONTEXT_MGR already set 13:06:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) socket$can_raw(0x1d, 0x3, 0x1) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:45 executing program 2: getpeername$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x40000000011, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x5300}]}, &(0x7f0000000080)='GPL\x00', 0x80, 0xfca0, &(0x7f00001a7f05)=""/251, 0x0, 0x1, [], r0}, 0x48) [ 387.430330] binder: 14918:14922 ioctl 40046207 200000c0 returned -16 [ 387.460292] netlink: 'syz-executor0': attribute type 16 has an invalid length. 13:06:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00007400, 0x0}) [ 387.496038] binder: 14928:14929 ioctl 40046207 200000c0 returned -16 [ 387.587091] binder: 14943:14946 ioctl c0306201 0 returned -14 [ 387.639404] binder: 14943:14946 ioctl c0306201 200000c0 returned -11 [ 387.677585] binder: BINDER_SET_CONTEXT_MGR already set [ 387.698734] binder: 14950:14952 ioctl 40046207 200000c0 returned -16 [ 387.716264] binder: BINDER_SET_CONTEXT_MGR already set [ 387.730539] binder: 14953:14954 ioctl 40046207 200000c0 returned -16 [ 387.804629] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 387.850094] device bridge_slave_1 left promiscuous mode [ 387.855918] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.939820] device bridge_slave_0 left promiscuous mode [ 387.945498] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.990167] device bridge_slave_1 left promiscuous mode [ 387.995701] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.049747] device bridge_slave_0 left promiscuous mode [ 388.055322] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.376696] binder: 14943:14949 ioctl c0306201 0 returned -14 [ 388.384848] binder: 14943:14949 ioctl c0306201 200000c0 returned -11 13:06:46 executing program 4: r0 = gettid() getpriority(0x2, r0) tgkill(r0, r0, 0x1d) r1 = accept$netrom(0xffffffffffffff9c, &(0x7f0000000000)={{0x3, @null}, [@rose, @default, @remote, @default, @netrom, @netrom, @remote, @netrom]}, &(0x7f0000000080)=0x48) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/171, &(0x7f0000000180)=0xab) 13:06:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000068, 0x0}) 13:06:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x4000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000c40)) open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300de56b5000000000000000000080000000000000008000500ac14141b080003000100000f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b6fc663019d9476a25"], 0x1}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_mount_image$btrfs(&(0x7f0000000100)='btrfs\x00', &(0x7f0000000180)='./file0\x00', 0x7f, 0x1, &(0x7f0000000740)=[{&(0x7f0000000580)="534b39d312f10f4617f117bf6a5a5aedb064af5601a468675145a7618792bec22608c29fcf84d3101e4a546979ecd373917f1799b554b31c9043bc9fc4330ba5af1fcab9b22d4c378cf4cdd9d864ddf3933488f4b171214bef51b626acb0fb36bf0e0e96606ddfc3c5d9a7ca56d03481e6069a98cd4ea2471e9584603e0f238e6a77b2f45391b0e8e1bf5fa97797d1b3b4aa7a0c12a7de12a1b0751c863769ae8d8edbe7cd5f44f2d7aa9d92ba82aa75fd9ebec9d49a3f21583db800f6e0e92dcb8ae94fbc71da8057e5bc903fb10f5b0a34288036f171df4f923f27f67a3ed0776ae2", 0xe3, 0x800}], 0x200000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:06:46 executing program 0: r0 = socket$inet6(0xa, 0x2000000803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]}) close(r2) close(r1) [ 388.748146] binder: BINDER_SET_CONTEXT_MGR already set [ 388.782410] binder: BINDER_SET_CONTEXT_MGR already set 13:06:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff4c000000, 0x0}) [ 388.803718] binder: 14964:14970 ioctl 40046207 200000c0 returned -16 [ 388.830063] binder: 14971:14974 ioctl 40046207 200000c0 returned -16 13:06:46 executing program 4: r0 = socket$kcm(0x10, 0x80000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000071c0)="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", 0xcfa}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) recvmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) [ 388.992579] kvm [14967]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 [ 389.008960] binder: BINDER_SET_CONTEXT_MGR already set [ 389.030404] binder: 14987:14991 ioctl 40046207 200000c0 returned -16 [ 389.062184] binder: BINDER_SET_CONTEXT_MGR already set [ 389.093757] binder: 14987:14994 ioctl 40046207 200000c0 returned -16 13:06:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff04000000, 0x0}) [ 389.208611] protocol 88fb is buggy, dev hsr_slave_0 [ 389.213870] protocol 88fb is buggy, dev hsr_slave_1 [ 389.284652] binder: BINDER_SET_CONTEXT_MGR already set [ 389.296019] binder: 14998:14999 ioctl 40046207 200000c0 returned -16 13:06:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00006c00, 0x0}) [ 389.466777] binder: BINDER_SET_CONTEXT_MGR already set [ 389.481495] binder: 15004:15005 ioctl 40046207 200000c0 returned -16 [ 389.506518] binder: BINDER_SET_CONTEXT_MGR already set [ 389.520284] binder: 15004:15007 ioctl 40046207 200000c0 returned -16 [ 393.254613] device hsr_slave_1 left promiscuous mode [ 393.336138] device hsr_slave_0 left promiscuous mode [ 393.402243] team0 (unregistering): Port device team_slave_1 removed [ 393.416258] team0 (unregistering): Port device team_slave_0 removed [ 393.427086] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 393.483066] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 393.580036] bond0 (unregistering): Released all slaves [ 393.710766] device hsr_slave_1 left promiscuous mode [ 393.765014] device hsr_slave_0 left promiscuous mode [ 393.824164] team0 (unregistering): Port device team_slave_1 removed [ 393.835517] team0 (unregistering): Port device team_slave_0 removed [ 393.850467] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 393.887633] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 393.984026] bond0 (unregistering): Released all slaves 13:06:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x1) ioctl$SIOCRSACCEPT(r1, 0x89e3) write$P9_RREADDIR(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 13:06:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff68000000, 0x0}) 13:06:53 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$setregs(0xf, r0, 0x6, &(0x7f0000000340)="ee73d719a99887d7de3df879c09941055cc01231a97d68883e5b3d201f8bdb31207f70a96f71b94d886bfb3eb01cf1e6408475d1ad331d9ee97e998c7b0c65227bb95897f48b7a4d67227a5162ee8679a119145017b742ea90bc1afa24de448335726110e94ee03cd2222392680c24d48c848fce3cc34a3ebd0e4698bb620e5d5520dbb709667388d80c317259e8bdf082ad7fcd29764a64a0de0ee0597d06c9cce4828a890e8a96bb55f5a63f") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000180)='./file0\x00', 0x80, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000240)={0x3, 0xf8, "dc34a1e64837615f945231b2ce29e9a10b8f0aae214e439bf27b64506be7a7368ae11cff83da0c1def5d35eccb6d0ce97dc1aa496dfe6f3ba7695b4623faa63df8e2be1ad0e3fa84119e5f32f20e806aa192fafa05c075c2cc70cfa5b0033fae594f3cc300ceee41aea368e25e519051f5e6d09e24385cddb725f6be9631fda08f3487cec402672fd50bca7edb370c03617f9ed5d3695497dfad1280d5e483aa483afefe39edce791c168276abd16c8474db5b42fc5a4f02420e575dee0bc7a7b6d8e5042f5492c2b89532c7368fddc59355d25f587c92fbab9c01010a6ba885dc212f6328fd5490f37cdcd2c62981d81ac1683fda001ba6"}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x10001) accept$inet6(r2, &(0x7f00000001c0), &(0x7f0000000200)=0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x4, 0x0, 0x0}, 0x2c) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000040)=0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f00000000c0)=r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, &(0x7f0000000080), 0x0}, 0x18) 13:06:53 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x322, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x34}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044040}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@ipmr_getroute={0x1c, 0x1a, 0xf01}, 0x1c}}, 0x0) 13:06:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x54437e4c19, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:53 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) fcntl$setpipe(r1, 0x407, 0x101) [ 395.920422] binder: BINDER_SET_CONTEXT_MGR already set [ 395.925791] binder: 15023:15029 ioctl 40046207 200000c0 returned -16 [ 395.943068] binder: 15032:15034 ioctl c0306201 0 returned -14 13:06:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x54437f870c, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 395.972686] binder: BINDER_SET_CONTEXT_MGR already set [ 395.978572] binder: 15032:15034 ioctl c0306201 200000c0 returned -11 [ 395.992394] binder: 15023:15040 ioctl 40046207 200000c0 returned -16 13:06:53 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000085ffffff2f8009195511de8bac9cf95aca0000000000000095000000000000006755fa5a7d2b6c5fa833b34f1d4f73484fdd0931abea6ec145f7443d8134f2fc5a73a45cb70705ecd9b8b52083b7a66eb48797c6b33a73c444c681100c894ac2b564ef73b18500843dca14939479a0829fea201b9e37f9a7b850a025d096fcb5bcec2550e3cedcd50b930f"], &(0x7f0000000240)='GPL\x00', 0x2, 0x2e6, &(0x7f00001a7f05)=""/251}, 0x48) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) r2 = dup(r0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000001c0)={0x3, 0xfffffffffffffff9}, 0x8) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000200)=0x1a5) sched_getattr(r1, &(0x7f0000000040), 0x30, 0x0) 13:06:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00$\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="00020000000000000000a002"], 0x24}}, 0x0) [ 396.020267] binder: BINDER_SET_CONTEXT_MGR already set 13:06:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff6c000000, 0x0}) [ 396.046134] binder: 15032:15043 ioctl 40046207 0 returned -16 [ 396.097305] binder: 15032:15034 ioctl c0306201 0 returned -14 [ 396.135286] binder: BINDER_SET_CONTEXT_MGR already set 13:06:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x300000000000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 396.155377] binder: 15032:15058 ioctl 40046207 0 returned -16 [ 396.155382] binder: BINDER_SET_CONTEXT_MGR already set [ 396.155426] binder: 15056:15059 ioctl 40046207 200000c0 returned -16 13:06:54 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8080, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x2}, 0x1) connect$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x2, 0x7, 0x8000, 0x2, "4c1885059b1e33ffa76f15426c1118aec1c239ffb3c76449dc156dcb011af2d84a4dc7a03507b6c40a462ef45228e8dc81676c8a70394c25323d0b43a4d269", 0xb}, 0x60) r1 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x7, 0x3a002) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000340)={0x0, 0x10000, 0x300f}) 13:06:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x88001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup(r0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB="4f0000e686b468fc9c0bfd4047e1dbaf1a53be1e1651bae6dd4c63ccd2867f9578342567885f3f599375328a4b3c6793174d08145e3ffe710226b104b8f8cd7c23f9722a000000000000000000000000000000"], &(0x7f00000001c0)=0x57) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 13:06:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x400448df, &(0x7f0000000180)=@req={0x2}) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 13:06:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000700, 0x0}) 13:06:54 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x1ff, 0x101000) recvfrom$unix(r0, &(0x7f00000003c0)=""/201, 0xc9, 0x2, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002c0007081dfffd940101830020200a000900000006000000600000000d00ff7e", 0x24}], 0x1}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000000c0)=[0xffffffffffffff03, 0x1]) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000340), 0x4) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000200)={0x2, [0x0, 0x0]}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0), &(0x7f0000000300)=0x4) write$P9_RSTAT(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="510000007d020000004a00000000020000140100000005005c35000000000000100001000000ab0a0000060000000000000000008200436465762f61758a6f66730009007b76626f786e65743102002e7d"], 0x51) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000004c0)={{0x2, 0x4e21, @local}, {0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10, {0x2, 0x4e23, @multicast2}, 'bpq0\x00'}) 13:06:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xbf00, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x12, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'nr0\x01\x00', 0x4006}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x10200000000001, 0x0, &(0x7f0000000500)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x800003, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000080), 0xfdef) [ 396.418025] binder: BINDER_SET_CONTEXT_MGR already set [ 396.426433] binder: 15087:15091 ioctl c0306201 0 returned -14 [ 396.445266] binder: 15088:15090 ioctl 40046207 200000c0 returned -16 13:06:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x100000000000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:54 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$int_in(r0, 0x0, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={{0x77359400}, {0x77359400}}, 0x100) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = gettid() ioprio_get$pid(0x2, r2) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000006}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1f, 0x1000000000000000, @ipv4={[], [], @loopback}}, 0x1c) sendto$rose(0xffffffffffffffff, &(0x7f0000000240)="ab4ed0b69368732baf58a04614ce6836c8f6450cbd6069d941b256353834b4643d3a4cc3194ead9e08417a", 0x2b, 0x40800, 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x6, 0x4000) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) r4 = semget$private(0x0, 0x4, 0x600) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000340)=""/232, &(0x7f0000000440)=0xe8) semop(r4, &(0x7f00000001c0)=[{0x4}, {0x3, 0x0, 0x1800}, {0x7, 0x3, 0x800}], 0x3) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000027, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1000, 0xffffff3c) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000280)) [ 396.498162] binder: 15087:15091 ioctl c0306201 200000c0 returned -11 13:06:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0xfdfdffff00000048, 0x0}) 13:06:54 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x1ff, 0x101000) recvfrom$unix(r0, &(0x7f00000003c0)=""/201, 0xc9, 0x2, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002c0007081dfffd940101830020200a000900000006000000600000000d00ff7e", 0x24}], 0x1}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000000c0)=[0xffffffffffffff03, 0x1]) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000340), 0x4) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000200)={0x2, [0x0, 0x0]}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0), &(0x7f0000000300)=0x4) write$P9_RSTAT(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="510000007d020000004a00000000020000140100000005005c35000000000000100001000000ab0a0000060000000000000000008200436465762f61758a6f66730009007b76626f786e65743102002e7d"], 0x51) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000004c0)={{0x2, 0x4e21, @local}, {0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10, {0x2, 0x4e23, @multicast2}, 'bpq0\x00'}) [ 396.563791] binder: 15087:15100 ioctl c0306201 0 returned -14 13:06:54 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x1ff, 0x101000) recvfrom$unix(r0, &(0x7f00000003c0)=""/201, 0xc9, 0x2, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002c0007081dfffd940101830020200a000900000006000000600000000d00ff7e", 0x24}], 0x1}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000000c0)=[0xffffffffffffff03, 0x1]) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000340), 0x4) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000200)={0x2, [0x0, 0x0]}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0), &(0x7f0000000300)=0x4) write$P9_RSTAT(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="510000007d020000004a00000000020000140100000005005c35000000000000100001000000ab0a0000060000000000000000008200436465762f61758a6f66730009007b76626f786e65743102002e7d"], 0x51) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000004c0)={{0x2, 0x4e21, @local}, {0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10, {0x2, 0x4e23, @multicast2}, 'bpq0\x00'}) 13:06:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @empty}, 0x31, 0x0, 0x0, 0x0, 0xd71, &(0x7f0000000080)='ip6_vti0\x00', 0x7f, 0x56c7bc81, 0x1}) fsetxattr$security_smack_transmute(r0, &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x2) 13:06:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x1000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 396.775867] binder: 15120:15124 ioctl c0306201 0 returned -14 [ 396.810547] binder: 15120:15124 ioctl c0306201 200000c0 returned -11 13:06:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x88001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup(r0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB="4f0000e686b468fc9c0bfd4047e1dbaf1a53be1e1651bae6dd4c63ccd2867f9578342567885f3f599375328a4b3c6793174d08145e3ffe710226b104b8f8cd7c23f9722a000000000000000000000000000000"], &(0x7f00000001c0)=0x57) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 396.845366] binder: 15120:15127 ioctl 890b 20000100 returned -22 13:06:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x88001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup(r0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB="4f0000e686b468fc9c0bfd4047e1dbaf1a53be1e1651bae6dd4c63ccd2867f9578342567885f3f599375328a4b3c6793174d08145e3ffe710226b104b8f8cd7c23f9722a000000000000000000000000000000"], &(0x7f00000001c0)=0x57) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 396.893108] binder: 15120:15124 ioctl c0306201 0 returned -14 [ 396.894909] binder: 15120:15132 ioctl 890b 20000100 returned -22 13:06:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0xfeffffff, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) 13:06:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x80, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000440)={0x6, 0x8, 0x6, 0x100000000, 0x2, [{0x8001, 0x2}, {0x3, 0xed, 0xfffffffffffffff9, 0x0, 0x0, 0x4}]}) bind(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x2, 0x1, {0xa, 0x4e23, 0x100000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}}, 0x80) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f00000001c0), 0xfffffffffffffe7d) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=0x0, &(0x7f0000000240)=0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000340)={r4, 0x10001, 0x7, 0xb2f, 0x5, 0x9, 0x80000000, 0xffffffff, {r5, @in6={{0xa, 0x4e22, 0x3, @remote, 0x9}}, 0x8, 0x6, 0x6, 0x76d, 0x3ff}}, &(0x7f0000000400)=0xb0) [ 396.937301] binder: 15133:15134 ioctl c0306201 0 returned -14 [ 396.973408] binder: 15133:15134 ioctl c0306201 200000c0 returned -11 13:06:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x8000800) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x88001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup(r0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB="4f0000e686b468fc9c0bfd4047e1dbaf1a53be1e1651bae6dd4c63ccd2867f9578342567885f3f599375328a4b3c6793174d08145e3ffe710226b104b8f8cd7c23f9722a000000000000000000000000000000"], &(0x7f00000001c0)=0x57) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0xfdfdffff00000000, &(0x7f0000000000)='7'}) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) [ 397.053354] binder: 15139:15140 ioctl c0306201 0 returned -14 13:06:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x5000000, 0x0, {0x0, 0x0, 0x4, 0x2, 0x0, 0x0, {0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x8}}}, 0x90) [ 397.121074] binder: 15139:15140 ioctl c0306201 200000c0 returned -11 [ 397.134353] binder: 15148:15151 ioctl c0306201 0 returned -14 [ 397.143886] binder: 15146:15152 ioctl c0306201 0 returned -14 [ 397.193903] binder: 15146:15152 ioctl c0306201 200000c0 returned -11 [ 397.203095] binder: 15148:15151 ioctl c0306201 200000c0 returned -11 13:06:55 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$int_in(r0, 0x0, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={{0x77359400}, {0x77359400}}, 0x100) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = gettid() ioprio_get$pid(0x2, r2) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000006}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1f, 0x1000000000000000, @ipv4={[], [], @loopback}}, 0x1c) sendto$rose(0xffffffffffffffff, &(0x7f0000000240)="ab4ed0b69368732baf58a04614ce6836c8f6450cbd6069d941b256353834b4643d3a4cc3194ead9e08417a", 0x2b, 0x40800, 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x6, 0x4000) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) r4 = semget$private(0x0, 0x4, 0x600) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000340)=""/232, &(0x7f0000000440)=0xe8) semop(r4, &(0x7f00000001c0)=[{0x4}, {0x3, 0x0, 0x1800}, {0x7, 0x3, 0x800}], 0x3) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000027, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1000, 0xffffff3c) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000280)) [ 397.240717] binder: 15146:15152 ioctl c0306201 0 returned -14 [ 397.480836] Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: lock_release+0x98e/0xc40 [ 397.491130] CPU: 0 PID: 15166 Comm: syz-executor4 Not tainted 4.20.0+ #1 [ 397.497991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.507332] Call Trace: [ 397.511135] Kernel Offset: disabled [ 397.514766] Rebooting in 86400 seconds..