nfig_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup2(r0, r1) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x3) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)) 03:33:20 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00bd34bf52000100"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x4, 0x10000) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x8, 0x1, 0x8, 0xd530, 0x0, r0}) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1ca3001400", @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000008000600f9ffffff"], 0x1c}}, 0x0) 03:33:20 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00', {0x9, 0x2, 0x2, 0x2}, 0x28, [0x3, 0xe, 0x2, 0x5, 0x100000001, 0x7ff, 0x8, 0x29f, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x37f0, 0x5, 0x434, 0x7, 0x2, 0x2, 0x9, 0x9, 0x8001, 0x200, 0x40, 0xba2, 0x4, 0x400, 0x9, 0x257, 0x0, 0x845, 0x20, 0x65b, 0xfffffffffffffffc, 0x7, 0x9b7, 0x101, 0x81, 0xff, 0x0, 0x4, 0x0, 0x4, 0x8, 0xa20, 0xf14, 0x80000001, 0xf948, 0x6, 0x1, 0x7, 0x4, 0x200, 0x7, 0xffff, 0x100000001, 0x100000000, 0xf9, 0x4, 0x3, 0xffffffffffff8001, 0x9, 0xfffffffffffffffe, 0x7, 0x9, 0x7], [0x7, 0x2, 0x4, 0x9, 0xff, 0x5, 0x15d, 0x1, 0x0, 0x0, 0x1, 0x3f, 0x3, 0x100, 0x5, 0x5, 0x1ff, 0x6, 0x7ff, 0x7fff, 0x5, 0x9, 0x3f, 0x9, 0x7fffffff, 0x0, 0x400, 0x3, 0x98b, 0x4, 0x2, 0x7, 0x6, 0x38, 0x0, 0x3, 0x1ff, 0x8, 0x1, 0x2, 0x3, 0x6, 0x7, 0x9, 0x9, 0x7, 0x2, 0x8001, 0xffffffffffffffd5, 0x2, 0x100, 0x0, 0xf77, 0x1, 0x1000, 0x80000001, 0x9, 0x400, 0x8, 0x0, 0x800, 0x4, 0xa95a, 0x5], [0x7, 0x9, 0x9, 0x9, 0x3, 0x2e3d, 0x7, 0x7, 0x7a, 0x81, 0x0, 0x409a, 0xffffffffffffa895, 0x9, 0x0, 0xe04, 0x48, 0x79, 0x4a5, 0x1, 0x400, 0x4, 0x7, 0x5, 0x1, 0x80000001, 0x1, 0x7572, 0xffffffff7fffffff, 0x8, 0x80, 0x4, 0x40, 0x7, 0x0, 0x0, 0x1000, 0x8, 0x8, 0x80000000, 0x3, 0x3d464b28, 0x2, 0x6, 0x20, 0x5, 0xfff, 0xfffffffffffffe01, 0xd166, 0x2, 0x6, 0x7ff, 0x4, 0x40, 0x100, 0x7, 0x8, 0x6, 0x0, 0x1000, 0x0, 0x0, 0x101, 0x4], [0x0, 0x3, 0x6, 0x80000001, 0x80000001, 0x3, 0x5, 0x1, 0x3, 0x0, 0x3ff, 0x4, 0x8, 0x4, 0x1f, 0x4, 0x2, 0x0, 0x1, 0x3f, 0x9, 0x2, 0x870, 0x5108c1e0, 0x2, 0x8, 0x1, 0x6, 0x80000000, 0x8000, 0x1, 0x8001, 0x7f, 0x0, 0x80, 0x9, 0x6c, 0x1, 0x80000000, 0x1f, 0x0, 0x8, 0x80000001, 0x0, 0x3, 0xfffffffffffffffa, 0x3, 0x100000001, 0x3, 0x4, 0xffff, 0x3, 0x100000001, 0x9, 0xffffffffffffffe0, 0x8, 0x100, 0x180000000000000, 0x2, 0x400, 0x4, 0x55ef694c, 0x3, 0x1ff]}, 0x45c) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 582.112333] 9pnet: p9_fd_create_tcp (16153): problem connecting socket to 127.0.0.1 [ 582.149796] 9pnet: p9_fd_create_tcp (16162): problem connecting socket to 127.0.0.1 03:33:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0x101002) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000140)={{0x0, @initdev, 0x0, 0x0, 'rr\x00'}, {@broadcast, 0x0, 0x0, 0x2, 0x1}}, 0x44) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 03:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x2) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) [ 582.279428] 9pnet: p9_fd_create_tcp (16179): problem connecting socket to 127.0.0.1 [ 582.297038] 9pnet: p9_fd_create_tcp (16182): problem connecting socket to 127.0.0.1 03:33:20 executing program 1: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x800) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000002580)=""/4096, &(0x7f0000003580)=0x1000) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x48) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000440)={0xd17}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000280)) memfd_create(&(0x7f0000000000)='/dev/ptmx\x00', 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000035c0)="f7a188510934bf24b3ad8e8b02e07dd6993ddb9d570db34919a891b767de07ff4e774d1b71b5f651665c311d503c6eea96fd1d87cc047c3b5bc6cf6569fda90001fb955cedd2b37570301528148183568ea77d547695ad2c4df34492037fc59577af781a478b9903a3fd169863851e83599dfcb59cd2b5509205f58d9a220c25a42cd899ff3c1fd66575453aabcc8687427fa3eeaff43c4a60848efc47be11daf2e2") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x4) sendfile(r2, r2, &(0x7f00000001c0)=0x3, 0xa198) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r3, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup3(r0, r0, 0x80000) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x6, 0x8001, 0x13, 0x200, 0x10000, 0x2, 0x200, 0x4, 0x6, 0x5}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000140)=0xe8) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0)=0x9, 0x2) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000000000,nodevmap,fscontext=sysadm_u,dont_appraise,fowner>', @ANYRESDEC=r3, @ANYBLOB=',f?@H<\x00\x00', @ANYRESDEC=r3, @ANYBLOB="2c6f626a5f757365723d73656c696e75782c61756469742c646f6e745f686173682c61707072616973652c006e8dcc2728a331b9e34e64b19ed675"]) 03:33:20 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0xffffff87}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000480)=""/207}, 0x48) close(r0) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff00010000000000ffffff00000050030000f902000000000000280113d62f010000000000000000a7a27c351aaf43f99d6f8d87b2e2b511eb210866e491ce2e32386b583f1a1dd7ece47fcd17c4215719e0534a4870a9c46c6399d9031701ea721640ed08e5407d1c29e6bf79f2476fcf31a62a25281b99878bf4f7ad8fc894cd576eca08bfae4e94788065605bd0c0857bd42c1de25048468aaa161826eddfc249eaf80a5121d2932b79ff2e996c5ad339b5c4f4abc1c3d92e7a996b77fdd1eb474ca8981c600cafc563670de5e596da6ed4804e76c9c7a07a6017384bd4c4d9b0aa2809dc0fe24b82124f70269f0213dc42f1d675327ebb79111196d1045817fb3b16e93fa84d2e749c4e6ee83a18dc8a4092b6"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13d, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x1, {0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xe}}, 0x1ba}, r2}}, 0x38) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) signalfd4(r1, &(0x7f00000001c0)={0x1}, 0x8, 0x80800) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x24, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472613d3078303030303030303030303030303030302c6e6f6d7874656e6480605b1adb86b770102c000000"]) 03:33:20 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900010000000000efffff7f0000010000000000000000ff0e9affffff00000048030000f902000000000000280113d62f01"], 0x1) getrlimit(0xd, &(0x7f0000000280)) clone(0x10000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x1, 0x0) name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="950000005200000056f275273b17af90ab0c58e3acd549c7acd325f21b23bab88f955251634fc0c0d685bd9bb8f4fb08393f471d9043ee7710f9612a5f8df7c6327182c3f08d2001e45358d2da5afc3ac0571b640249f4f73ad68a88b4d082a260789a673137bc3193278246e455970965e095dc06678986dd0b4fbdf44f712a11c9753f2a1e381eda3837722eccc8ad9b38cdfaa465feba9dc5a2f73fe83e116198bd31afd0fe54542bce7e9ff1a23e6bba3cab26e9818401e2f2865ef98190563ee89d41a27cc3ed710e5262b537198591bf520ce1270727a573b954348508a82d"], &(0x7f0000000200), 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000041900000000"], 0x1}}, 0x0) r1 = gettid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000002c0)={0x5, 0x103, 0x7, {0x3, 0x0, 0x8, 0x1}}) tkill(r1, 0x37) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r1, 0x0, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040)) [ 582.906960] 9pnet_virtio: no channels available for device 127.0.0.1 03:33:20 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0xffffff87}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000480)=""/207}, 0x48) close(r0) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, 0x0) 03:33:20 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x2000000000000000}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000340)={r1, 0x101, 0x30, 0x7ff, 0x344fc4d6}, &(0x7f0000000380)=0xfffffffffffffe92) r2 = socket$inet_udplite(0x2, 0x2, 0x88) open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x70) ioctl(r2, 0x9, &(0x7f0000000180)="33799e0194e382f215904215") mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d8a6d43405df1fe643325d8a232289da33ef0e66a667463702c706f72743d3078303030303030303030306bc03aa4428725c415cb279a919556403001190afb71f2a769310000000000000000993701f2fa33c4d47d7bd004330925ebf689a943f44e4e208354f36ee021106ea46f253be734b26350ddb5df5770b6e9d7bd811fdc00"/146]) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB="a60000000000000000020000000000000200000000000000", @ANYRES32, @ANYBLOB="00000000d6ffffffffffffff00"/28, @ANYRES32=r2, @ANYBLOB="000000000500fcbe6e040000000000000000000000000000020000010000"]) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000000)=0xfffffffffffffff8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x10010, 0xffffffffffffffff, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') fsync(r1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}}, 0x0) 03:33:20 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) gettid() ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:20 executing program 1: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x800) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000002580)=""/4096, &(0x7f0000003580)=0x1000) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x48) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000440)={0xd17}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000280)) memfd_create(&(0x7f0000000000)='/dev/ptmx\x00', 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000035c0)="f7a188510934bf24b3ad8e8b02e07dd6993ddb9d570db34919a891b767de07ff4e774d1b71b5f651665c311d503c6eea96fd1d87cc047c3b5bc6cf6569fda90001fb955cedd2b37570301528148183568ea77d547695ad2c4df34492037fc59577af781a478b9903a3fd169863851e83599dfcb59cd2b5509205f58d9a220c25a42cd899ff3c1fd66575453aabcc8687427fa3eeaff43c4a60848efc47be11daf2e2") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x4) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r3, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, 0x0) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021000000a0000000000000000000000080012000000000000004000000000000000000000000000000000000000080000000000d8e85aa88149bebc9292f4b600000000000000005d1199f6bb9cf257"], 0x50}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0xf2a86bd7b01cf2, 0x0) 03:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x8000, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x13) getsockopt$netlink(r1, 0x10e, 0x5, &(0x7f0000000340)=""/108, &(0x7f00000003c0)=0x6c) ioctl(r0, 0x1000008910, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000200)=ANY=[@ANYBLOB="66696c7465720000009a0f000000000000000000000000000000000000000000cc0000003f77a8fa807d4ba4fa3e742c89f46dd84a7556c289de090ac597b355cfc5b5046e54b43d32c39aa7658a39c9201d7ead66d5afc4d27795f89b1e7570af946a76e5e8def1656c9282aa322881e9f2f7b07bd1b041e6970781b5879c6a912585318df95dd6c81cfa56748e1a4e8a549798c8e10db9e8603a5c9c520ebc01573ec8ae93bb33ed3bd41794057dab1991a6a189a8186c90a00af52dea67cafb42dbf0efbe98b37e46d6f63b948e6808ab64e5e0537fc28304ace8938a4cb679f2f70a05e0c660581667ad5469bc1f"], &(0x7f0000000140)=0xf0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000180)=0x4, 0x4) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x400000000000000f) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}}, 0x0) 03:33:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, 0x0) [ 583.472146] 9pnet: p9_fd_create_tcp (16251): problem connecting socket to 127.0.0.1 [ 583.484514] 9pnet: p9_fd_create_tcp (16251): problem connecting socket to 127.0.0.1 03:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f0000000200)=@ng={0x4, 0x1, "c3e50c89bf4bcac5e1482fc957a2a715a7"}, 0x13, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) 03:33:20 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x3) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) 03:33:20 executing program 1: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x800) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000002580)=""/4096, &(0x7f0000003580)=0x1000) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x48) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000440)={0xd17}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000280)) memfd_create(&(0x7f0000000000)='/dev/ptmx\x00', 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000035c0)="f7a188510934bf24b3ad8e8b02e07dd6993ddb9d570db34919a891b767de07ff4e774d1b71b5f651665c311d503c6eea96fd1d87cc047c3b5bc6cf6569fda90001fb955cedd2b37570301528148183568ea77d547695ad2c4df34492037fc59577af781a478b9903a3fd169863851e83599dfcb59cd2b5509205f58d9a220c25a42cd899ff3c1fd66575453aabcc8687427fa3eeaff43c4a60848efc47be11daf2e2") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r3, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) creat(0x0, 0x0) [ 583.639626] 9pnet: p9_fd_create_tcp (16271): problem connecting socket to 127.0.0.1 [ 583.698299] 9pnet: p9_fd_create_tcp (16274): problem connecting socket to 127.0.0.1 03:33:22 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:22 executing program 1: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x800) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000002580)=""/4096, &(0x7f0000003580)=0x1000) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x48) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000440)={0xd17}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000280)) memfd_create(&(0x7f0000000000)='/dev/ptmx\x00', 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000035c0)="f7a188510934bf24b3ad8e8b02e07dd6993ddb9d570db34919a891b767de07ff4e774d1b71b5f651665c311d503c6eea96fd1d87cc047c3b5bc6cf6569fda90001fb955cedd2b37570301528148183568ea77d547695ad2c4df34492037fc59577af781a478b9903a3fd169863851e83599dfcb59cd2b5509205f58d9a220c25a42cd899ff3c1fd66575453aabcc8687427fa3eeaff43c4a60848efc47be11daf2e2") r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r3, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) 03:33:22 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x2) sendfile(r0, r0, 0x0, 0x800000000000de) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sync_file_range(r0, 0x0, 0x0, 0x3) 03:33:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 03:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000008000600f9ffffff443f22b3456b38531ab2ee2f5ea3bccc8900caf28eba0ebbe92b643bb488ebb3c889e8d6bf2b36776ad1f52191c896a527c6f86b7884d6a8cdcddc570e9d7f4552a7415756c791db4ecd3cdc02c7327b4455d92cbfdd71625e41bdf7db05335c80602ed54cac68a5cfd5c42428f38333c7189eb0a584f7186927d833894c6cff26cc4478dc077e44309be5ee48fee5bf524707fbaef892dd1dc160f46492fb9d"], 0x1c}}, 0x0) [ 586.066784] 9pnet: p9_fd_create_tcp (16295): problem connecting socket to 127.0.0.1 03:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) renameat2(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x4) 03:33:20 executing program 1: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x800) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000002580)=""/4096, &(0x7f0000003580)=0x1000) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x48) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000440)={0xd17}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000280)) memfd_create(&(0x7f0000000000)='/dev/ptmx\x00', 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r3, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1800008912, &(0x7f00000001c0)="1098ce66000000007be070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 03:33:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4703000030002908000000000000000001000000180000000a000100ffffffff000000000000000000000001"], 0x1}}, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") readv(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}}, 0x0) 03:33:20 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x3) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:20 executing program 1: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x800) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000002580)=""/4096, &(0x7f0000003580)=0x1000) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x48) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000440)={0xd17}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000280)) memfd_create(&(0x7f0000000000)='/dev/ptmx\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 586.190336] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 586.223761] 9pnet: p9_fd_create_tcp (16321): problem connecting socket to 127.0.0.1 03:33:20 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) 03:33:20 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x260282, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000300)={'HL\x00'}, &(0x7f0000000340)=0x1e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r2 = socket$netlink(0x10, 0x3, 0x10) readv(r2, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}}, 0x0) socket(0xd, 0x800, 0xffff) 03:33:20 executing program 1: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x800) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000002580)=""/4096, &(0x7f0000003580)=0x1000) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x48) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000440)={0xd17}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000280)) memfd_create(&(0x7f0000000000)='/dev/ptmx\x00', 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 586.253310] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 586.283058] 9pnet: p9_fd_create_tcp (16329): problem connecting socket to 127.0.0.1 03:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$selinux_member(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/member\x00', 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030303030302c6e6f657874656e642c0085e388e058c94fc97aa699713b91c4990e54476874a376fe40ff01082529627dab475d38c8f4b43c555e13f0c10de732b271306cdd9cd94f60"]) 03:33:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0xb900000000000000}) 03:33:20 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) writev(r1, &(0x7f00000023c0), 0x1000000000000252) r2 = dup3(r1, r0, 0x0) write$sndseq(r2, 0x0, 0x0) 03:33:20 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000000912, &(0x7f0000000c80)="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") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) r2 = accept4(r1, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000140)=0x3, &(0x7f0000000180)=0x4) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:20 executing program 1: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x800) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000002580)=""/4096, &(0x7f0000003580)=0x1000) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x48) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000440)={0xd17}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000280)) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 586.419116] 9pnet: p9_fd_create_tcp (16347): problem connecting socket to 127.0.0.1 03:33:20 executing program 1: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x800) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000002580)=""/4096, &(0x7f0000003580)=0x1000) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x48) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000440)={0xd17}) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 586.470827] 9pnet: p9_fd_create_tcp (16360): problem connecting socket to 127.0.0.1 03:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) 03:33:20 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x11) r1 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000080), 0xc6) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000080), 0xc6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) socketpair(0x0, 0x2, 0xffffffff, 0x0) 03:33:20 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r0, 0x0) 03:33:20 executing program 1: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x800) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000002580)=""/4096, &(0x7f0000003580)=0x1000) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x48) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 586.592902] 9pnet: p9_fd_create_tcp (16377): problem connecting socket to 127.0.0.1 [ 586.669887] 9pnet: p9_fd_create_tcp (16388): problem connecting socket to 127.0.0.1 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00000c00000008000600f9ffffff"], 0x1c}}, 0x0) 03:33:20 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[], 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x80, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000002c0)={0x0, @reserved}) r1 = gettid() pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) read$FUSE(r2, &(0x7f0000000640), 0x1000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x37) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r1, 0x0, 0x0) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000480)={&(0x7f0000000380)=""/214, 0xd6}) socketpair(0xd, 0x0, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x100}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000140)={r5, 0x61, "d17e281516f4035a808b2256ae8ef97dcb0044e53ac6dd1ccdc81bfaeab20b5e35b27717d0c42aa6dd26b990690959418d09adb85f63d3e3f1b1ae29844d9630a0b9745ab55ca01c50aadbca8094e36d0b8555228f18909c3f40a563620aa32459"}, &(0x7f00000001c0)=0x69) 03:33:20 executing program 1: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x800) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000002580)=""/4096, &(0x7f0000003580)=0x1000) getpgrp(0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) read(r1, &(0x7f0000000280)=""/131, 0x83) write(r0, &(0x7f0000000080)="2400000012005f3414f9f40700090400818a0400"/36, 0x24) 03:33:20 executing program 4: removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x7ff, 0x10, 0x7, 0xffff}, &(0x7f0000000280)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000002c0)={r2, 0xc0, "4b92a5e0f4d75c7c71de28e844a5584d7614e8d0a93971383cce129e54d48a79fb84981c58ac83fb595fca0eb82c52332d30f6bd0d805320fbbcc7d175ae5551f14f70bfbb361b9d9afbe2ff83f1042624e768f7d9ccaf2e5568b59a26393a6a244be9eed4fb08a0f64803aebfef82e262b7fff80e9608e00fc20e899cda479a6cf5ca4cf30404f1ce24ae48bc4a4677ae18f72d7ff1e936ddbd3a92ba3c42097398283e23ea074548697da2130e206dba528652bb740251f1ed0af6210150dc"}, &(0x7f00000003c0)=0xc8) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000004c0)={r3, @in6={{0xa, 0x4e22, 0xca60, @rand_addr="2d5f8105bcf7eb568ddaf55c1feb5ef8", 0x9}}, 0x6, 0x5, 0x7, 0x100, 0x70b6c399}, &(0x7f0000000080)=0x98) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e99007a4e085271898ef01d4af9ce213d7463702c706f72743d3068a7568e22fd712a86f230303030303030302c"]) 03:33:20 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) 03:33:20 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="7c9de06bd534f49ed4de930531889dc12c3ed42bb79c7c29c77ef010299ede00ce4f60e6d367b49154314bd920f6b550d0833d00a439e70038318164687834d9211366067864f29c7514ecacd291e5f854631691780e32378c9a551e615bec52a9bd849092eb06a0bc3bdf5cdb19e41bf17832b4f074cf6b01d600cd", 0x7c, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f00000000c0)=@builtin='builtin_trusted\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000280)={0x4, &(0x7f0000000200)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f00000002c0)={r4, 0x3}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x10001, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast2, @in6=@empty}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7490616e733d7463302c706f72743d3079303030d63776f0b030303030303030302c6e6f657874656e000200015b97"]) socket(0x9, 0x1, 0x6) 03:33:20 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="73656375726974790900000000000000000000000e9affffff00000048030000f902000000000000280113d62f012433900000000000000000000000008ab379d6dd4b1cf8452200f558c6d5ab2c8118ebd3ef089105ebb55ea9747392c38ef0df246cf348e949003519f7d5c460743e1cb92f3e80606a24f6c9b61e15fa635d05c93d2e4f365472b56de4a7fcda78d6e18854683c0a2a66a04d2aad0314c00571cd39d9667d1a97a7008deb4530bc0b1815be2ebfa79d0a4d552d20ab4e69a562430f4eb5c632952c62f3015cb458dece155e2ed46934d6e324135542f80406eeceba6db8bfee6e52c06ed9977188c3843daf49b1bccacc6e"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) gettid() tkill(0x0, 0x37) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0x9, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 03:33:20 executing program 1: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x800) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000002580)=""/4096, &(0x7f0000003580)=0x1000) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa0800450000700000000000019078ac2314bbac1414a3468c9670afe1bc004700000000000000002f0000ac2314aaac141400084000000000000000000000e000000200000000e000000100000000000000007f00000100000000ffffffff00000000e000000100000000ac141400000000000000000000000000523b6c6f03b2e82ba2e60077"], 0x0) 03:33:20 executing program 1: accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x800) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 587.297705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 587.335886] 9pnet_virtio: no channels available for device 127.0.0.1 [ 587.362765] 9pnet_virtio: no channels available for device 127.0.0.1 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff7}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}]}]}, 0x54}}, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x20800, 0x0) 03:33:20 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000040), 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:20 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x3, 0xed33, 0x0, 0x180020000}) 03:33:20 executing program 5: r0 = memfd_create(&(0x7f0000000000)='dev ', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000400)=""/140, 0x8c) 03:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000300), &(0x7f0000000340)=0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x6}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f00000000c0)=0x9) ioctl$KDADDIO(r1, 0x4b34, 0x1000) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e737463702c706f72743d14783030303030303030303030303030000000000000000000000000000044"]) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x44a00, 0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x7da}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000400)={r3, 0x8}, 0x8) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x800000000000020, &(0x7f0000000280)="0adc1f123c123f319bd0a17e5bbd17dbb13650fac3d8b2c070ba9f0ecacd67711bb27eab3c447e76238a22bf7f2dfcaa93cbac10e10407c0e3ff702a243248eff8b43d2ea2b994bd088bc7e7962a50e00ec470be08422c6ef7f956dad0a20927edb6e423d2d030d3e6223dcbdd1b9774f01777a04d467bb3cdb4cdbedf232d2ddd5b9636cfc48c5140f877d04078409d51020421f4abc60e7592d7b0a03d17fa11cac066e6d9193c92cf316ac600"/189) futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup2(r0, r1) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 03:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xfffffffffffffffd, &(0x7f0000000480)={'trans=tcp,', {'port'}, 0x2c, {[], [{@fowner_gt={'fowner>', r1}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@euid_gt={'euid>', r1}}, {@smackfshat={'smackfshat', 0x3d, '9p\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@subj_user={'subj_user'}}, {@subj_type={'subj_type', 0x3d, 'system'}}, {@measure='measure'}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) [ 588.105976] 9pnet_virtio: no channels available for device 127.0.0.1 [ 588.123231] audit: type=1804 audit(2000000000.010:99): pid=16457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/442/file0" dev="sda1" ino=16591 res=1 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001300edc6e91f48ec5804ab0ec048100000004600010700000025190001c010000000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="dd97bc55fe703dc55cf63b75248ef63d36d7e9dd60ed0d3e25ce12cf36435db2de36034b399ba7841bed463850a1219b9631e4dca9dd5b6cda7dd44a150e267e748894b28c0f6f7693b8982ca7de6c7f8a0087af1a4d41713ed5860750a67c6461f291fe57c31820e0dfea711076b9c642132b96110725976a6a938ddcc22df88a87e15f867f5a3819d4d028930a19eb2d22d5984ed78374e932e0c4", @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000008000600f9ffffff"], 0x1c}}, 0x0) 03:33:20 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000200)={0x1, 0x0, [0x0]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000140)) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x3) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) 03:33:20 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) [ 588.292644] audit: type=1800 audit(2000000000.010:100): pid=16457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16591 res=0 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 588.346125] 9pnet: p9_fd_create_tcp (16486): problem connecting socket to 127.0.0.1 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 588.405226] 9pnet: p9_fd_create_tcp (16500): problem connecting socket to 127.0.0.1 03:33:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e743d7463702c707a0df240307830303030303030303069a2f3b22b517f303033307030302c6e6f65"]) 03:33:22 executing program 5: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:33:22 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:22 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x64) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000140)) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = socket(0x10, 0x80000, 0x7fffffff) getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) 03:33:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000080)=""/92, 0x3fe) sendto(r0, &(0x7f0000000140)="ae510175fefe34215dd16f59b97e62ac325449b08de9ace9c1579280e7d50912fc752f133463350b0d1348967c79772f5cf7f8af1e4d281eb792dd548a06a44a2bd2ac967367cf3c4f4861fad7f2b35320fcd9a6d8406eb1825856a3e78c804e5a598ab8be595265269568b650cd742a17bb02f5cbf459ac2e93", 0x7a, 0x40000, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) syncfs(r0) 03:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000000)={0x69499dcc, 0x3, 0x64b1, 0x0, 0xadbb, 0x7, 0x5, 0x7, 0x9, 0x6b, 0x3, 0x2, 0x0, 0x60000, 0x5, 0x1000, 0x100000000, 0x81, 0x20}) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}}, 0x0) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 591.126034] 9pnet_virtio: no channels available for device 127.0.0.1 03:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)={0x3, 0x0, 0x4, 0xe002, {0x0, 0x2710}, {0x5, 0xe, 0x200000000000000, 0x5, 0xc7, 0x3, "b34f295e"}, 0x2e, 0x0, @offset=0x5, 0x4}) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="748301df9372b66e733d7463702c706f303030303d30042545802c6e6f657874656e642c00"/48]) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7f, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000280)=""/201) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r2 = socket$netlink(0x10, 0x3, 0x10) readv(r2, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}}, 0x0) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 591.234579] 9pnet_virtio: no channels available for device 127.0.0.1 03:33:20 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000001080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000001040)=0x3fffffffffffffe, 0x4) 03:33:20 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$setopts(0x4200, r0, 0x8001, 0x1) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) bind$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x3}}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000001c0)=0xc) ptrace$poke(0x4, r2, &(0x7f0000000200), 0x7) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e4d3d746370e73df7b8b18840a4d8e7c40a47dd6f89edc2ace30329b7e5eb68ca2ce21c9abd316b4b0b9bf67f5e9ef77b8a64f1e9168dc21c8789ff17d1b5bee5699dc8c4b1effb977821e8ec1d6ce2bc1c446a4d3494d9250fd184c5d5310816a531bd60724064b50e107681179c6eff337bf84e37ba730b6a96c93b842c594780578db13414581dea76e85161a3f265f47ec2acdfa3216d4bb38e238995449a2ebbf1f586503f9a5d797f4ac67bb3651eda1e2a066fcc559261014b01268fc66981cd726b6fdaae5e3348340520efb838d48c110b68c51c1a131a9b4c03789f5e4e03df46c78a49a6187d124bcd1ebe61a4ee988a2727c4eb0a01337bd5eefe"]) [ 591.272836] audit: type=1400 audit(2000000000.020:101): avc: denied { set_context_mgr } for pid=16541 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/215, 0xd7}], 0x3, &(0x7f0000000480)=""/231, 0xe7}, 0x42) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}}, 0x0) 03:33:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usb(0x0, 0x0, 0x0) bind$isdn(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r1, 0x0) 03:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000200)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) [ 591.374542] binder: 16541:16546 unknown command 536872576 [ 591.380344] binder: 16541:16546 ioctl c0306201 20008fd0 returned -22 [ 591.405402] binder: 16541:16563 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 591.405408] binder: 16541:16572 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x498d00, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xea49, 0xec2b5ac0f87cab40, 0x2}) futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x4, 0x7, 0x200, 0x7, 0x7, 0x833e, 0xada9, 0xd, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000180)={r3, 0xa4, "ee6ea7b3f0add58625482def1564f8160b49f564b4d5cec791537562f8b99b9a956b535811d385cfb64b807a1b50a6b01ee6765cfb7bfe7792e42c90c71cdc6a20f7c08b5a21d23084b22a5e09faba8906460dc4553f9c0030917193a4a99b34a4c3aad83ea47c6a8ddeece3e1f29aebee3cdef8e79af00954fd4cd7d164c7b2d03f54410f22c64d624c2d714559c8a8aa548dff88ccb27f236caae161104e8e9a69e1e0"}, &(0x7f0000000280)=0xac) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 4: creat(&(0x7f0000000140)='./file0\x00', 0xd6) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) [ 591.523085] 9pnet: p9_fd_create_tcp (16586): problem connecting socket to 127.0.0.1 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r3 = syz_open_dev$adsp(&(0x7f0000000440)='/dev/adsp#\x00', 0x7, 0x400) write$UHID_CREATE(r3, &(0x7f0000000580)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000500)=""/128, 0x80, 0x7f, 0x6, 0x3ff, 0x5}, 0x120) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000780)={@rand_addr, 0x0}, &(0x7f00000007c0)=0x14) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'vcan0\x00', 0x0}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x145000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @local}}, 0x0, 0xea}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000400)={r8, 0xffffffffffffffff, 0x7, 0x9, 0x0, 0x2}, &(0x7f00000004c0)=0x14) syz_extract_tcp_res$synack(&(0x7f0000000280), 0x1, 0x0) stat(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSIG(r3, 0x40045436, 0x41) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0x1e0, 0xf0, 0x0, 0x1e0, 0x1e0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x4, &(0x7f0000000480), {[{{@uncond, 0x0, 0xc8, 0xf0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x1, 0x1}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x3, 0xd641, 0xff}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001040)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000001140)=0xe8) lstat(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001780)={'yam0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000001bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000004}, 0xc, &(0x7f0000001b80)={&(0x7f0000001240)=ANY=[@ANYBLOB="b40300001a00000027bd7000fddbdf2500000000000000000000000000000000fe8000000000000000000000000000aa4e24ffff4e230fff0a00a0801d000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="af7f8abc00e0ad23dbdb8a67f656befb000004d2ff000000e000000100000000000000000000000001000000000000000800000000000000000000000100000005000000000000000100000000000000ffff000000000000010001000000000000000000000000000400000000000000000100000000000001000100000000003f0000000000000009000000070000002af2000029bd7000033500000a000004e100000000000000ac000700e0000001000000000000000000000000e00000010000000000000000000000004e240c864e2300070a0020800c000000", @ANYRES32=r6, @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="00009481000000000000000000000000000004d26c000000fe8000000000000000000000000000aa0000000001000000060000000000000002000000000000000100008000000000400000000000000000100000000000003b0c000000000000fdffffffffffffff0100000000000000010000000000000073070000000000008e78000000000000b7070000370b0000030000002dbd7000033500000a00010802000000000000000c001c00", @ANYRES32=r12, @ANYBLOB="03ba92cb20635abf000000"], 0x3b4}}, 0x80) 03:33:20 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x06\x00\x00\x00\x00\x10\x00\x00\x00\x00\xfc\xffB\x00', 0x10000000005006}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) [ 591.616365] 9pnet: p9_fd_create_tcp (16600): problem connecting socket to 127.0.0.1 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) [ 591.678109] 9pnet: p9_fd_create_tcp (16606): problem connecting socket to 127.0.0.1 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-monitor\x00', 0x4002, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00001e", @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000008000600f9ffffff"], 0x1c}}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x60000) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f00000002c0)={0xf4, "9992f213e6a99c83376041b7ef2484968c083800ab5ec2c69d394d0c74f772846e757f2f8ff234683460e9ee61e45029933a2b42ef92c609424210e5459bd9e84b606591f6702e4358e18e2787320452e2914acd133475ffbb4792e98e5696eba87762d07b201073cb278f93cbd0688588e433bb2bdecbbb5f0b04b78d8bfa8472a25aa64950c53f99b060024635ff5b36cce80cecb9259deaea958b6d32891767c666ad35402b405e1315576aeaa8f47445acdfdaf7ae13ce0deaa9aa00d1f9bacdd5e217889ed6fd5b44f260e4f0e9f68350f75347dcd8865c2e4b5f933bb148261b7460bd4a87b7a3eb234bf49388be2a225e"}) r4 = fcntl$dupfd(r0, 0x406, r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000000)=0xa4, 0x4) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 591.805409] 9pnet: p9_fd_create_tcp (16621): problem connecting socket to 127.0.0.1 [ 591.847520] 9pnet: p9_fd_create_tcp (16621): problem connecting socket to 127.0.0.1 03:33:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:22 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x101740, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x10001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\xabtw/Z%B\xd2\xd6\x1e\xf0\xfc', 0x0) clone(0x12102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) unshare(0x40000000) 03:33:22 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d7463702c706f72742cbd3970876dd8542ef8a8bcc311cc3d3078303030303dd8bc67aea3df50303030302c6e6f657874656e642c00"]) 03:33:22 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9a17000001000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="bb312c3da7d24ee43b1c0000001916f5608b"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x89, &(0x7f0000000000)="0adc1f123c123f319bd070") capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000040)=0x7, 0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r3, 0x65, 0x6, &(0x7f0000cbc000)=""/244, &(0x7f0000000340)=0xf4) r4 = accept4$x25(0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000280)=0x12, 0x80800) accept4$x25(r4, 0x0, &(0x7f00000002c0), 0x80000) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200000, 0x0) ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f00000000c0)={0x1, 0x4, 0xfffffffffffffff8, 0x10000, 'syz0\x00', 0xffffffff}) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000700)="0a13f29ab09f7899fd44bb09e7f81cb4b6cda0d35d7786ce8a0e852af1ddc59b46d81221446888ea36d67816bed8f031736eed4ffb856256c4778fb3868f0100575c2ea1368af2db1937d702078ed23e73b8690a4eef4b1fafade8cce75d76774abce410782d38c9494012ace3bde416cfc635ee982d5226443263f81621cab5aa3d380bddc373") r1 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x3, 0x2) r2 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') getsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000300), &(0x7f00000008c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000a40)={{{@in6=@ipv4={[], [], @remote}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000b40)=0xe8) recvmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000b80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c00)=""/248, 0xf8}], 0x1, &(0x7f0000000d40)=""/90, 0x5a}, 0xfffffffffffffff7}, {{&(0x7f0000000dc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e40)=""/40, 0x28}], 0x1, &(0x7f0000000ec0)=""/221, 0xdd}, 0xffffffffffffef4e}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000fc0)=""/135, 0x87}, {&(0x7f0000001080)=""/209, 0xd1}, {&(0x7f0000001180)=""/38, 0x26}, {&(0x7f00000011c0)=""/82, 0x52}, {&(0x7f0000001240)=""/160, 0xa0}, {&(0x7f0000001300)=""/121, 0x79}, {&(0x7f0000001380)=""/122, 0x7a}, {&(0x7f0000001400)=""/116, 0x74}, {&(0x7f0000001480)=""/127, 0x7f}, {&(0x7f0000001500)=""/68, 0x44}], 0xa}, 0x8}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001640)=""/253, 0xfd}, {&(0x7f0000001740)=""/148, 0x94}, {&(0x7f0000001800)=""/247, 0xf7}, {&(0x7f0000001900)=""/63, 0x3f}, {&(0x7f0000001940)=""/72, 0x48}, {&(0x7f00000019c0)=""/5, 0x5}, {&(0x7f0000001a00)=""/137, 0x89}], 0x7, &(0x7f0000001b40)=""/137, 0x89}, 0x7}, {{&(0x7f0000001c00)=@ethernet, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c80)=""/175, 0xaf}], 0x1, &(0x7f0000001d80)=""/164, 0xa4}, 0x9}, {{&(0x7f0000001e40)=@rc, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/4096, 0x1000}], 0x2, &(0x7f0000001f00)=""/217, 0xd9}, 0x95}], 0x6, 0x2000, &(0x7f0000002180)={0x0, 0x1c9c380}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000002280)={&(0x7f0000000280), 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x68, r2, 0x20a, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x4}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) readv(r6, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r7 = syz_open_dev$midi(&(0x7f00000006c0)='/dev/midi#\x00', 0x5, 0x8001) ioctl$NBD_SET_TIMEOUT(r7, 0xab09, 0x4) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-control\x00', 0x400, 0x0) recvfrom$x25(r9, &(0x7f0000000440)=""/21, 0x8, 0x100, &(0x7f0000000480)={0x9, @null=' \x00'}, 0x12) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="020000000000020000000c0000009f3dbfddc3959e0526d72e930551c9ecbb8b2dd99cfd66df8c0e4b6fa28ea62c64636dcd056f601f09984ff427b86c33caa0333129d71481146f06adcb075d0dc7676ce915472c688bbc63ddb7012d0e387f3a8fcedfe1e0dccd9337d846e0633f3088208b1fddfcead04ea84baed4b9ba394fa816f6ad26a0cb4239b77fdcadcd372105b11aeccf7915e1007beb3aaaf6489082172863fec45ffe3828dc2c2e340004e8e41e57410f1ebf7ecdbf087c7cc43a6a5c4da1"], 0x1a}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8001, 0x80000) ioctl$RTC_PLL_SET(r10, 0x40207012, &(0x7f00000004c0)={0xac, 0xfffffffffffffffb, 0x9, 0x85, 0xfffffffffffffffc, 0x5, 0x3f}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x200, @empty, 0x2}}, 0x4, 0x1, 0x9, 0x7ff, 0x80}, &(0x7f00000005c0)=0x98) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000000600)={r11, @in6={{0xa, 0x4e22, 0x9, @ipv4={[], [], @loopback}}}}, 0x84) recvfrom$x25(r10, &(0x7f0000000380)=""/125, 0x7d, 0x10000, &(0x7f00000001c0)={0x9, @null=' \x00'}, 0x12) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}}, 0x0) [ 594.532865] 9pnet: p9_fd_create_tcp (16649): problem connecting socket to 127.0.0.1 [ 594.551724] IPVS: ftp: loaded support on port[0] = 21 03:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001340)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x8000000000) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000200)=0x44) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) symlinkat(&(0x7f0000000000)='./file1\x00', r1, &(0x7f0000003840)='./file0\x00') sendmsg(r0, &(0x7f0000003780)={&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x1, @empty, 'irlan0\x00'}}, 0x80, &(0x7f0000002640)=[{&(0x7f0000001400)="05853b799a11b563ce70dda9a7162a764816b53ed044388ee80e17bb45c69e0916c05a3cc0deef80cdcff618b08f166ee51f2c85d0b71e9c3856c8129d4a362ed35f3fc411ce72d0da9962c7a93efa7540515f4a6749e3632c45b440cb7e2509421d156c6170c20f373044492d86797e28e9e2480e648e25495d6321454a5244e89bca5267883ff60d7a4baad50819b57701beb4253d1409ce9ea1abde46b63a5af78defabf76df9ee3ef43431c0133d0b056771e2ec82e91d8f2804ab46c7989a19a8e8d5c27c6bb0338093ec0a2b44322ec6273ec6a62c48ff0561d2e45ce47662313bd407265fc6789d6692a2137fea34b45337553966fdcca8296a3b6e6a757d9635532ffdf9a433eebab765d28eb673b9ef1a2f7858fac94b3eb8083f3c097441b073b6998cce3065bda47384d6d5da77fbba7bd567b004ddd95b4b8a56be31716f3f08739c73f8749124d10fb4f1a54c675f11e895d76678763b96b7055ddaa7faa19f3a67be843902aa9ae39f3f943bafe5122f70482aee9141aab8505014a3e305eac34ca4b9b56f458d1d6ed9dd6777704c6dbb4e3fc40899be3c27765e8c15a5a14d2af072b1a4704f412b86eb94e6f6567da83d81c6fac9c16abc87f2c0f489c6091b5523c12b6964ed3fab8398e62cc07ade92599380008d3c325f68e7febfffed722f9c23118b606e7d58b0951ae5c8ea40615921c98f88a0b0d7f6374a247b151860363d10322848468df053e9157792a4ea1356235d0ee17c94c9b1a6cd82c046804bc7d4b7c39b33a4a8ad298cc56c9d76df33366f99446426931b6e4aec18b38bd6078e854f2ccecc4c7cf512a07f2800ef78b98e3e3c15392c1ee7791475b706b410208d660d001c1318783fd92d2275d5407ec849a4fa5f99d0fb8dd493fc403e429e2157189d707d9a739b2486fba36dcc53b97cbcf0cd18a27946e31d4855b1066d4793337d78d6a8f45f89047a6fa4b27c23965884489c58f556b866b4d881cbf480433f93a66a3acf5917eb5378b9440675bca9d5db75d6ff6f6bb68858de0369881943b4341e1d0c3bd309bc11d1470158429ac874e5a0401253c1d87e568d5289a2c6acb53f681a36a76532a8893ae957f9c1e35f35d829ac91e343d76ba7432e885314aa5af1ef6c73af094585ad9ab914a81296d5e48231b32432161345c5d882182e99dae753c38352167f34ff72caf3baa14b6281cf240f9a235beea9301e61cdf288f21b3816f16d6f8051f3c828cda217755ec38b2ed865fc52db93e5f14c2079d4d6958b76633b43011d179de9abadd6cee1ecda7b0ec0faf318fff124c830ae951a80018b2e78f4aece274204ff98915720d0499399f0c2fea8a65d1706359818834b3e088629aedec7130d9e39938fa7494d3fb91c64900d2d288a94932a83b343ed474cdc2705c81ce79c28c540b912c133c3ae89fdf92fc276b850996d21b408cc979790fbff5a45505714f45f4d9e7633f1e040c2bb5669b4a44e44396d67f71c04e9276f759c6aeba7d06bbbb27d9158b0ef5ae6dfa5689739fa289100c32bf0c94a1bf3868c38ddd54e7932f025d0250cced89cb34cbc45329b123947919f4c9747b7b38437b212063fffdd62bc3999e8bbd637edba4826aa8cc40146bf228850519b76dcdc8611027e35b1470cef44df778f16c71a08ac9ced157a7a234bd6fe7bfb37c1e96cd18e3061dd69dab401f91600e67ea8beeeb5a811ffb5a470991022c1bc65983f266fa7bb009432e97fd9129b8269ec21653465b7d7030d42bde963401807fdd980e1065183f89b55bc332a69247db6ce8a2e2f5b42b98fbab5934db2036d9de23e994ea91db6bd0cfe2350fd44d481253ad19a538706b7d8458d09cc933a749b702a60f71915e33df78b6fa0b0c7549fd474c0131fefd09b9e9484f817f7b1ec6aef7b95f005e6646b021c0cf472dc1a8a66781425e72f8dea5bb4330b443c86a69c2b5cf6997d69c8f8282afa8aefdff5418f921488bcae29065c6ae07c7368e3e0be34d6971ba3a5b90375ce8df0214cea8496634a21f4420863caa596fc1a7b7690a7b6c6dda41bfb0e151f93af929cefeffe54665cf6ed17ea836f67d09c8717824a28751467fbc8e988be0e402b2418bcc834d56bc774f53c4edf838604bf4ee0138ea5e5fa1c39f8243a0b20fdcba5aa36ff19131c574862a35dd34bdd118f2ec8ed9ad96003482c3e750215443f56a08342353a094b06a97aab239b9433d80b2ee32f4f0518ffaa6d5ca0689c2505bd8b7acc58d085436897a578e43b3cfc3a01cd31b1045e4c1d81f146b927a4ba89e8b6a40db2fb0393180b4eb72d719f5ad862c45e637fcb9b76ee62aef02bf4e165c95d909a6eb21f98a097f5db87c6ac4a45921a155e1861434a85e50ba1dd08503499c20c6defd5f7fb5ac5cdf69a63b687891b460011e1ff7ef253414c1689c9ee4865293c63b2c29a5746c298dbefcd6011a0f5dfa9ee22712aaff74614db8391e8989cb74c6360659a95522da24d6e0f41c4b0a7eb845316fa8c33a1ac645b8db1f1bcf9973430e62378f18bfb07889fdace14156d48482106923a93b9a02d7e910a72712609e9a40d413cb4e711a117741fb9e25da22ce3984500c99890e232f0710def7c3fc2755a7ae87e2c56408416221403afac8c145b476f6a6c587dba5dec6697acff20ee8f28f8c1f264a79f73b10cd64c00d8ec8c74f1fe0cf2e2de1a9ca3f088972fb163fe1e1a8becfa7aac9b8825de52d060f537ca5048dacc3a152db9a9e211783afb724ffb1c72f9551bfd2e0f8afcc969d87450336faf899eb61606a2b445ed44ba79f9dd78727f626cb22e21648eac4d8a363b03276e04551cbfc9fc3b14ce9fe49292d70548b21aad8c3d56bbc231ed55bce13db139b1b9313507b80bb62ae9121407a932531a216a560db707ad54c396b515e17af95ceefcd0bb2b00f1b8b0f2a219511504c9a392f9063a5aafc8f8e538655470af4576823b93af1fac82af6a9d044fa9ab1e8817ea8e46e7a179ce9557458e2862565a97327a5d66520a605f3958fe9835451794beefafc4ea752304d3684e6176a6ddd97dfc1280c6acfb8821a7ca093bd6112e20b5a29af6f3cf19ff2423d81767c7d27d20cb8e75f748453073c68a49a7feeb1a8c06c76403bff422160a8505299e63cef932a2a208182005e6ef8e47114dfc1a96d13e2b3350f2aba4edbfdd3cddf30620e041fd2f444366be01b072b39670321ee25d7f5e5384f03370e0557d4cddb9fa2c2bb2bd8bb322b37ca068c03ad47836189a0b341d3c53611d33fb42638794927069ca48ab09584df1d148596d8ef2af641a2262e35fe9e82e2d9896b23b2eb1539eba14628d376607a1dfbe863a32e37f3473c37c3c9d3fb1b30539cf79d4e3267b17879c4687e24095b0023028ab48e8a5af7410f29acc129fc6b3d721072f16b9ad8e82644087505f038e1afc93605ab5acaa444189eb3f5aec6dc7833b0f31e15d6b4e4a027d507a189b7deae781d0781a89538fb49be01f070405ea52b23805e85392e8ece4096f2ca49d4f6fa446327a8f958c1203f2e271252ceaa00a1f686ddd964e11c630d9b958e9787b2cfe33115d247b0db606db7dacc9c329dc01f4d6b959c5d4ec50e3d9aa994a0cc98429f51b95000356222b2a077751da1aeb5d884fef963531d990b25eaf15b5b5f6fe1617d2e2455c755fd59d762d58eeeb78e8c24775f2c1ee76e0b3433f78856c15cfa86a1e6e7417415398efbc41ebee355e5cd59043467105ce26a425868bebd4cfdb1d515b685d3af19fff01e4d748d95e5f67b20cece117696946d028428ac681a573bbc994f8ffa57911568f427f07375c14e246d895eb797485b21281f6d25b2b01a58f90a6b3d17332b06444e723827be98ce8b33315641e98c3da0177237b0b5865503b468015097e1a4c81240ddf7617b634dd0d2eb983534c9f43a5155c3df69672359e4740812a679847ba732a5aa254eed44050837b98e34f2fa366f795ae7cdcde71550c770d67443f6b27310d3c9be6f3e5693d780391e7ab581691d8429b3a23f0b7cd8f51b53596f7f32d5a5a39a0460de7136b0da94b3a4c6ad73c4637a963a243f42c91fd3aa5b01fd35b5b8dd2ea1580018d6c67f25a86f96a7c9829f161796d4831ad38b7f6f4b51c7ae4759f4c39a5945f2df1b048f16b3b41bf519b3a197aad1ca474817be045dae333ab21d136d7be2cb443390e76f2cab398b122f78b9a2548ed599638fc0e59f7718888d02657b6029bddf84cea9698926d8359fa53f9c83b40a0f3f1ba24b2fd6f98eca09b490e3005117aa737d1b724b8a0a17437f99b80078e5bd1250281aa87f914c3b0b7e2be6c12e869bfd5fd7ee957efcef347548866ea9588358cb9897d9a60e64d9df9aac77d0b8a72e6b6c69a4f9fd9d5568e6962a49c0714c6f3282653616afcaa0fb708cde133c9095151d568efa7228a94dc2f37854d2e222430011b23f9467bee8d769ec6becea63b695b5fe3f416408779de4782ddb70e495912ce5bcbf12ccbf74663eeaef50acdef5c2ad214ac0f430b8c86df9bc1da2d83b7b1138ab0f92ef15c1df9ee91b0ed4502a11f3912896faee8f52f2843d54fa044dcf893fd59c0c96e74e4810ccbe97648cdf1e60b18f7b50380b5412649f5ff45796f3b12bd630e0c68e27eb73cca25b9392de5a040c21f879453faae6e2dcb06fe783660b06d2132191052a3802e8350168abb76812a146ed056cf8c4150e70bd20a23e45865ed4c41ec0cabb09812eeced6a66663a678c414ff3097515dce7dce2cac078edae2b502e7421d7003eabe9989ffb13d2c3a1ea1149ba7f463f3a6c43c2ff7a6062cbf7f6629b325b8d2addef9954e53f3fcf5badd32e500b478044252c95d53b88b0ac6f3dbf449e78bf44df14c82bfbc1dac7bfae5a223652728fd71dffbbf7b51b4d8c02b06991674bb6114b5cea525c0ee96c2aa0d640b48d2d48c35ba1317dc15db50b621ad51e8c9363d7201458b6e02266bd9372946ceece71a2b8c9f7724a6b4c8a7ac618bb450e1b389b6bfd908838ee4c3c3921ffdd1db0a64bc5f6d7663c1a2c9ed7922c67d28f604d085f95b7bc8520c60fd779f0bd8e7b1132d83c6f2671d416624d4bd6b64cc5d1dad94a68d4032a7315dae07aadb6f71ef7494ab893fbb36024f75156e1f4364a6a30fe17111d30c459e1a8be4d35c39b794fb984c060ad370a5724d4a96932f774c2f6d1755089bb56daf366c0dc4473248fdba79004550189cc74ec7a31b2820ecbd1b2fa7cd07a1e8710edf55b7eef69276c4ea8dafc3eff4753a8f17a4936a909baa883a25ef4e2ac9188fdf5a5b30bc339c5fb455915048cd67a7b6c8a375418df52498b908c46a0763b625012e9fcc3cd1d2f0d560e40418a2f8bffbc63acfab04aa864f8a81dae54266636c6483e5b036257d7c7573b0d7229ff1141ded2b0d566c93e9e69e3c1966a276bcf35e914f68cf604a5fd84a74c06dfdbff2c90ae28746a8a9438a5c241a37dba0df1a80bba00f70beeae3fc836741d8c00fb2b1941b3fdd396aa4301a7b13e756a31514c441fa8163778d73216ba16f8ed3bae1a86a69a3d69615c18c7e1f55ba7788dc397cae0462b34b4d7f9e0443b42aabd8c0c1cf7831dda1756a451df34f22b7facf731d16e9ea78a5d32fa76855692b23cc9465ff2957b852e71cffcc479c3a70bc5b2aef63d91507fc77f68974a9ae24b828573de63b9105c0d1a9fa7f26f62dcc97bc17", 0x1000}, {&(0x7f0000002400)="abf6fbb0a87184ee5be9e84dccd67884492c41a0699ef785b5215fdc6bb15523974ea0a37b193a0aa9a59fcce72889d97ff9aaf62c26ce3105082331bc490b94f025e39ddfe8bd38e9ff518e3a3982881e", 0x51}, {&(0x7f0000002480)="87284b91402e893b0f4f55a5151075fcea64569ff4883f2ef333817c03fa54424c3c7d6e1f28f7dde2a726e3c7f698a40aec27280e6f400a4c8ec47405132d448820a1003ea89bd286e43cbbe97ef7e2ecb3d7241c83c7bce1ab9411f9552a7974b4a49f3f844a008bae342c168bd9646158f6c5c6db4084f1232f899330b70304a20cfd27bb199b70d399fd2ba032b292fcbee869ded4b1328a1946c53d6984bad1a6f1abdf3229", 0xa8}, {&(0x7f0000002540)="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", 0xff}], 0x4, &(0x7f0000002680)=[{0xc0, 0x1, 0x80000000, "5b792e75429e717cc4e7da99e2276612297498ba69f2613ea7d2c38be3f886d49f54481954158388a1e03779447b8a99fddc71077c64a667f4a7846eaf669d423a5e0a7e9378909be0e6c6cadc56b7442f9815b96c9704847923fce3745d089e18dc1f67b3e2617abf9bd2183c9c2145c1e1be687e2bfbf2f2a25991e1eff795e53442272bff1cc76c269a30b19fa751d3d15d3688e0ca78f71e3534b8c9057adad7348527496d07534f"}, {0x1010, 0x118, 0x3533, "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"}, {0x20, 0x11d, 0xfcd, "8c02c4899a8766f7f8e8"}], 0x10f0}, 0x20048000) name_to_handle_at(r1, &(0x7f00000002c0)='./file0\x00', &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000003800), 0x30ceacbe93aa5a69) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f00000037c0)={0x5, 0x4, 0x3ff, 0x9}, 0x10) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x2) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 594.699819] 9pnet: p9_fd_create_tcp (16667): problem connecting socket to 127.0.0.1 [ 594.733182] 9pnet: p9_fd_create_tcp (16679): problem connecting socket to 127.0.0.1 03:33:20 executing program 5: r0 = memfd_create(&(0x7f0000000000)='dev ', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [{}]}, 0x2c, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000400)=""/140, 0x8c) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200, 0x0) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000280)={@null, @null}) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}}, 0x0) 03:33:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r0, &(0x7f0000000240)=@sco, &(0x7f0000000000)=0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000300)="1816a89f6fa464821422e1f4e3016f9ad0f38f9498929ad746bbf364b276e952b8f32cdcf9313fc497d4b25856d52405325cf8ac8cf731c345f0320c2bc262876c00aa749b69a4907c65f19d8538342a1de5a6250bac55e61e970bf201705743af76e719378f479e91d291232ffacb959c7c1e8828ff6a1903a89ae02bd33cb69feadebf3aa560e036143d619df669cd5f90580100507e931507301a6d41c4c4896479dba8e071056488ccd9bca23150be76245d6a29c1a8") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) alarm(0xffff) setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f00000002c0)=@v1={0x1000000, [{0x80, 0xffff}]}, 0xc, 0x1) set_mempolicy(0x2, &(0x7f0000000140)=0x3, 0x40a) 03:33:20 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x450101, 0x0) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000080)) futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="6565660feccaf00fb0549aa7f30f1bf8c4e2f93e6000d8390fab4600c74424005dab800bc7442402b13e0652c7442406000000000f011c240f12f266ba4200b000ee0f09", 0x44}], 0x1, 0x4, &(0x7f00000001c0), 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, 0x0, 0x0) [ 594.846952] IPVS: ftp: loaded support on port[0] = 21 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, 0x0, 0x0) 03:33:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) [ 594.934262] 9pnet: p9_fd_create_tcp (16699): problem connecting socket to 127.0.0.1 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, 0x0, 0x0) [ 594.976451] 9pnet: p9_fd_create_tcp (16699): problem connecting socket to 127.0.0.1 03:33:20 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000190000000096c69ec4615ca104732fc526a6b679956ee74f9af376731592e8c7a773a3142499455cc65f68b034279d5c5d1eee84356172a8988492644b91b6a4aa2e82b8e89350fbdb6eb69956fac59ed27d2382b50fdadd2d583fcfe50a0e6e64d5d397e1a256dfc39a54f31c10edea428448e7eacbe198de87fd6a42cd8a6dc125f890166f13d1a2d6331f9a7a6542e08ff189881e5276cf5d8ebeb8f1b1b7cec07f45890bf031bd1623f03e55ad4ca9e3998063985375fd8db7f1be1081344b3a5a1e54c1c12caa3db05455aaca4073a2000000000000"], 0x1}}, 0x0) r0 = gettid() r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x9, 0x21fe) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000001c0)={0x1ff, 0x0, &(0x7f0000ffc000/0x4000)=nil}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f00000000c0)) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) socket$rds(0x15, 0x5, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fallocate(r0, 0x51, 0x31f, 0x200) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f62743d307830303030163030303020e430303030302c6e6f657874656e640c00659f2eff358176eca4c45699e378bc9b87bebca79b549df1c59332cdb1f432694ff24522d78c249f367b61b9bf750a9f64004a02d76798db514be6b3af4b77e3e7352556f7a4f66a56cde023d464e4104d3e2c775619e95667c3febf39829d90b77050778dac3925032bf6735ed9e027b3a159d76ff2621bfc9ab91259ad5ce17a36f24d78395542c6642fe8a4d62d42af8b19fd5a25e2f1b539f1b012c51346dbe8ff00813f6bbd78"]) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20021000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r2, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffff8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9d5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5f7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24040800}, 0x20000000) readv(r1, &(0x7f00000026c0)=[{&(0x7f00000003c0)=""/171, 0xffffffffffffff7f}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000090000000c00000008000600f9ffffff"], 0x1c}}, 0x0) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000080)=""/92, 0x3fe) 03:33:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) bind$isdn(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r2, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) 03:33:20 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='4'], 0x1) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r2 = gettid() r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008913, &(0x7f0000000080)="1a31cdff7857a09b07cc2d75") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x37) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000000c0)) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) ptrace$cont(0x1f, r2, 0x0, 0x0) [ 595.558740] 9pnet: p9_fd_create_tcp (16743): problem connecting socket to 127.0.0.1 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/checkreqprot\x00', 0x41, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000a00500006801000068010000b803000000000000b8030000d0040000d0040000d0040000d0040000d004000004000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000100"/64], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400168010000000000000000000000000000000000000000000000004800647374000000000000000000000000000000000000000000000000000000ff0100000701000805000200feff4000ff000700050000000100ea0080007eff3c05000000000e003000616800000000000000000000000000000000000000000000000000000000000004d3000004d600000000ff010000280052454a4543540000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002802500200000000000000000000000000000000000000000000000038017274000000000000000000000000000000000000000000000000000000000300000000100000b9070000090000003804000000000000000000000000000000000001e64d60e2f07e76614b256865c8afec7800000000000000000000000000000001ff01000000000000000000000000000100000000000000000000000000000000fe8000000000000000000000000000aaff010000000000000000000000000001ff010000000000000000000000000001ff02000000000000000000000000000100000000000000000000ffffffffffff00000000000000000000000000000001ff010000000000000000000000000001ff020000000000000000000000000001fe80000000000000000000000000001da981e8d50a4a86d2cec16e45b1a78611fe8000000000000000000000000000bb0900000028006d6800000000000000000000000000000000000000000000000000000000ff08010000000000280052454a4543540000000000000000000000000000000000000000000000000f00000000000000fe800000000000000000000000000026fe800000000000000000000000000021ff000000ffffffffffffff00ffffff00ff000000ff000000ffffffffffffff006e6c6d6f6e300000000000000000000067726530000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002e0005010e000000000000000000000000000000f0001801000000000000000000000000000000000000000000000000280065756936340000000000000000000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001bc000003010000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x600) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}}, 0x0) 03:33:20 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r0, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) [ 595.637119] 9pnet: p9_fd_create_tcp (16753): problem connecting socket to 127.0.0.1 03:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) 03:33:20 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f0000000040)={@rand_addr=0x7f, @multicast2, @broadcast}, 0xc) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) getsockopt$ax25_int(r2, 0x101, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x4) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:20 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000680)=""/190, 0xbe}], 0x1, 0x0, 0x25d}}], 0xf4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 03:33:20 executing program 1: clock_gettime(0x4, &(0x7f0000000080)) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) getegid() lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r0 = open(&(0x7f0000000240)='./file0\x00', 0x100000000000, 0x4b) r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) syz_genetlink_get_family_id$tipc(0x0) geteuid() fstatfs(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x100) connect$rose(r1, &(0x7f0000000280)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000001c0)=0x0) capset(&(0x7f0000000300)={0x200f1526, r3}, &(0x7f0000000340)={0x8, 0x6, 0x8fc, 0x7fffffff, 0x6, 0x5}) readv(r2, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1a, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}}, 0x0) 03:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x5, &(0x7f0000000140)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000200)=""/58, &(0x7f0000000240)=0x3a) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000000)={0x1, 0x8, 0x3, 0x10001, 0x8, 0xffffffffffffffff}) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000180)={'veth1_to_hsr\x00', 0x8}) [ 595.858286] 9pnet: p9_fd_create_tcp (16785): problem connecting socket to 127.0.0.1 [ 595.903850] 9pnet: p9_fd_create_tcp (16788): problem connecting socket to 127.0.0.1 03:33:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000008000600f9ffffff"], 0x1c}}, 0x0) 03:33:21 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000008c0)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x7ff, &(0x7f0000000900)=""/148) clone(0x7ffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000039000000d3fd9950ddffdeb070d700c4cf10a6ede17a175756aa65cb7fec665959f9ac73749d3bb643eeaddea73c3b0dd93a41a8e2ce85ce556ac372798f38f8bdf5968441615eded47287029e4cdb99f19c5d9c4854f0ad045d9f8e391b7599a68e265b878eb3c7050000000000000098cd45373fed4afca3fa2c5bef0d84bd3fabace2008d805fc51d8344adbf75922ab23bc34477dfaa2480e3cacb5584d06a860fd92d5a4c1409cc8235ee3e37bebfe1d1e72af740a810"], 0x1}}, 0x0) r1 = gettid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_generic(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x2b0, 0x1f, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@nested={0x170, 0x46, [@generic="2ae3094ff8a2d4146824f3434d441a2d52e683ea7738db5679aac2bff7dbf009c4b0ce7a98788d39ac5eac6a4dfe54c462cc9b104a1858f9d25df1c76765032f99b38bf664f6a50f2831ea78e53bd9bca16b088902c2b146b837b9844efea918c97a48859f0e6cf32879c0c500d73fc6056eb5d8d269fbdff8", @typed={0x4, 0x59}, @generic="c0478d74e1f04c808758917ec89d2d2d2f6ab3fc5eb4b8126ba4addc322a10741762320c94634ed9e44b89bdbc651b7c155642c76d4a2b", @generic="932884c05caffdc7f6c58cdc0a9b54a2f2ff070d50c1acff3e540b02c2b390ae35ad0b46dc587142ee96b8791077cf93df05e176f88db278bcccca10fdb57126752e82106e63eb7fe2e8af9f3f9a33ea07565147da4c2333977058890847a52d18f59ef9e1e202c0367f4f8000d6b7a0e3a199e38ae359e0d5b1caa8ea2a0aac7a2afbc57a92583ed7c211dd99e853eecffcb604b1172a894245378de794944439ceade3a99416a8aeb76576387641bf949e8549e8"]}, @nested={0x114, 0x47, [@generic="f40ccc0654eaa3b8bec0db14c01dea0ade82f8c629d1a82342ff4672fc3c1b35a5b042a34f58d7bfec7b2a2388f0376a66492b792b6754c90c54", @generic="4a4c1182ef0383cf74aabc30459c90f347c4e99da489e96a846490b437bfba0806bcbc50ec40c4c8b046a127453081fe588b2580069e07c38818f0ac261f5d1e6e96e98307231ff3f889e46e0a9a2c8af4eb7408d1da5d256d9a9aa95c4daf5d9e1a020e88a2da14bc501dfe8edc6a43a58d34250c1e7793ca734282908643c5fa5cd85a093013157ba468fa8b739db585fb333006d65aacdca6beef45248b077cf1a3e672d1cb6dd50b6dd7876065e0ce187ebb71a9035c5457d6a089a76e3ae945bc580c2cbef547221b7d630deea16aab07840d"]}, @typed={0xc, 0x17, @u64}, @typed={0xc, 0x6f, @u64=0x7}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r1, 0xb8e, 0x0) tkill(r1, 0x37) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000800)='/dev/vfio/vfio\x00', 0x80, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000880)={0x1, &(0x7f0000000840)=[{0x0, 0x0, 0x0, @link_local}]}) ptrace$cont(0x18, r1, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x101, 0x800) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000740)=""/67, &(0x7f00000007c0)=0x43) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000280)="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") ptrace$cont(0x1f, r1, 0x0, 0x0) 03:33:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) 03:33:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x101, 0x2080) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xc0, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x2b}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x26}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xacf}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x2c, 0x20000) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000400)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@noextend='noextend'}]}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x2, @remote}, @in={0x2, 0x4e24, @empty}], 0x2c) 03:33:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000043002100000000760000000000000000200001002d766d6e65743173656c696e7578657468306574683147504c214500"], 0x1}}, 0x0) 03:33:21 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000190060a600"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = socket$kcm(0x2b, 0x1, 0x0) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:33:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) [ 596.424122] 9pnet: p9_fd_create_tcp (16799): problem connecting socket to 127.0.0.1 [ 596.470358] 9pnet: p9_fd_create_tcp (16799): problem connecting socket to 127.0.0.1 03:33:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x81, 0x2a000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xf08) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000300)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r3}) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=tcp,portD0x0000000000000000,noextend,\x00']) [ 596.528775] device nr0 entered promiscuous mode 03:33:21 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x42, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x1f3260f5, 0x0, 0x4, 0x4002, {0x77359400}, {0x1, 0x1, 0x7f, 0x9, 0x4, 0x765, "0996ba94"}, 0x40, 0x1, @offset=0x1ff, 0x4}) r1 = gettid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x37) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r1, 0x0, 0x0) 03:33:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x403, 0x0) 03:33:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={r0, 0x0, 0x9, 0x7, 0x9}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00') ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000240)={0x0, 0x1, [0xa54, 0x8000, 0x4, 0x3, 0x7fffffff, 0x100, 0x9, 0x200]}) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=tcp,port=0x00000,noeXte~d,\x00']) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000280)={0x1c, 0x5, 0x1}) 03:33:22 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f9023a0000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f00000013c0)={&(0x7f00000011c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000100)=[{&(0x7f0000001240)=""/146, 0x92}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="39000000140081ae00002c000500018701546fabca1b4e7db89c40ebb37358582bdbb7d553b4e921556b3d5df500"/57, 0x39}], 0x1}, 0x0) sendmsg$kcm(r0, 0x0, 0x8000) 03:33:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x600, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x5000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xf0ff7f}], 0x1}, 0x0) getsockopt$inet_buf(r2, 0x0, 0x0, 0x0, 0x0) 03:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x60000, 0x0) ioctl$SIOCNRDECOBS(r2, 0x89e2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2680, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000d50104000000000100000000dcdf6c68a94a86be9084baa5b5db070000006800000100000000"], 0x2a) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}}, 0x0) 03:33:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) [ 597.238675] 9pnet: p9_fd_create_tcp (16855): problem connecting socket to 127.0.0.1 [ 597.259363] 9pnet: p9_fd_create_tcp (16862): problem connecting socket to 127.0.0.1 [ 597.269593] binder: undelivered death notification, 0000000000000000 03:33:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, 'trans=tcp,'}, {0x20, '9p\x00'}], 0xa, "55aaa679532a23b9be4cb2d55b68e29656e6941358409b9f0c62589c425c612132ea5a252836c3f981175aeeaacd8b47017c96ada883b371d50860ff42bae057ef7808526de767e0a6d574a74cebc48a1cd0fa3cb8048b8d5c3c77e21d6da4c7ff9b74c7f0b1dc9c5ba0e495f747c39b1571f35ea3008292ec59226628e92a17"}, 0x9a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @rand_addr="f1111d3952d818566e4dfb292a6fbc28", 0x7ff}, 0x1c) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) 03:33:22 executing program 1: sched_setaffinity(0x0, 0xffffffb4, &(0x7f0000000280)=0x5) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 03:33:22 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="7393d775726974790900000000000000efffff7f0000010000000000000000000e9affffff1b0067c7a96419a8536c0000000000280113d62f01841288ddd7384bce3f00eaff07000000000000f828fb8e4054986b63ad6c1be264a2969803a04798278764b87fef2b2ad2be55a9aa83b0cd56bedc016acd8b1ef9f4e2fb88fc2f"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="6d51f0dfe3c51bb59002029777caf1a98af2c7aa86ef8f9a419648f8bc7000aeeb"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ptrace$setopts(0x4204, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000280)={0xa, @output={0x1000, 0x1, {0x7, 0x81}, 0x7f, 0xfff}}) [ 597.371632] 9pnet: p9_fd_create_tcp (16869): problem connecting socket to 127.0.0.1 03:33:22 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01908ea10262ba7ad12772ed6331dca91fb2b6a6ce27a8ece71fb03ae9298542fa434d98161887957eddb4e34540dd9f81a45a09d7b9cd65eb983152738be19bc25aa8cf0874039ec05462278dcf28480bd93ef0020dae3a9afcd8fc71b2dcc281d576d0fae15db624c9087af1f112559c349adb8ae5ad5396998be7c5370b6de2b86b258c9196383852f7c5c446dfe36c94d6df20d6cbbc64fe0334e821aedaa91a475b5f"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x2, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r2, 0x80044326, &(0x7f0000000080)=0x963) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x100, 0x88000) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000140)={{0x80000000, 0x3}, 0x8}, 0x10) 03:33:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) [ 597.418685] binder: undelivered death notification, 0000000000000000 03:33:22 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8001, 0x400) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x11, "12faac415a7865469bccf98962d16b0a65"}, &(0x7f0000000300)=0x35) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000180)={0x2, 0x8, 0x3, 0x1, 0x9}) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0x1015, 0x2, 0x100000001, "42d9a43ecd514f6a05ba37e5afb19f44", "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"}, 0x1015, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d6a3374723d3078303030301036f9ba6dcd5fc0cb7f3030c46da130303c5c3d400510946da95d96bb8236542c355800"]) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x100000001, 0xe, 0x4}) accept4$nfc_llcp(r2, &(0x7f0000001440), &(0x7f00000014c0)=0xffffffffffffff48, 0x800) 03:33:22 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) [ 597.518358] binder: undelivered death notification, 0000000000000000 03:33:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:22 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900eacc4c4f0004efffff9f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 597.614724] 9pnet_virtio: no channels available for device 127.0.0.1 03:33:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x442000, 0x0) getdents(r0, &(0x7f0000000080)=""/92, 0x3fe) [ 597.656059] 9pnet_virtio: no channels available for device 127.0.0.1 03:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0xe}}, 0x20) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}}, 0x0) 03:33:22 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) writev(r0, &(0x7f00000023c0), 0x100000000000024c) 03:33:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000003980)='./file0\x00', &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000003900)='./file0\x00', &(0x7f0000003940)='security.capability\x00', &(0x7f0000003a40)=@v3={0x3000000, [{0x100000000, 0x3}, {0x7, 0x9}], r1}, 0x18, 0xf49b84b468a3318f) ioctl(r0, 0x1000008912, &(0x7f0000003ac0)="0adc1f123c123f0200d0702949c190104ead96842a60f72d0af8455740cecf92db6bb35710f2876b8b3c7bfcf71b3d3f86bf315fb820d2460138075e97d717800ce5b7475aa9ff1eaa8b7528fd2cf78bbdeced7d04b8500209f37dc21f114e4f6b3846d0661e262fb568009b407f781e6df65dafc6452df07aab83c25058e16c6d8fb054a259a110a06ae3247bbd488000e1376d25885606f4ef39d0b064d5a2beefac4d26d9caf1cc757f74c1d57cd3d573727a22552a6e68eb856b4a2bcb887fb6ec25e29119c9c3a802a1c696811289563b6211f94056a275fd9cb8f091df220d970ff4c7fe26bb63e514da7588317d7d75") r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) recvmmsg(r0, &(0x7f0000006340)=[{{&(0x7f0000000140)=@tipc=@id, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/52, 0x34}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000340)=""/69, 0x45}], 0x3, &(0x7f0000000400)=""/178, 0xb2}, 0x81}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/229, 0xc7}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/72, 0x48}, {&(0x7f0000003700)=""/207, 0xcf}, {&(0x7f0000003800)=""/74, 0x4a}], 0x8}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000005900), 0x0, &(0x7f00000064c0)=""/130, 0x82}, 0x3f}, {{&(0x7f0000005a00)=@hci, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005a80)=""/152, 0x98}, {&(0x7f0000005b40)=""/86, 0x56}, {&(0x7f0000005bc0)=""/201, 0xc9}, {&(0x7f0000005cc0)=""/110, 0x6e}, {&(0x7f0000005d40)=""/189, 0xbd}], 0x5, &(0x7f0000005e80)=""/48, 0x30}, 0x8000}, {{&(0x7f0000005ec0)=@nl=@proc, 0x80, &(0x7f0000006240)=[{&(0x7f0000005f40)=""/234, 0xea}, {&(0x7f0000006040)=""/42, 0x2a}, {&(0x7f0000006080)=""/154, 0x9a}, {&(0x7f0000006140)=""/203, 0xcb}], 0x4, &(0x7f0000006280)=""/147, 0x93}, 0x800}], 0x5, 0x20, &(0x7f0000006480)={0x77359400}) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r3) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0xfffffffffffffffe, &(0x7f0000003bc0)=ANY=[@ANYBLOB="7472616e733d7463700b706f72743d30304230303030303030303030303030302c6e6f657874656ee42c0065082b96b7b8c36e881513421c3aa13c29260b9218db9aaf2243ddc596578350afec50ee7cff51f197525118ff4ec07018e9951a2376a7a63caf97e711a22dc870d7ffe3ed5e01e8410c4030d0f0ebfacd372db34d247e8fca95d29ded27b13c0d521e95685c5d82f32f6f00763bc634831c668936538a24c409fffc760b84eb4444f22ee04735540a97631bffcc50788ac2114287f43013a7f95a8020095337b8bcf7f07cd7025b137c1dcfed141f3be2674ccd42c2cef8994debb7fac6929388d65588356c527aee6611b71b2a1f26356db0c055295cf16e583ab28490459fa74adfb8dfebce43c292258a73ff6de7b1c0ae8fcb6dda447cd19ecd5fdf1a66f644f37a8fe190c332e71c88f228"]) 03:33:22 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000080)="3b9472c27185c1fe1f85ed408d2dae1f2e9358ff28aa0c2179f32405c857b25bd610cf7038ba30317a80bf551051fa09ca5c5432cfe9c05607e2d3e260973afcceae68810511a1341b3c861a98ec9ffb8acc60cb9bd463e0f31aee3dc5af", &(0x7f0000000140)=""/106}, 0x18) r1 = gettid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x37) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000200)={'nr0\x00', {0x2, 0x4e24, @empty}}) ptrace$cont(0x1f, r1, 0x0, 0x0) getpriority(0x1, r1) 03:33:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip_vs\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/149, 0x95}], 0x1, 0x100000000000000) 03:33:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030303030302c6e6f650800f0125b7465"]) 03:33:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000001500)=0x30) 03:33:23 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="736563757269740079952eb22e790900004000000000efb7c5c9a184d65ceb000000000000000e9affffff000000480b0000f902000000000000"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) mq_unlink(&(0x7f0000000040)='%\x00') ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_group_source_req(r1, 0x29, 0x30, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x3, @loopback}}}, 0x108) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) tkill(r2, 0x1) [ 598.165490] 9pnet: p9_fd_create_tcp (16941): problem connecting socket to 127.0.0.1 03:33:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000200", @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000008000600f9ffffff"], 0x1c}}, 0x0) 03:33:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7, 0x80) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0x1ea}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={r2, 0x80000, r3}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472022c6f72743d3078303030303030303030303030303030302c6e6f657874656e00"/44]) 03:33:23 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") read(r1, &(0x7f0000000280)=""/131, 0x83) write(r0, &(0x7f0000000080)="2400000012005f3414f9f40700090400818a0400"/36, 0x24) 03:33:23 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000190000000037227d5e573f8da9a49c75ba8c6d44558f7b82a852f7b8f3c950a2de553268f50d7dc93234cdf06ef373994cbb4945441dc1c54b439980bdea1654da3a7a35b00696ceeb72a147c8d1c7d3514f6026d20d8cb69d9738bf209cf528dee7dbdc598ad46515f86fc34200004301e768a4d2"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x7, 0x0) 03:33:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x8, 0x4100) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000180)={0x31, 0x31, 0xa, 0xe, 0x4, 0x7, 0x3, 0xac}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) 03:33:23 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000000c0)={0x32, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 'fo\x00', 0x2, 0x914b, 0xa}, 0x2c) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000080)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000140)=""/88, &(0x7f0000000200)=0x58) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f00000004c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@empty, @in6=@remote, 0x4e20, 0x9e6, 0x4e22, 0x5229, 0xa, 0x80, 0xa0, 0x7f, r4, r5}, {0x6, 0x55cd, 0xffffffffffffffe0, 0x2, 0x6, 0x80, 0xfffffffffffffff7, 0x8}, {0x5639, 0x461, 0xffffffffffffffc1, 0x1}, 0x1, 0x6e6bb4, 0x3, 0x1, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x24}, 0x4d4, 0x32}, 0x2, @in6=@mcast2, 0x0, 0x7, 0x1, 0xd6, 0x5, 0xad20, 0x101}}, 0xe8) [ 598.474034] 9pnet: p9_fd_create_tcp (16978): problem connecting socket to 127.0.0.1 [ 598.485383] 9pnet: p9_fd_create_tcp (16978): problem connecting socket to 127.0.0.1 [ 598.510726] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 03:33:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x4000) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@null, @default, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d74ff07000002000000307830303030303030302c6e6f657874656e642c00"]) [ 598.558216] IPVS: set_ctl: invalid protocol: 50 172.30.1.5:20002 [ 598.595058] 9pnet: Could not find request transport: tÿ 03:33:23 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhci\x00', 0x0) fsetxattr(r0, &(0x7f0000000140)=@known='system.advise\x00', &(0x7f0000000200)='9p\x00', 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f399bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) [ 598.606027] 9pnet: Could not find request transport: tÿ 03:33:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) setxattr$security_smack_entry(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.SMACK64MMAP\x00', &(0x7f0000000200)='\x00', 0x1, 0x2) [ 598.637513] 9pnet: p9_fd_create_tcp (17001): problem connecting socket to 127.0.0.1 [ 598.673589] 9pnet: p9_fd_create_tcp (17005): problem connecting socket to 127.0.0.1 [ 598.684838] 9pnet: p9_fd_create_tcp (17005): problem connecting socket to 127.0.0.1 [ 599.241438] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 03:33:26 executing program 1: 03:33:26 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x5, 0x400000) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000180)={0x28, 0x30, 0x17, 0xa, 0xa, 0xfffffffffffff959, 0x2, 0x166}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000200)={0x4, 0x0, [{0x2, 0x7, 0x7, 0x400, 0x8, 0xc4e0, 0xfffffffffffffffc}, {0xf, 0x3, 0x7, 0x0, 0x3, 0x0, 0x101}, {0x80000007, 0x8001, 0x1, 0xfffffffffffeffff, 0x3ca, 0x100, 0xffff}, {0x40000000, 0x1, 0x5, 0x100000001, 0x8e, 0x800, 0x64c}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) 03:33:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x14000, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000280)=""/219) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}}, 0x0) 03:33:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:26 executing program 5: 03:33:26 executing program 5: 03:33:26 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000380)) [ 601.217448] 9pnet: p9_fd_create_tcp (17021): problem connecting socket to 127.0.0.1 [ 601.233026] 9pnet: p9_fd_create_tcp (17025): problem connecting socket to 127.0.0.1 03:33:26 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e63a03d78e61d540c50e3f40a0ae29b6fcc04e0d009b917df802fe37f2d9affffff0000004803"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1cd7e03cb96fe0c9fd"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0xa0002, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x8, 0x4) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8000fffffffe) r6 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472ecdf733d7463702c706f34599034e7506fd8144929c31a83275f72743d3078303030530000000000000000303030302c6e6f657874656e642c00"]) 03:33:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(r3, &(0x7f0000000280)=""/185, 0xb9) dup3(r2, r3, 0x0) 03:33:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=' 7\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000008000600f9ffffff"], 0x1c}}, 0x0) [ 601.565066] audit: type=1400 audit(2000000006.510:102): avc: denied { map } for pid=17034 comm="syz-executor.5" path="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 03:33:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8000fffffffe) r6 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 601.625449] 9pnet_virtio: no channels available for device 127.0.0.1 [ 601.632576] audit: type=1804 audit(2000000006.510:103): pid=17036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 03:33:26 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x7fffffff, 0x200, 0x26ab, 0x963, 0x9, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 601.673746] audit: type=1804 audit(2000000006.560:104): pid=17041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 03:33:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8000fffffffe) r6 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 601.729043] audit: type=1804 audit(2000000006.670:105): pid=17057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 [ 601.806055] audit: type=1804 audit(2000000006.750:106): pid=17064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 03:33:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x40000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0x25, 0x5f, &(0x7f0000000180)="ca2a51dd1197903a59f721b28047f92902acfaf3e92f8bbf5ce2edaa4dff402b6bec42019e", &(0x7f0000000200)=""/95, 0x2}, 0x28) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) 03:33:26 executing program 1: 03:33:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8000fffffffe) r6 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:27 executing program 1: 03:33:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:27 executing program 4: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'team0\x00', 0x2}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000200)) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x2b64) [ 602.022863] 9pnet: p9_fd_create_tcp (17072): problem connecting socket to 127.0.0.1 [ 602.032368] audit: type=1804 audit(2000000006.970:107): pid=17073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 03:33:27 executing program 1: [ 602.106191] binder: 17071:17080 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 602.128558] audit: type=1804 audit(2000000007.070:108): pid=17081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 [ 602.147808] 9pnet: p9_fd_create_tcp (17085): problem connecting socket to 127.0.0.1 [ 602.194911] 9pnet: p9_fd_create_tcp (17089): problem connecting socket to 127.0.0.1 03:33:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x2f9) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c967590", @ANYRES16=r2, @ANYBLOB="010000000000000000000000000008000600f9ffffff"], 0x1c}}, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x2) 03:33:27 executing program 1: [ 602.817700] binder: undelivered death notification, 0000000000000000 03:33:29 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff0b547200000048030000f94f13eb28c5fbd19612b98c1c2602000000000000280113"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="0807a8000000000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0xfff) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d74636b2c706f72743d3078303030303030303030303030303030302c6e6f657874656e642c007452ae4c084d3ff758ccc6036a0e45fadf5bfcd971125abc4975647db4f11025532e204377b854e70aaee18adeb12c7c8e0a2d8b195c7e7b56b46ff411df64d5d1fe9c8588fd73a52d2855e108e3e6ced396368ac77992c446f460333d97bf46ecc414c99ade630ed0143c9d8db722edb9d367d2727a0bc5bb23e78d30d59e83add709b0d9b88b09404237"]) 03:33:29 executing program 1: 03:33:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) readv(r2, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) r3 = syz_open_dev$media(&(0x7f00000005c0)='/dev/media#\x00', 0x5, 0x210000) ioctl$RTC_VL_CLR(r3, 0x7014) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r4 = dup2(r2, r0) sendmmsg$nfc_llcp(r4, &(0x7f0000000580)=[{&(0x7f0000000340)={0x27, 0x0, 0x2, 0x3, 0x9, 0x3, "f52c8c5920a443b7b5210e967b666bcbdb257417316694a5f616613299ab42a861f97b24c982cd78779d21984652a91457438ad714ef451e7fd0d9d8d7533a", 0x19}, 0x60, &(0x7f0000000180)=[{&(0x7f00000003c0)="f46214b0c69d4c77ea5431117a594c4da7e21c08a95734801df47a0ef777234f6c27416b976aed9018f54b3a4b893c59b3468eefe750670323985efe24624482910b4890ef9de0db0a69df1f9850c3f18cde", 0x52}, {&(0x7f0000000440)="d9a6287f3438614d49dbd48fdbd47bb6993db1a0c06b65ab8afbd84b67fb29888ac81f7889cd97e9e97ceb844a26e81e84baed1d6c0380c683fb86e1f9c57b35b285a7bc90afb09d6cbc1606cb9f91c659157c85a65f53cf83890b71393748c3c439138eced46745ee5e71e0f4de056055064269ae8999c49d568d3ff780528e472ceed39e9eb237274c3ff9526fc595b5095fb9a7008a42cb6915dce8d1a8a5a8c10b5a87fcec2a2f02fe7c7ba1143e7708d9fb81282a2ae9ade4e9", 0xbc}, {&(0x7f0000000000)="c2350b9413", 0x5}], 0x3, &(0x7f0000000500)={0x80, 0x0, 0xdb, "4defd87e1aad1164724de0ddc391e62fc94de548cfd2f555c5178244b0fb68bdedff24dd58de32f994fa5f2ef9998d371b28efb088e660f9e0b3203429270db676503fac635ca961dacaaced995c26b990b65c61e3446f0dc94f0aba07c87fe7d4b691f0e954699887"}, 0x80, 0x20000810}], 0x1, 0x24000000) ioctl$RTC_VL_CLR(r3, 0x7014) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000000000006a5d0c00000008000604f9ffffff6c79d69c9821bac07f33d432b5dd9cee51fc487e4714a61f0740608ff02ea84a169ffa9caa172c2f23481391eed75dbd88ab03f679aac123d90a613f54316f9fcd565f4aed72775f87d2af9d1c8550d78ef1e83c3b4f292338aa45a2063e337439736028da08ea37ed7f052d413da92d810f031f7ad98df53bab1e509fa226d2698f0e7425c51854babbf581240e8df05bad340483a9f40ac63427c2"], 0x1c}}, 0x0) 03:33:29 executing program 1: 03:33:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 604.742517] audit: type=1804 audit(2000000009.690:109): pid=17106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 [ 604.781195] 9pnet: Could not find request transport: tck 03:33:29 executing program 1: 03:33:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) fsetxattr$security_capability(r0, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000300)=@v3={0x3000000, [{0x100, 0x7ff}, {0x6, 0x7fffffff}], r2}, 0x18, 0x2) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000400)=0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000440)={r3, 0x20}, 0x8) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) 03:33:29 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) execveat(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000300)='\x00', &(0x7f0000000380)='wlan1\x00'], &(0x7f0000000580)=[&(0x7f0000000400)='-ppp0%\x00', &(0x7f0000000440)='9p\x00', &(0x7f0000000480)='(eth1mime_type)[\x00', &(0x7f00000004c0)='trans=tcp,', &(0x7f0000000500)='*,]vmnet0GPL*posix_acl_accessGPL\x00', &(0x7f0000000540)='!\x00'], 0x1400) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000680)=""/39) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x20, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000140)) renameat(r1, &(0x7f00000005c0)='./file0\x00', r1, &(0x7f0000000600)='./file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r4, 0x834}}, 0x10) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000640)='./file0/file0\x00', 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) 03:33:29 executing program 1: [ 604.840579] binder: 17105:17124 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 604.862285] audit: type=1804 audit(2000000009.800:110): pid=17119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 03:33:29 executing program 0: 03:33:29 executing program 1: 03:33:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000140)={0xb13e, 0x5, 0x6, 0x9, 0x7fff, 0x10000, 0x177afb68}) [ 604.998462] 9pnet: p9_fd_create_tcp (17139): problem connecting socket to 127.0.0.1 [ 605.035030] audit: type=1804 audit(2000000009.980:111): pid=17144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 [ 605.063721] 9pnet: p9_fd_create_tcp (17139): problem connecting socket to 127.0.0.1 03:33:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000180)={0x7, 0x3, 0x2, {0x5, 0x2, 0x0, 0x6}}) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) fchown(r1, r3, r4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0xff0c, r5, 0x1, 0x0, 0x25dfdbfc}, 0xffe6}}, 0x0) 03:33:30 executing program 1: 03:33:30 executing program 0: 03:33:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x1, 0x440) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000180)={0xc845, 0x2, 0x8, 0x1, 0x3, "6fdc6c4e9380f1e6440ae865cb6eaba13750e2", 0x0, 0xfcab}) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) 03:33:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 605.538485] binder: undelivered death notification, 0000000000000000 03:33:30 executing program 0: 03:33:30 executing program 1: [ 605.606170] 9pnet: p9_fd_create_tcp (17159): problem connecting socket to 127.0.0.1 03:33:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000040)='./file0\x00', 0xfffefffffffffffe) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="74723f340eba4b8968d4f56f72743d3078030000000000000030303030303030302c6e6f657874656e8324fd1746c266234c360206ae85642c00"]) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10882000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x144, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x38}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffffffffffb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ab4}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @remote, 0xee}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb046}}}}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x1) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) 03:33:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:30 executing program 0: [ 605.652648] binder: 17152:17167 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:30 executing program 1: [ 605.739583] 9pnet_virtio: no channels available for device 127.0.0.1 [ 605.801188] 9pnet_virtio: no channels available for device 127.0.0.1 03:33:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=ANY=[@ANYBLOB="10190d00005d", @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000008000600f9ffffff"], 0x1c}}, 0x0) clone(0x2800000, &(0x7f0000000000)="aa49694b895c74", &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="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") 03:33:31 executing program 0: 03:33:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:31 executing program 1: 03:33:31 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000380)) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000000)={0x3, 'syz0\x00'}) r1 = semget$private(0x0, 0x7, 0x220) semctl$GETPID(r1, 0x4, 0xb, &(0x7f00000002c0)=""/139) semctl$GETPID(r1, 0x100002, 0xb, &(0x7f00000001c0)=""/203) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030303030302c6e6f657874656e642c0006e95267a90ea7f314e8a72038f65e548ea7fded058882f0da7e50decaed32ee8e45e5f805f74bf70d0ed01912c38a2f0ee7065e11d8c0626f4b51ae4c"]) 03:33:31 executing program 1: 03:33:31 executing program 0: [ 606.390632] binder: undelivered death notification, 0000000000000000 03:33:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:31 executing program 1: [ 606.464768] 9pnet: p9_fd_create_tcp (17192): problem connecting socket to 127.0.0.1 03:33:31 executing program 0: [ 606.538729] binder: 17190:17203 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 606.539930] 9pnet: p9_fd_create_tcp (17202): problem connecting socket to 127.0.0.1 03:33:31 executing program 1: [ 606.578910] binder: 17190:17203 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:32 executing program 0: 03:33:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030300600000000000000302c6e6f657874656e642c00"]) 03:33:32 executing program 1: 03:33:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000ed000200000000000000000600fa13c7eff426e7f9ffffff0000"], 0x1c}}, 0x0) 03:33:32 executing program 1: 03:33:32 executing program 0: 03:33:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:32 executing program 1: [ 607.330506] 9pnet: p9_fd_create_tcp (17227): problem connecting socket to 127.0.0.1 [ 607.358207] binder: 17222:17233 BC_CLEAR_DEATH_NOTIFICATION death notification not active 03:33:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000180)={0x7, 0x2, 0x6, 0x58, 0x8001, 0x725}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0x1}) 03:33:32 executing program 0: [ 607.423755] binder: 17222:17240 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 607.439917] kauditd_printk_skb: 2 callbacks suppressed [ 607.439925] audit: type=1804 audit(2000000012.380:114): pid=17239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 [ 607.487203] 9pnet: p9_fd_create_tcp (17244): problem connecting socket to 127.0.0.1 [ 607.509356] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 7 (only 16 groups) [ 607.526976] 9pnet: p9_fd_create_tcp (17244): problem connecting socket to 127.0.0.1 [ 607.535144] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 7 (only 16 groups) 03:33:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:33 executing program 1: 03:33:33 executing program 0: 03:33:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f283c123f319bd0707387467e8281316f05626d15cd4f0175dbe134f50b45a8552a85e40e789dca3f036bdfc41deba7c234a68b1a65ac31ffea0d7dfcdf0efb4951647ca7753138951e4b84e02f83ff8fd61d8b89927e88d635d4f6b33072ac0683f47aacedb78db2f8d552582121f345") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) 03:33:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffe66, &(0x7f00000002c0)={0x0, 0xfe16}}, 0x20008004) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f0000000200)={0x0, 0x0, {0x100000001, 0x207bc8f2, 0x80000001, 0x7}}) 03:33:33 executing program 1: 03:33:33 executing program 0: [ 608.148457] audit: type=1804 audit(2000000013.090:115): pid=17260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 [ 608.157767] 9pnet: p9_fd_create_tcp (17259): problem connecting socket to 127.0.0.1 03:33:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x8000, 0x0) connect$rds(r1, &(0x7f0000000400)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0xffffffffffff0001, @mcast2, 0x80000001}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}, @in6={0xa, 0x4e23, 0x3, @loopback, 0x1}], 0x48) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000300)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000280)=0xfffffffffffffff8, 0x4) r3 = socket$netlink(0x10, 0x3, 0x10) readv(r3, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$unix(r2, &(0x7f0000000e00)={&(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000840)="d5a8d8fe8c085b1d3613f815043dfc756b3e379afb56e62dc1d592b52e80d726ef2ae41093155846932aaca6d4c2863acf938a7f0ec234cf7f50255723d51ba58699a6c40aa7f032db6aa7abf00d626542770122a499c4427fd37e832e1d6e6b7d477d72f552b545e802e19e18dc88e533d22585d071976ab45b00da91aa2d529bce7a77aede6e60f357070b0acc2a6a0dfdb871cc91c3bbf8c8d1a66f348ade959f06d1c4cd9cc97ca59da0fc0f105a3fc0b2bbf9fbb43cb84b23f0ba4fba", 0xbf}, {&(0x7f0000000900)="fba086358121b2ae8d94e852bc5585adaa404713af42d9574e6025c3f4bbfc3ba63009b3bf315540cd2b52e3a34e73f600a57c9a531f99b33b411ba8b54092ad0d10de9f4c0a2409580bdb91c662f87e4cc6d389fa2b6c2f3f3395653628141f46f48dcf20f86d9850fd934c5a1f4c6bd852b8da33bf0b7ed151711524941475e846131d299f11567bc35030762c6fef3ff85e2cb1e7e42eacefac26e46f8a950f50d4a78e46190e3688216c76adfbbb6370962469ea1a9463891912", 0xbc}, {&(0x7f0000000000)="f0fbc931116c4abd6c2f2592d0e68ed42a0b920edb1b6cc40bfe76f5a45c247c410e5eec01963a2cfc4b9f3145eb16ef5b0aa4dcf10cad", 0x37}, {&(0x7f0000000300)}, {&(0x7f00000009c0)="0ff207013fe6e9c05853f03165269c4cc494dcd792f35b37fe2b8778d92e4807d26c83ad3c26440ef8c10ac03acc7258276c3e1632779348e184e41274101c363c71e298bfd90355fdc4574ac6a2494844f7f83972e0316779d6d1e79431d39010a2b9ede2bbb4452418ce7bc98438d2a5b4e4edea1d3495802eee10ba7ac6ce86411d882c594830b1b962e973643ece58702698fd950b518c27e4b66f131d", 0x9f}, {&(0x7f0000000a80)="d447eecb00b949e7fadd44b12da99b50adc2300aa7bbd44f1babc36508f89266d8dfcbf786ee6bfc15c73a374ba04cb323c1700a8c65e1ec9ae2c352faad756c277bef1539ff0ef7d66cb7ef", 0x4c}, {&(0x7f0000000b00)="9f9c7d63b2f8b043160d", 0xa}, {&(0x7f0000000b40)="bc9fb1685e6ccefff79136f5aff3b9bb07d88542c42d871058812a0daef00cf6d0c99e5f62574e40d1c997f2838e83e3fa7372e06a3c1f09b707c9f089db67a900fc36bd0c44e8f74430125e2981b371202d917c329453b9d5b891b5107a3b80f203af89b4f4d9f815b3892c845e7b7d838fe6954f642d29cf", 0x79}, {&(0x7f0000000bc0)="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", 0xfd}, {&(0x7f0000000cc0)="a45e8dc38556fc6a438c8a7238c72592", 0x10}], 0xa, &(0x7f0000000dc0)=[@rights={0x30, 0x1, 0x1, [r2, r1, r3, r1, r1, r1, r1, r0]}], 0x30, 0x8000}, 0x4040000) r4 = add_key$user(&(0x7f0000000440)='user\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)="77a781c026f404e5d8e6b3af2aaca146df2b764b8d4c8a493d14bff313b609be8bb678ab312782b7ccfd388a4ee0eae3c8cc1f76e6f31f973021566355daeb40a7e8b238a97a43f9c1626098d824c7d15d79f3a005d1524ae3a5c1d03d39aa518b", 0x61, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000540)={r4, 0x9, 0x7ff}, &(0x7f0000000e40)=ANY=[@ANYBLOB="656e18b69d5a11eb535bf6e6cca3e6633d6f61657020686c736867fd0b7ab53d736843235d2ae50bc7b57188d035314200000100000000000001c371beae2c4a3274068b0000000000183c0000000000000000000000000000fd00"], &(0x7f0000000600)="c22c97632515c9e34e617b8c56f287ccb50b1266c2f96c0239a8a4edd5fdf1d04ef82c3a7f61f82c9fb307bcf2d4ca1140d77b6bdd1dda48267cae6da8461d67c4eaa7a5ca41620dd9a555bc930e666b41d62b9ef80ca010ca69a651992209f6b25242480135d70d2452974fb102f582d78e63099d3d593f8f3e1cf3242f1635d5ab60a77bf9070751bd29a3ac40fbb352b7d324b73f3b61828f3d17972d3dfe6417a76eea9a90", &(0x7f00000006c0)=""/51) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9c6c68d68d3865e5ec068800", @ANYRES16=r5, @ANYBLOB="010000000000000000000c00000008040600f9ffffffb78c11c66a9e0a2c3f11489efe8daea2ffe1acc27e342ec65c9eb4781903ab9174d97691d5f8bab1c9aa65c52aa1b41e80b02e288f7c04c7e411c7e7e37e11326477831af7d0633f2ec4b2bd3443f1e359cd9324c8dd5ed8627137b01267082d9b41b8a6c4d22189da89c6c28bd8c8b57fdb57f5636eee729b1da30e9945053c3f7dbbd8cbd74008"], 0x1c}}, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000340)={0x3, 0xf, 0x1, "ad5c5d1d0bb51644d388d090693c190aeb469202ea84aae25608aa6098da6342", 0x32377359}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0xc) getpriority(0x0, r6) 03:33:33 executing program 1: 03:33:33 executing program 0: [ 608.204693] binder: 17257:17268 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 608.235459] binder: 17257:17268 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 608.378319] audit: type=1804 audit(2000000013.320:116): pid=17282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 03:33:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d2c706f72303030302c6e6f657874656e642c00000000000010000000009b00"/55]) 03:33:33 executing program 1: 03:33:33 executing program 0: 03:33:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x0, 0x70bd2a, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}}, 0x0) 03:33:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:33 executing program 0: [ 608.976790] 9pnet_virtio: no channels available for device 127.0.0.1 [ 608.987007] audit: type=1804 audit(2000000013.930:117): pid=17292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 03:33:33 executing program 1: 03:33:34 executing program 0: 03:33:34 executing program 1: 03:33:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) [ 609.026286] 9pnet_virtio: no channels available for device 127.0.0.1 03:33:34 executing program 1: [ 609.094464] binder: 17293:17303 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 609.132615] 9pnet: p9_fd_create_tcp (17306): problem connecting socket to 127.0.0.1 [ 609.140376] binder: 17293:17303 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:34 executing program 0: 03:33:34 executing program 1: 03:33:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030303030302c6e6f657874656e642c00a8be933b62501c258f43261a33990515691c81bc638962900f1cf454890a6ab88aa4f88ed95317583e01c0e4a141e99aeb6e7c869bf9c95a030aebf75a13a8fc9f84e53275a458f858908f1d51718b7c9f13872c710418580eb0b324d47e1ea49a94c9da72b2e50384c007a56c6ae4ac22531dbfe90f25cea8ef9f7b9edb3ca6967bdd229e12fa7c244027240c9222961dd8f343e0c6ea94385cbfc2d2ff19815408bad198462b3f3be628612d73e52ab1dd"]) 03:33:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000280)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller1\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000400)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e20, 0x3, 0x4e23, 0x0, 0xa, 0x80, 0x80, 0x3f, r3, r4}, {0x2, 0x3, 0x6, 0xe, 0x5, 0xfffffffffffffff9, 0xffffffffffff8000, 0x4}, {0x8, 0x1485, 0x5414, 0x7fffffff}, 0xfffffffffffff000, 0x6e6bb0, 0x2, 0x0, 0x1}, {{@in=@multicast1, 0x4d3, 0xff}, 0x2, @in=@remote, 0x3500, 0x3, 0x0, 0x80000000, 0x4, 0xffffffff}}, 0xe8) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c8836f7", @ANYRES16=r5, @ANYBLOB="010000000000000000000c00000008000600f9ffffff"], 0x3}}, 0x0) 03:33:34 executing program 0: 03:33:34 executing program 1: [ 609.865610] 9pnet: p9_fd_create_tcp (17322): problem connecting socket to 127.0.0.1 [ 609.882847] audit: type=1804 audit(2000000014.830:118): pid=17323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 03:33:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f0000000200)=@v1={0x2, "92a6afb03ce3bea275bd352bfe552f2c969a3d"}, 0x14, 0x1) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) 03:33:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x20000000000f) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}}, 0x0) 03:33:34 executing program 1: 03:33:34 executing program 0: [ 609.985851] binder: 17324:17334 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 610.016684] 9pnet: p9_fd_create_tcp (17338): problem connecting socket to 127.0.0.1 [ 610.023206] binder: 17324:17334 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 610.071702] 9pnet: p9_fd_create_tcp (17342): problem connecting socket to 127.0.0.1 03:33:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:35 executing program 0: 03:33:35 executing program 1: 03:33:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$key(0xf, 0x3, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) 03:33:35 executing program 0: 03:33:35 executing program 1: [ 610.719461] audit: type=1804 audit(2000000015.660:119): pid=17350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 [ 610.752893] 9pnet: p9_fd_create_tcp (17353): problem connecting socket to 127.0.0.1 03:33:35 executing program 1: 03:33:35 executing program 0: 03:33:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x0) [ 610.798470] binder: 17352:17359 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 610.807036] 9pnet: p9_fd_create_tcp (17360): problem connecting socket to 127.0.0.1 [ 610.829619] binder: 17352:17359 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:35 executing program 1: 03:33:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f0000000040)='./file0\x00', 0x28) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}]}}) [ 610.962267] 9pnet: p9_fd_create_tcp (17373): problem connecting socket to 127.0.0.1 [ 610.978820] 9pnet: p9_fd_create_tcp (17373): problem connecting socket to 127.0.0.1 03:33:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8000fffffffe) r6 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:36 executing program 0: 03:33:36 executing program 1: 03:33:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") creat(&(0x7f00000002c0)='./file0\x00', 0x2) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='tra\x00\x00\x00\x00\x00\x00\x00?ozt=0x0000000000000000,noextend,\x00']) 03:33:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', r2}) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000002f000000fed9f9ff"], 0x1c}}, 0x0) 03:33:36 executing program 0: 03:33:36 executing program 1: 03:33:36 executing program 2: 03:33:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8000fffffffe) r6 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 611.600599] 9pnet_virtio: no channels available for device 127.0.0.1 [ 611.613451] binder: 17386:17390 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:36 executing program 4: 03:33:36 executing program 1: 03:33:36 executing program 0: 03:33:36 executing program 2: 03:33:36 executing program 4: 03:33:36 executing program 1: [ 611.712423] binder: 17386:17390 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 611.731221] binder: 17386:17390 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:37 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) 03:33:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8000fffffffe) r6 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:37 executing program 0: 03:33:37 executing program 4: 03:33:37 executing program 1: 03:33:37 executing program 0: 03:33:37 executing program 4: 03:33:37 executing program 1: 03:33:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8000fffffffe) r6 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:37 executing program 2: 03:33:37 executing program 0: [ 612.477255] binder: 17423:17426 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 612.547064] audit: type=1804 audit(2000000017.490:120): pid=17436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 [ 612.581801] binder: 17423:17426 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 612.604399] binder: 17423:17426 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:38 executing program 4: 03:33:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8000fffffffe) r6 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:38 executing program 2: 03:33:38 executing program 1: 03:33:38 executing program 0: 03:33:38 executing program 2: 03:33:38 executing program 1: 03:33:38 executing program 2: 03:33:38 executing program 1: [ 613.311387] audit: type=1804 audit(2000000018.260:121): pid=17446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 03:33:38 executing program 0: 03:33:38 executing program 4: [ 613.398739] binder: 17450:17452 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 613.491223] binder: 17450:17463 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 613.498664] binder: 17450:17463 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000180)={0x1, 0x3, 0xffffffffffffffff}) 03:33:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8000fffffffe) r6 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000000)={0x10, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}}) 03:33:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x100801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r1 = dup2(r0, r0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$FUSE_POLL(r1, &(0x7f0000000080)={0x18}, 0x18) 03:33:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") close(r1) 03:33:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x60000, 0x0) ioctl$SIOCNRDECOBS(r2, 0x89e2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2680, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000d50104000000000100000000dcdf6c68a94a86be9084baa5b5db070000006800000100000000"], 0x2a) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff9}]}, 0x1c}}, 0x0) [ 614.185307] audit: type=1804 audit(2000000019.130:122): pid=17470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 03:33:39 executing program 4: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x800) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000002580)=""/4096, &(0x7f0000003580)=0x1000) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x48) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000440)={0xd17}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000280)) r2 = memfd_create(&(0x7f0000000000)='/dev/ptmx\x00', 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000480)=ANY=[], 0x2e7) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000035c0)="f7a188510934bf24b3ad8e8b02e07dd6993ddb9d570db34919a891b767de07ff4e774d1b71b5f651665c311d503c6eea96fd1d87cc047c3b5bc6cf6569fda90001fb955cedd2b37570301528148183568ea77d547695ad2c4df34492037fc59577af781a478b9903a3fd169863851e83599dfcb59cd2b5509205f58d9a220c25a42cd899ff3c1fd66575453aabcc8687427fa3eeaff43c4a60848efc47be11daf2e2") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x4) sendfile(r3, r3, &(0x7f00000001c0)=0x3, 0xa198) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xa30) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, 0x0, &(0x7f00000004c0)) getpeername$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000180)=0x6e) connect(r0, &(0x7f0000000080)=@ipx={0x4, 0x5, 0x5, "a92c49e93d95", 0x18}, 0x80) getpeername$unix(r3, &(0x7f0000000500), &(0x7f0000000400)=0x6e) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ftruncate(0xffffffffffffffff, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) [ 614.327862] audit: type=1804 audit(2000000019.240:123): pid=17483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir445493227/syzkaller.Ie9b55/428/bus" dev="sda1" ino=16876 res=1 03:33:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ftruncate(0xffffffffffffffff, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:39 executing program 2: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x800) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000002580)=""/4096, &(0x7f0000003580)=0x1000) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x48) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000440)={0xd17}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000280)) r2 = memfd_create(&(0x7f0000000000)='/dev/ptmx\x00', 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000480)=ANY=[], 0x2e7) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000035c0)="f7a188510934bf24b3ad8e8b02e07dd6993ddb9d570db34919a891b767de07ff4e774d1b71b5f651665c311d503c6eea96fd1d87cc047c3b5bc6cf6569fda90001fb955cedd2b37570301528148183568ea77d547695ad2c4df34492037fc59577af781a478b9903a3fd169863851e83599dfcb59cd2b5509205f58d9a220c25a42cd899ff3c1fd66575453aabcc8687427fa3eeaff43c4a60848efc47be11daf2e2") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x4) sendfile(r3, r3, &(0x7f00000001c0)=0x3, 0xa198) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xa30) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, 0x0, &(0x7f00000004c0)) getpeername$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000180)=0x6e) connect(r0, &(0x7f0000000080)=@ipx={0x4, 0x5, 0x5, "a92c49e93d95", 0x18}, 0x80) getpeername$unix(r3, &(0x7f0000000500), &(0x7f0000000400)=0x6e) r4 = timerfd_create(0x0, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r4, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:39 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x91f, 0x880) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 614.378546] audit: type=1804 audit(2000000019.270:124): pid=17493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ftruncate(0xffffffffffffffff, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1 (fault-call:3 fault-nth:0): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 614.505591] audit: type=1804 audit(2000000000.000:125): pid=17498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x2000, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @rand_addr=0x7}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e24, @rand_addr=0x7}, 0x21, 0x0, 0x0, 0x0, 0x400, &(0x7f0000000340)='caif0\x00', 0x7f, 0x1, 0x9}) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7fffffff, 0x40) getsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0x4) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000180)={@local}, &(0x7f00000001c0)=0x14) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) clock_settime(0xffffdffffffffffc, &(0x7f0000000040)={0x77359400}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl(r1, 0x40, &(0x7f0000000480)="13e30dacc54de80f418291e59d3ecee23f") timerfd_settime(r0, 0x3, &(0x7f0000000000)={{r4, r5+10000000}, {0x77359400}}, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000002c0)=0x100000000, 0x4) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000140)={0x0, 0x3f, 0x4, 0x8, 0x1, 0x4}) [ 614.563682] binder: 17508:17510 Acquire 1 refcount change on invalid ref 0 ret -22 [ 614.584525] audit: type=1804 audit(2000000000.020:126): pid=17511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/syzcgroup/unified/syz5/bus" dev="sda1" ino=16752 res=1 03:33:20 executing program 1: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_settime(0x6, &(0x7f0000000280)={r0, r1+10000000}) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0x4) r4 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x2, 0x0, 0xe7}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000180)={r5, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}}}, 0x84) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 614.644423] binder: 17508:17510 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 614.719267] binder: 17508:17516 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 614.728520] binder: 17508:17516 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0x7ff}, 0x28, 0x2) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 4: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x800) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000002580)=""/4096, &(0x7f0000003580)=0x1000) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x48) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000440)={0xd17}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000280)) r2 = memfd_create(&(0x7f0000000000)='/dev/ptmx\x00', 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000480)=ANY=[], 0x2e7) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000035c0)="f7a188510934bf24b3ad8e8b02e07dd6993ddb9d570db34919a891b767de07ff4e774d1b71b5f651665c311d503c6eea96fd1d87cc047c3b5bc6cf6569fda90001fb955cedd2b37570301528148183568ea77d547695ad2c4df34492037fc59577af781a478b9903a3fd169863851e83599dfcb59cd2b5509205f58d9a220c25a42cd899ff3c1fd66575453aabcc8687427fa3eeaff43c4a60848efc47be11daf2e2") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x4) sendfile(r3, r3, &(0x7f00000001c0)=0x3, 0xa198) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xa30) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, 0x0, &(0x7f00000004c0)) getpeername$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000180)=0x6e) connect(r0, &(0x7f0000000080)=@ipx={0x4, 0x5, 0x5, "a92c49e93d95", 0x18}, 0x80) getpeername$unix(r3, &(0x7f0000000500), &(0x7f0000000400)=0x6e) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x532, 0x101000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x1}) r2 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='1', 0x1, 0xfffffffffffffff8) keyctl$read(0xb, r2, &(0x7f00000001c0)=""/9, 0x9) [ 615.063022] audit: type=1804 audit(2000000000.000:127): pid=17528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/530/bus" dev="sda1" ino=16611 res=1 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x800) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000002580)=""/4096, &(0x7f0000003580)=0x1000) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x48) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000440)={0xd17}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000280)) r2 = memfd_create(&(0x7f0000000000)='/dev/ptmx\x00', 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000480)=ANY=[], 0x2e7) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000035c0)="f7a188510934bf24b3ad8e8b02e07dd6993ddb9d570db34919a891b767de07ff4e774d1b71b5f651665c311d503c6eea96fd1d87cc047c3b5bc6cf6569fda90001fb955cedd2b37570301528148183568ea77d547695ad2c4df34492037fc59577af781a478b9903a3fd169863851e83599dfcb59cd2b5509205f58d9a220c25a42cd899ff3c1fd66575453aabcc8687427fa3eeaff43c4a60848efc47be11daf2e2") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x4) sendfile(r3, r3, &(0x7f00000001c0)=0x3, 0xa198) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xa30) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, 0x0, &(0x7f00000004c0)) getpeername$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000180)=0x6e) connect(r0, &(0x7f0000000080)=@ipx={0x4, 0x5, 0x5, "a92c49e93d95", 0x18}, 0x80) getpeername$unix(r3, &(0x7f0000000500), &(0x7f0000000400)=0x6e) r4 = timerfd_create(0x0, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r4, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 615.211494] audit: type=1804 audit(2000000000.030:128): pid=17540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/531/bus" dev="sda1" ino=16592 res=1 03:33:22 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x91f, 0x880) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:22 executing program 1: r0 = timerfd_create(0xd, 0xfffffffffffffffe) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000080)=@isdn, &(0x7f0000000100)=0x80, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb8, r2, 0xb01, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x25a90fab}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1be5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:22 executing program 4: r0 = timerfd_create(0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0x7ff}, 0x28, 0x2) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:22 executing program 2 (fault-call:5 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) [ 617.462573] binder: 17549:17552 Acquire 1 refcount change on invalid ref 0 ret -22 [ 617.484964] audit: type=1804 audit(2000000000.000:129): pid=17555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/532/bus" dev="sda1" ino=16727 res=1 03:33:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000001c0)={0x0, 0x2710}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x401, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000080)={0x17, 0x0, 0x7fffffff}) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000100)=0x6, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000019, &(0x7f0000000040)=0x80, 0x4) sendto$inet(r0, &(0x7f0000000100), 0xfffffffffffffce1, 0x11, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f0000000200)="0e9bd17b89e9ba201f351f55e38713c44e247c75e43519198b42c262d536588adcb085c9b9d745bfdba20e1a2b72dca9b283170a9d99dcb196ad9c5f08c34dc324a9ed506f0b376f30525a9cf18be4dc55b394e9e4af3914b9841eacb399733a7b0d29f612d5a1e3ba638dbc21e963ef7503f9d118f9fcc8149bfdc17b2028274284e4e88d38119ef16b264b7d1f4a232b33e7fa42e656c0394e40c9a1d16e59f5c6a292877a81f15434f8adebec06dd0e049457e67eb473599a54fb35f696a0237c8b25e958f93f6a2bf780a67543a215617018b384c2615746b15a97cdb333b117b0d1edda61ef"}, 0x10) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000100)={r2, 0x0, 0x4, 0x5, 0x2}) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f00000000c0)) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 617.499224] binder: 17549:17552 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 617.588786] binder: 17549:17570 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 617.610706] audit: type=1804 audit(2000000000.120:130): pid=17575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/533/bus" dev="sda1" ino=16600 res=1 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$TIOCSCTTY(r1, 0x540e, 0x1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x4) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) setsockopt$inet6_dccp_buf(r0, 0x21, 0x8e, &(0x7f00000001c0)="200d8de8590bb8fb8520b2d09e2759b937f9ebe08a27b13895395b9c0014fdc80883e53a67265040e2c02b26f7a57f6aa64bad43e225779b008e873aa790cad3896a411132489fd0af65b4b0c227c226081c8269ffa6c601ddfaebd5d82edf3db9029c0d024df176abab46ec77a6dc47e092eeeeb4ad126f1f99607ad3b8d3e343e9984be1c2d611c5c4ce7440ec9376b0f2a70d8bf1b286f393c0fb62ca49a9422d80438bd4645a89f6872aeeaf757981fc1efa4c5db4babccd73d7b248", 0xbe) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x400, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0x0, 0x7fff, 0x9d, [], &(0x7f0000000140)=0x1}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x3ff}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="cb000000071caca73dd985e695f422ad53f06fc83e8a9a4712035dbcd8f65161a5c82b00c36aa60f41a69c3c5fe69d4d1fed726801fd39f262e8ec38d0417946be86e25ef7015066b9cb3f75c52234a9186b50440dc50d642293d7f23d796e14e8734b82693573613aaaa44ec34f8924c875a0c47e6417877c45be7f01ee1e3eccad7c7df2dce03e1267a2d9e8c35c6ce4ecf1f237c369dd01eb9ad632dd81db90de5e38d5c6c22d47f28f9949be18e22d830d603a8f5d5ea811185dd1b921b9b82e2915ff"], &(0x7f0000000400)=0xd3) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x18002, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f0000000440)=""/144, 0x90) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x6) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r4 = dup(r0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000000)=0xfff, 0x2) [ 617.627566] binder: 17549:17570 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 617.638510] Unknown ioctl 19461 [ 617.655055] Unknown ioctl 19461 03:33:22 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790900000000000000efffff7f0000010000000000000000000e9affffff00000048030000f902000000000000280113d62f01"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001900000000"], 0x1}}, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f0000000600)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x91f, 0x880) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:22 executing program 1: r0 = timerfd_create(0x20000, 0x800) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:22 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4286fa92, 0x300) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x100, 0x0, 0x20, 0x4, 0xcbef}) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x800, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) sendmsg$unix(r2, &(0x7f0000000400)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000003c0)=[@rights={0x18, 0x1, 0x1, [r2, r2]}], 0x18}, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f00000000c0)=0x20) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x402440, 0x0) 03:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x200202, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) [ 620.506892] audit: type=1804 audit(2000000002.810:131): pid=17595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/534/bus" dev="sda1" ino=16576 res=1 [ 620.515278] binder: 17596:17599 Acquire 1 refcount change on invalid ref 0 ret -22 [ 620.547542] Unknown ioctl -2147202744 03:33:20 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7fffffff, 0x2) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) fcntl$addseals(r0, 0x409, 0x8) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) clock_nanosleep(0x7, 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)) [ 620.564739] binder: 17596:17604 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 620.583530] Unknown ioctl -2147202744 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dmmidi(&(0x7f00000004c0)='/dev/dmmidi#\x00', 0x0, 0x60000) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000500)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000440)={0x1, 0xdcfff05f95902ce, 0x4, 0x2100000, {0x0, 0x7530}, {0x5, 0x3, 0x0, 0x800, 0x8000, 0xffff}, 0x100000000, 0x21, @planes=&(0x7f0000000400)={0x38, 0x8, @mem_offset=0x3, 0x3}, 0x4}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000540)={0x5, 0x80, 0x4, 0x8}, 0x6) r6 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x3, 0x200001) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, [], @raw_data=[0x9, 0x20, 0x1, 0x1, 0x3, 0xdca, 0x7fff, 0x7fffffff, 0xa1, 0xfffffffc00000000, 0xf, 0xff, 0x8001, 0x2, 0x5, 0x4, 0x400, 0x6, 0x3, 0x7fffffff, 0x7, 0x6, 0x1ff, 0xfffffffffffffffe, 0xae01, 0x9, 0x31, 0x6, 0x4, 0x100000001, 0x1, 0x100000000]}) fchown(r3, r4, r5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) r8 = getpgid(0xffffffffffffffff) tgkill(r7, r8, 0x3e) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0xfffffffffffffffc}) sendmsg$nl_route(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@getrule={0x14, 0x22, 0x300, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) 03:33:20 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000004a000700f677b8ed8641a1c10aab80ff02", 0x15) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r1, 0x1, 0x6, [0x3, 0x1, 0xc, 0x0, 0x200, 0x7]}, &(0x7f0000000140)=0x14) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 03:33:20 executing program 1: r0 = gettid() move_pages(r0, 0x3, &(0x7f0000000080)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f00000000c0)=[0x3ff, 0xab69, 0x6, 0x7], &(0x7f0000000100)=[0x0, 0x0], 0x2) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x1, &(0x7f000000b000)={{0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r2 = syz_open_dev$media(&(0x7f0000001580)='/dev/media#\x00', 0x4, 0x4200) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) [ 620.653889] audit: type=1804 audit(2000000000.020:132): pid=17613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/535/bus" dev="sda1" ino=16591 res=1 [ 620.668266] binder: 17596:17604 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x7, {{0x9, 0x8, 0x0, r2}}}, 0x28) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r3, 0x8}, &(0x7f0000000200)=0x8) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x8000000000000103}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) [ 620.708314] binder: 17596:17599 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x5, 0x1}, 0x2c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r2}}, 0xc) 03:33:22 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x4) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:22 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:22 executing program 1: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x2, 0x10800) clock_gettime(0x800000000000000, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100)={r2, r3/1000+10000}, 0x10) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ppoll(&(0x7f0000000100)=[{r0, 0x8000}, {r1, 0x900c}, {r0, 0x1008}, {r1, 0x8000}, {r0, 0x4020}, {r1, 0x88}, {r0}, {r0, 0x4}, {r2, 0x40}], 0x9, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0xfffffffffffffffc}, 0x8) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x800, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) 03:33:20 executing program 1: r0 = epoll_create(0x9) r1 = timerfd_create(0x7, 0x80000) timerfd_settime(r1, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x800, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) clock_gettime(0x0, &(0x7f00000001c0)) clock_settime(0x41, &(0x7f0000000180)={0x0, 0x1c9c380}) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r3 = dup3(r0, r1, 0x80000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000000c0)=r4) [ 623.600385] audit: type=1804 audit(2000000000.000:133): pid=17637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/536/bus" dev="sda1" ino=16759 res=1 03:33:20 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x80, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000080)) ioctl$int_in(r0, 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0xffffffffffffffff}) 03:33:20 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x0, 0x80010, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) [ 623.736302] audit: type=1804 audit(2000000000.040:134): pid=17640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/504/bus" dev="sda1" ino=16760 res=1 03:33:20 executing program 1: r0 = timerfd_create(0x2, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) clock_settime(0x0, &(0x7f00000000c0)) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(r0, &(0x7f0000000000)=""/23, 0x17) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x6, 0x8, 0x6, 0x0, 0xff, 0x800, 0x1, 0x2, 0x8, 0xfffffffffffffff7, 0x7fff, 0x4, 0x7, 0x0, 0x2, 0x6, 0x8, 0x101, 0x101, 0xa64, 0x4, 0x280000, 0x4, 0x200, 0x1efc, 0x373f, 0x101, 0x4, 0x80000001, 0x7, 0x2bea, 0x1ab, 0x9, 0x9, 0x16, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x2000, 0x1, 0xc5, 0xf, 0x1, 0x1, 0x9a5}, r1, 0x8, r0, 0xb) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000280)={0x0, 0xb, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e1663bf2"}, 0x0, 0x0, @planes=0x0, 0x4}) 03:33:20 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) vmsplice(r0, &(0x7f0000001200)=[{&(0x7f00000000c0)="8d0d6c971b672de2379e830b08359a1ee4159f7b251520881d6b0d6cf20316409a272a9e0547037fe6d3cc29caef51bf16baa14332a76fb4f69d42ec821368bb4a4842a9", 0x44}, {&(0x7f0000000140)="ad236877d31573f3e8ea6cd878780e371bc88e056192685814323a1de6db787a3210cc690294cd441991eba274055dcff830e000e840c1a13bbd1775f13a94c809afbbe757c68aa928cd5f08f2287efa6bf61a6f737289b12b0d7b9714bd6dada8ce1f9d60685c0e1d20218c9804da8f4c7fb738e0a39d417f9ff9e5a143693d23e963e903254a2823cee45bc2f479147ee0546c2df070b7b501dcf23ba50e70d6e2804fbccd0e2fe85a59a25a0922", 0xaf}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000000040)="5efaae8979e660bcd02fe1a0e71f02e063cc78e0a4d2606a9d40068ef8b9a944bf31094e722a15ce137f67f4b62ba2927e688d9f681fd83615fbebc30bdc", 0x3e}], 0x4, 0x3) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x22}, @multicast1}, 0x8) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 0: r0 = memfd_create(&(0x7f0000000180)='eth0\'cgroup#vboxnet0system\x00', 0x0) write(r0, &(0x7f00000000c0)="6963e64243ea486d0100008000000000b965", 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000000002, 0x9499f8624174e97a, r0, 0x0) sigaltstack(&(0x7f0000000000/0x1000)=nil, 0x0) sigaltstack(&(0x7f0000000000/0x3000)=nil, &(0x7f0000000000)) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8, 0x8000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0xc28, 0x4, 0x2000}, 0x4) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x20000, 0x0) sendfile(r0, r1, 0x0, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f00000000c0)=0x2, 0x4) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x200000) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000000c0)={0x0, 0x0, @ioapic={0x3000, 0x4, 0x5, 0x5, 0x0, [{0xe7ab, 0x7fffffff, 0x8000, [], 0x5}, {0x1, 0x4, 0x99, [], 0x4}, {0x3, 0x80000001, 0x0, [], 0x7}, {0x1, 0x2, 0x3ff}, {0x100000001, 0x3, 0x5, [], 0x1}, {0x7c, 0x5, 0x2}, {0x7, 0x200, 0xfff, [], 0x9}, {0x7fff, 0x10000, 0xce1e, [], 0x1}, {0x8, 0x9, 0x0, [], 0x5}, {0x8, 0x8, 0xfffffffffffffffb, [], 0x2}, {0x3, 0xcbab, 0x100000000, [], 0x101}, {0x1, 0x20, 0x4, [], 0x3}, {0x0, 0x11, 0x7f}, {0x10000, 0xfff, 0x40}, {0x3, 0x4, 0x9, [], 0x10001}, {0x7, 0xfffffffffffffffc, 0xffffffffffffff81, [], 0x80000001}, {0x1, 0x3, 0x9, [], 0xe000000000000000}, {0x800, 0xfffffffffffffffd, 0xfff, [], 0x2}, {0x7, 0xad1, 0x4, [], 0x1f}, {0x22, 0xe4d800, 0x6}, {0x8, 0x1e, 0x100000000, [], 0x2}, {0xfbe9, 0x8, 0x1a, [], 0x100000001}, {0xae, 0x7, 0x5, [], 0x4}, {0xe1e, 0x8, 0x5, [], 0x56a}]}}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) [ 623.971686] audit: type=1804 audit(2000000000.210:135): pid=17664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/537/bus" dev="sda1" ino=16600 res=1 03:33:20 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x100006, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8001) kexec_load(0x200, 0x4, &(0x7f0000000340)=[{&(0x7f0000000000)="49733e6e10cdc80146bd", 0xa, 0x10001, 0x3}, {&(0x7f0000000140)="870d576730e09ab64f2148365a78e3360da5c7ff3a6908c3c5cf3da2d9ef070ffcd6e6a043e75912ccd373a33b16490d7580df89bfbb08d3b80e055db0304ea7482fa3e836dcfad0d84e1a41d6cc53e51b114f6a856eeee78d9d6e51964964c3e697cc0ad6a3c5745041ee529b7147ed97e466e4826159f7a43d5e3a084abfc800ccfe994db1c8c2dce9db37e40aa363de6a8b24f9b2e60c2c633974df2d41a365a71b8801a853ea9d64dc70af90bf548e2dac99eef7ce046f31576c6649a16895abd3af4eaf5cde014df2c95a62225f4c37a8907877e409a05fa65f3c12fe456c4020938d1731", 0xe7, 0x5, 0x4}, {&(0x7f0000000240)="540eb1d8d85b5f9fa57a18429bbf1ab17cc247e5ca3db5678759ecdeb435c225d682cb0f8c54bf7f8f235341746a7f8e1ea6b928adf027938168fce9d35bae1508ba91946295a64546f6b7d4e4b91d09179e5f6b0bf2bc80c34654199d3c254339cc93349d8c9325298cab4124b3022e4fe27f580058b51fadbf20c7f1541a2f0bf6126a4aff9f5b1ae6322e211b7fee3e9ad53425050b6aab5b5b5135d96b1ceaf4dfb4c70fd0ca4dbfefef8842623504d14ee56eee68c46c67b24d7a217ac24bfb392937a7c296a243e4dddfd53e20972beeeb25c8", 0xd6, 0x6, 0x7fffffff}, {&(0x7f0000000040)="42d39d9a994abc04798a1a5d878070e6b5da8aa4d17701496870341dac58d804c4f0adf9893f67be4d0b550d059361aa5b3d41ffc89d8492289efd91aa1b6b7da61b204713ab7b282e70d3f97c8c82639c3d81daa1664fd33954b927ad3540504dccb194134be5386d9562f6c44dcb57b4cc6ddf1a84b506849ce600db578f0f164d2c4e17236a96a20124497cab6aad2debecaddc5c83048f773258c92d8a4b881bc527f3c186ae27d6ee2b01cf4f", 0xaf, 0x2, 0x10000}], 0x360000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x440000000002011, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x8000, 0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=[{0x5, 0x47d7c795, 0x0, 0x9}, {0x3, 0x4, 0x3d, 0x1}, {0x3, 0x2, 0x4c, 0x7fff}, {0x1, 0x8001, 0x4, 0x76f}]}) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x202000) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0xcf4f, 0x20, 0x0, 0x2, 0x101, 0x80000000}, 0x2}, 0xa) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000140)={[], 0x8, 0x2, 0x30e3, 0x0, 0x8000, 0x13000, 0x0, [], 0x401}) r3 = msgget(0x2, 0x0) msgsnd(r3, &(0x7f0000000100)={0x0, "0cff8bebfe0d9485973f1292ce9fa45381ff54d48bc6fda554e7fd91ac7c200d84572ebc158eb2520f3209010520"}, 0x36, 0x800) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) r1 = shmget(0x1, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000000c0)=""/227) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 624.188415] audit: type=1400 audit(2000000000.230:136): avc: denied { map } for pid=17666 comm="syz-executor.2" path="socket:[60139]" dev="sockfs" ino=60139 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1 03:33:20 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x624, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1120, 0x0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) r4 = dup2(r3, r3) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0xfffffc34) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x77359400}, {0x0, 0x9}}, 0x0) write$selinux_create(r4, &(0x7f0000000080)=@objname={'system_u:object_r:cpu_online_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x20, './file0\x00'}, 0x4f) r5 = gettid() recvfrom$inet(r0, &(0x7f0000000100)=""/3, 0x3, 0x1, 0x0, 0x0) tkill(r5, 0x14) read$FUSE(r4, &(0x7f00000003c0), 0x1000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000140)={{&(0x7f000000f000/0x3000)=nil, 0x3000}}) r2 = getpgid(0x0) fcntl$lock(r0, 0x27, &(0x7f0000000040)={0x2, 0x1, 0x1f, 0xffff, r2}) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) [ 624.241964] audit: type=1804 audit(2000000000.240:137): pid=17665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/505/bus" dev="sda1" ino=16611 res=1 03:33:20 executing program 1: r0 = timerfd_create(0x3, 0x803) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1002008912, &(0x7f0000000040)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) r5 = fcntl$getown(r0, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000019c0)={0x0, 0x0}, &(0x7f0000001a00)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002040)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000001f40)=0xe8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000021c0)=0x0) fstat(r0, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002280)=0x0, &(0x7f00000022c0), &(0x7f0000002300)) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000002340)='/selinux/validatetrans\x00', 0x1, 0x0) sendmsg$netlink(r2, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000280)={0x1664, 0x39, 0x400, 0x70bd29, 0x25dfdbfd, "", [@nested={0x11d0, 0x8b, [@typed={0x4, 0x54}, @generic="5be34e9b0bf1eabaa5ee905b78cc9900e4f0453b1761a92296865f401188e9ee12d7b513b2d84d8b587c0c2da6eb62385fcbc419d81619c535ab4aeffd74c0f029af98bfa25abe6189e089a2b12beafda7b59865f73848c0b31c0fa77e743c99734ca0389b104f3f94baaa53892d25ac217126d673d1d3404343ac8cbbbfea3bafbd7d948f6672e74bc35501d02d99b5992959d41054891963c4433f10d78d5e8bbc633988547032", @typed={0x8, 0x100000000, @uid=r3}, @typed={0xc, 0x38, @u64=0x6}, @typed={0x8, 0x66, @ipv4=@rand_addr=0x100000000}, @typed={0x1004, 0x6e, @binary="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"}, @typed={0x18, 0x8f, @str='posix_acl_access\x00'}, @generic="ddfc3127c006732cc347449b385b7945a18b8a51faf9231a22e7dc3ed7c2b0f4509db8fcc7a40cb89f833f5acdddf304e009416c10105f13b99f36dd1270b0492225f54b2447b55e21d959a7ffb71ec10f87601f6ada57bf11a9b269529cc2861031143004d89ca3eb04ba24f35476f38f057b1881d7de3544ae453bc20afe62188f4b7240fb4219302f7e0b2149d89f8d94b890e1c7b1b94e7628b155654c4b46bc651d5ebd084f230a781240836bd57c3da3820f22ccdb65c99ad2da2b852fb962d9d0af0f78d32fb854db1df97638b58a9825cabbf2c6fba4fd1709c88c94ae9d648135"]}, @typed={0x8, 0xf, @uid=r4}, @nested={0x20, 0x2a, [@typed={0x14, 0x8a, @ipv6=@local}, @typed={0x8, 0xe, @ipv4=@local}]}, @nested={0x250, 0x1f, [@typed={0x84, 0x8c, @binary="0308778307bd15f5d79886125966bc4efbac19c3b5fbb80f8a76b804f5764e6b32d1f86df4d4fc1620ca10a3586dac3851fe85e1c24a4f096eccb3b6e46151bf2a0dea1b7b0b356bf45a3cf32c49df797c97b1495591a6d539e7392ddd7c0fce0a95caa8673f9a3c870a65f2d13b798059451a04b6dbad6047ba30994b3a1f7b"}, @generic="918595790e783fb30c1adf82313b400628aaeb4980f6306353b19f3644c52212536b06e28c593e24c9cb9583225f5970d3f9b224f04827e14225ccd91230549fdac91fdc107a270d1da78f4b67d953a61eeb0a0add0fcd5c61ca4fbac0124a274bbedacd540fe95af8bf856a88b4e288bbfd15933e3e2d15c58af6a757866c1aa18c5093fadffae0f2f9b1e2d8da83637c414ce64f1d782806268c85e745034961a893f7ea374a7c2c31b9bd92076b2c72b2965f86681ac433be7a", @typed={0xc, 0x7d, @str='+ppp1\x00'}, @generic="eade1f5b1476d8056b9c06e6e915568f07619278b79b215d2fee8bff556875094ce96a76c6fb5cf2e4bcb2e2e42ceaace1dd8bc70cc2914c92cc3c373fda9ff04d3284159bf427fa1691415f8ec86dfe4b058bc27b94f3372ba56de1cfb550e76beaf2f89b9b1d3b05d682190bacd3b5bebd1e3f6f8a0ea6e4ea9248d6522570d70baf465d80938a49d9f90c59e639b37e2c4ea46de3aebfdcd435fa080f9c30449e847465657adaa54cbfbb2a689fbdaa1450acb3f7bf7443d558df60330acbfdbe59c186ddc5128583e46cf12c39399a91efd0e410d1ae5e469e6fe1585b6f8661e44e8048758db785c03d055e8aeac096de32e876c4da", @typed={0x8, 0x94, @pid=r5}]}, @nested={0xfc, 0x46, [@generic="ec0f5e17c503c334e4c27052bd5c4b884112d9622564da6a883a6e7641bd668de6c66d953d2a5f1b352b6f8da328dbd17b8e4402772e8df76ae78a0cc83db980904f64ed43db20d90a5f1e48a1963297b4", @generic="09217db0d94a1a90d3298d3523a5822dd711fc9a65f1eeba7598cca0b6443e403025b1c4d34ae0025ca12955d6bf469664b87b3e952640dc28179725641311138d746c3fce31ae83afa56700bfa49ea370e142dd8ac11091a3c6749cfb1fa1b769a132f2", @typed={0x14, 0x3d, @ipv6=@ipv4={[], [], @local}}, @generic="d3ca7fe058869cf9aef4de2d0f29955930f4a383ba453cb1a38f31d085770b2bc6b94112a5bdab717027a3d9a01df7"]}, @nested={0x108, 0x6c, [@typed={0x70, 0x7d, @binary="fc0dbd3e83846f6437653e5189aa7ae70bd1fb515435bf8c8f0694df216d72f466e129d81cecf5018aa054b87fe9925eeca563b510e3d8b1000572fa141d1162d2692c2452305996bb00f429c4362f9a6780da194eceb912ac1af00876e526e39703fa49f08892158a3fe0ba"}, @typed={0x8, 0x5c, @fd=r0}, @generic="8b63c4981386713c1e7cd0d6d8d8c44643ab93724568eb922c189b3fb6806f44218fb59d9976a840021dfaaa74268aedefb13f80cdafe336feaaa2048c49b1788417025fb5550d3bb6658b4eac29386c150c7efe0ca62a09dd5cb3ba0244239d68cc24e7", @typed={0x14, 0x47, @ipv6=@loopback}, @typed={0x14, 0x12, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @typed={0x8, 0x48, @ipv4=@loopback}]}, 0x1664}, {&(0x7f0000001900)={0xbc, 0x25, 0xc20, 0x70bd29, 0x25dfdbff, "", [@generic="4d4314c6d1e480f85cb4fdbf5bc093b1cf958b56e444b21bf93afb0ec4c534e00ca4c767ccfefeb6a3dec40561763e40b8ad8004b75da9f89fec24dd26a28fe09275d17fcb73ff20945ad9c060d7d74effaac76940d52b53f49f75f4200e201d76054e3a0a60ce73edd0605140f2cd6de0bd19b4f89d51a2cadb13db9b8347a9440048d7fd1f1e6ca94670c303dd63a8a0278185222453e0a0f9f5667b84ed43e9e334b1fb764ccef804bb"]}, 0xbc}, {&(0x7f0000001a40)={0x4c8, 0x17, 0x0, 0x70bd26, 0x25dfdbfe, "", [@typed={0x14, 0x48, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0x8, 0x30, @ipv4=@loopback}, @generic="dff331cf753b2c34f04c708d2af73b1672832dec135dde278588a4b3a967ed61ce7bd3ba20f2979ec10a0171a830cbe8368a6fb383b3cc57526701a35b0c1fb353bf33913facffdc6ab2b09b0288e6e5a3771eecd18e61d7910371e875325b611c709909b0a038e5f3877584b1dd4dcdd8d9a0ff80e92968894099022b0403e6d11d7b77494e2871314556fc85a3714c6328e1b143792ecceb0a4bb62d29693c59555ff0514ee3450104ad40bab38b707832df083b7b4aa965b36c3f320b0ab6f01bf45f9d1687d911670b8b2d939ddfe24c84fa77abe82395af91c412b56b690a302447b7bad2", @typed={0x8, 0x40, @uid=r6}, @nested={0x3ac, 0x63, [@typed={0x8, 0x85, @u32=0x3}, @generic="08e25038b3ee5916b834d498ca2c857110b1c5aa4c6daae36d4b7e0bcba59818ec5686fd16ae31f7db0799fb841d3968b0db44bf36ee7263ce41e640b5f6213feaa91d6cf47141ae29241c3c0367f5229a047067c1ff70273247cf", @typed={0x8, 0x46, @u32=0x5}, @generic="9d6e65f6e3c49c4561c43ba8c6f039e4f376e5e344474dde1510095c5efbe1b10411a9e669a022276cd82f29dccfb94acfcf27debbc44d03da5cdd6ea1918ada6f23fa494811a69d9d0428605f412c272cf56a2f6afde4fac7e1c85ccb20600ac0a06538f214fc8bed71c36d6095fd14ae0a79fb45d7d83f9b68a7d7211c6a527782e8b655f63f5761f9cbaa34f811ad9ae0c0109978167dffef33a759d436c40e95e105ff80e48d850f157c5508a2c5069174fc23721d5f25f403718b27ab3ac7d8ec96a0fc16db741f3e1f62e26221cdd86d8a929fc45d5bba525bfacb29c634e7c6967a16de0eb964ff6ba5653b8ebf3053097f782bf6ef65b31a8e20", @generic="821aa5527334e33b431a2c65aa5ba7880d21e8aab01ceead626897b4e6a48da3270725904424b791c5ab0ce544e1852922fd7a74ca78b32addc1a55b3831d5ba68d9d87ff4aa418a50e08f4bee5f63b310227a33727930de370654656328fe45a86db37e926f163f1ede4d003d6cc333a252a9b121e0e8953928f097c9d2566a0dfb", @generic="1dda4348a9618bad8ce384578a2432a09fa40acd38feb53eae01c88f405e26205227e40b7b613af6b4", @typed={0x40, 0x28, @binary="17d32832c071acf62ad92cb7f5643f973a13427835ff06a0f80cbe8217bd15b2b8d7b243cc9360ad2b76705341a6b0d4ad94c37f492d9cf4d542cf78"}, @typed={0x104, 0x12, @binary="06bb45a264ba452377639a4921650c2b74431b9a06fbd8704a916d3bf534ffa6e0c5c275d1c3ef6f52dd1fc536d89b275983c466f1cfadb01829d274d5300280e4ec1f44977ee53139b29b04f4ec2b3fe03540c7b46ea025ebe90e86bf01bcedfcd11807063fd0b7dbf419e0cd449e471c742a8cb2facb718426497b3c49e2ef70d5dc88bb4ad3484dc1c46204c05014a12692ecb78f982cf83721b64af31587fc067fa1d335d83e3da8332d9840e165dbf733beab5b0b1b1909ac6847819b0174ba76ca826cad7391ebff8433be30d41fb76f261e039035ffa73e11355ee387768889af61b4c16f1f0e7d620cab54792d416e3b0fe869bea5a00855ee"}, @generic="3b32d5da424f5d58d4a0138fd0", @generic="03972f41c5d6d7a5496c670bd4481146f24c30b13a0311b4e469cf8d9ed8972073b8334c0771874ccb0d307ac00101615c404a5be007adbb697d283e193a6c90"]}]}, 0x4c8}, {&(0x7f0000002140)={0x5c, 0x31, 0x300, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0xd, @uid=r7}, @typed={0x30, 0x5e, @binary="8269be3df226cf09ff6b6bab39d9b74917b0023952793b0c29f9d545af091c75ae8792fb69dfab8465e6"}, @typed={0x14, 0x21, @ipv6=@remote}]}, 0x5c}], 0x4, &(0x7f0000002380)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x20, 0x1, 0x1, [r0, r1, r0]}, @rights={0x30, 0x1, 0x1, [r1, r1, r11, r1, r0, r12, r0, r0]}], 0x70, 0x8000}, 0x4000001) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) [ 624.366270] audit: type=1804 audit(2000000000.070:138): pid=17686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/538/bus" dev="sda1" ino=16574 res=1 03:33:20 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) [ 624.428083] audit: type=1804 audit(2000000000.110:139): pid=17693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/506/bus" dev="sda1" ino=16591 res=1 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x103000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x7f}, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000080)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000000c0)) [ 624.583817] audit: type=1804 audit(2000000000.060:140): pid=17708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/539/bus" dev="sda1" ino=16585 res=1 [ 624.637411] audit: type=1804 audit(2000000000.110:141): pid=17716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/507/bus" dev="sda1" ino=16599 res=1 [ 624.683878] audit: type=1400 audit(2000000000.110:142): avc: denied { map } for pid=17711 comm="syz-executor.0" path="/dev/ashmem" dev="devtmpfs" ino=772 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 03:33:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") clock_adjtime(0xffc99a3b, &(0x7f0000000c80)) 03:33:22 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) sendto(r0, &(0x7f00000000c0)="f4fa0a2f9e55318319d4ab563fb97cf8e0de9438734b85b7a4e20934213fbbe8871ba03f090cddfd56e1f298ed15ce6af970eb113c29387ec5c4a126ae9c840394892fdb42afb0aa6c1fc9a738acd6bea78662020f5438d76ad5e2b8fc3a0e2f7655e97dd35b0fd1b4d90cd025c3c6cfd7b2bf264e4b54132f39a5fd8bfe35557bcb31438554d51017e108b04f48a4b324434a735e3411a0c8694eed9a56cd2c18", 0xa1, 0x80, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:22 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:22 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:22 executing program 1: r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x20000, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@remote, @local, @mcast2, 0x800, 0x4, 0x4, 0x400, 0x3, 0x0, r3}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x5) clock_gettime(0x0, &(0x7f0000001a40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001880)=[{{&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/144, 0x90}, {&(0x7f0000000200)=""/23, 0x17}, {&(0x7f0000000240)=""/42, 0x2a}, {&(0x7f0000000280)=""/105, 0x69}, {&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000380)=""/32, 0x20}, {&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/175, 0xaf}], 0xa, &(0x7f0000000600)=""/199, 0xc7}, 0x6}, {{&(0x7f0000000700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/91, 0x5b}], 0x2, &(0x7f00000008c0)=""/12, 0xc}, 0x3}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000900)=""/187, 0xbb}, {&(0x7f00000009c0)=""/196, 0xc4}, {&(0x7f0000000ac0)=""/144, 0x90}, {&(0x7f0000000b80)=""/250, 0xfa}], 0x4}, 0x1}, {{&(0x7f0000000cc0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d40)=""/67, 0x43}, {&(0x7f0000000dc0)=""/96, 0x60}], 0x2, &(0x7f0000000e80)=""/191, 0xbf}, 0x5}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f40)=""/54, 0x36}, {&(0x7f0000000f80)=""/235, 0xeb}, {&(0x7f0000001080)=""/144, 0x90}], 0x3, &(0x7f0000001180)=""/2, 0x2}, 0x3}, {{&(0x7f00000011c0)=@isdn, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001240)=""/100, 0x64}, {&(0x7f00000012c0)=""/91, 0x5b}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000001380)=""/37, 0x25}, {&(0x7f0000003040)=""/4096, 0x1000}], 0x6, &(0x7f0000001440)=""/26, 0x1a}, 0x3}, {{&(0x7f0000001480)=@isdn, 0x80, &(0x7f0000001740)=[{&(0x7f0000001500)=""/44, 0x2c}, {&(0x7f0000001540)=""/197, 0xc5}, {&(0x7f0000001640)=""/235, 0xeb}], 0x3, &(0x7f0000001780)=""/225, 0xe1}}], 0x7, 0x1, &(0x7f0000001a80)={r2, r3+30000000}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000001ac0)={0x5, [0xffffffff, 0x7, 0x0, 0x4, 0x7]}, &(0x7f0000001b00)=0xe) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000001b40)={r4, 0x0, 0x1f, 0x0, 0x87}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x8002bfc, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 0: syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) stat(&(0x7f0000000040)='./file1\x00', 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000140)={{0x77359400}, {r1, r2+30000000}}, &(0x7f0000000180)) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) 03:33:20 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, 0x0) dup3(r0, r1, 0x0) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x8000000000000000) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r1 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f00000000c0)={0xf, {0xf272, 0x6, 0x6, 0x800}, {0x7f, 0x7, 0x0, 0x7}, {0x1, 0x4}}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000002000/0x12000)=nil, 0x12000}) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x5, 0x100000001, 0x7fff, 0x40, 0xc355, 0x64, 0x7}, 0x1c) clock_gettime(0x2, &(0x7f0000000140)) timerfd_settime(r0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x100000) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5a5, 0x10982) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000000c0)=""/207) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'team_slave_0\x00', @broadcast}) 03:33:20 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f059018ebaf373a701a455fcc070000000000000008bb6bd4d185b95b0c5c4fbd4de7b2a8a4bc6b040000f79b4c770006c0080000000040"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:33:20 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x4000000000}) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x7, 0x80000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x2f, "58f315cf4ca3b84bd221befb3e80f9fa2a303508678eb5a45f27d79bc6918be46d34416d212f94f4dface6e09c2b7a"}, &(0x7f00000000c0)=0x37) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000100)={r1, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) r2 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffff, 0x5da59ddd37397a70) setxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'security.', ')vboxnet1[*\x00'}, &(0x7f00000002c0)='(\x00', 0x2, 0x1) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000200)={0x0, {0x3f, 0x100000000}}) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0x0, @in6}}, 0xe8) sendmmsg(r1, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1080008916, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r3, 0x0) mlock(&(0x7f0000004000/0x4000)=nil, 0x4000) mlock(&(0x7f0000003000/0x3000)=nil, 0x3000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x27) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x3a, 0x0) 03:33:20 executing program 1: r0 = timerfd_create(0xfffffffffffffffd, 0x3) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x10000, 0xe40) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x6, 0x7fff, 0x2, 0x0, 0x1, 0xffffffffffff7445, 0x5, 0x10001, 0x1, 0x7}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@int=0x9, 0x4) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000100)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x9, 0x40) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x1, @empty}}, 0x1e) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/mcfilter\x00') write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xfffffffffffffe56) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_settime(0x5, &(0x7f00000001c0)={r2, r3+10000000}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x40}) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{0x20, '/dev/radio#\x00'}, {0x20, '/dev/radio#\x00'}, {0x20, '/dev/radio#\x00'}, {0x20, '/dev/radio#\x00'}], 0xa, "5c3b6554ff00cfe49185fbaa427a07eafeaf127cc7ee0ca02fa5746aeba29b2565ecbe3fe1c4b033b8d9788613ad99e7f73d9323177e6df5edd30ce4988cb650cc0c54508ae71d784668b53b4c76fd57f7d93e4bd0dcf245554b"}, 0x99) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) connect$nfc_llcp(r3, &(0x7f00000000c0)={0x27, 0x1, 0x1, 0x2, 0x5b07, 0x4, "28f18e6797c25ab356d5e23fb869ceb84bfa51f019e5955157d63b18ff648b2fd70d5b393bed4ea9e630fa1174cc7d103bf6ed0b9a775714405771bb9057b4", 0x17}, 0x60) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) close(r0) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a12") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000), 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x40010, r0, 0x80000) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000000c0)={0x3c, "251d933645eba3787cf98a56263b62a8b7470a3b59177573a17ce3c0da9b352d", 0x5, 0x88, 0x80000001, 0x80000000, 0x6, 0x5, 0x5, 0x100000000}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) [ 629.228759] kauditd_printk_skb: 24 callbacks suppressed [ 629.228768] audit: type=1804 audit(2000000000.520:167): pid=17984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/519/bus" dev="sda1" ino=16584 res=1 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}, 0xffffffffffffffff}) 03:33:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video35\x00', 0x2, 0x0) ioctl(r0, 0xff00000000000, &(0x7f00000003c0)="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") r1 = timerfd_create(0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$unix(0x1, 0x5, 0x0) close(r3) close(r2) pipe(&(0x7f00000000c0)) tee(r2, r3, 0x101, 0x0) timerfd_settime(r1, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000540)='/dev/midi#\x00', 0x9, 0x8040) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000680)=0xe8) bind$packet(r4, &(0x7f00000006c0)={0x11, 0x1f, r5, 0x1, 0x100000000, 0x6, @broadcast}, 0x14) getsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f00000007c0)={@multicast1, @multicast2}, &(0x7f0000000800)=0x8) openat$vimc1(0xffffffffffffff9c, &(0x7f0000001840)='/dev/video1\x00', 0x2, 0x0) r6 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x10000) write$UHID_INPUT2(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c0000007e001fc757c22d2f5a10f0c9a3e5253de23270a691c4f29d681a8abd667ec971305c18bbdd3d123104bda20ecd015e9eefe6fb515a9892f141b2b611b97a8846432ef1342887b33927bcf43e95f1583b9d3d92f71b1a21ba3c3cefac024e61c44fad3f9f8e832821747c76a5b8150f9e97ad345f85a968fb8d8b82393916f81d"], 0x84) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') setsockopt$inet_tcp_buf(r6, 0x6, 0xd, &(0x7f0000000840)="f039d386f17fe2888a7d17cb131ec51c02aa6a54c8952ef60bd288146af58c5d28467a796c9348c65f8a3e862390ec3c401bf5c5de2e4e76baf19afa81419fc3703fdbef4add60fd098dc2f9c402bd1a32d38c1f41b13a60b7677cb3be7691028ac92e26a0dc1c59fb8a3934b5f13a937132443579724bedcea0b27ffe0b30de358e2e833155dfa570b1a7792d7b192a5ee0e32a7ad1102b78e4a184373f94afbd970489346cf4f4662124931e9b7a7a72bf65040bf7d6640d1640ab7cbc264094ccd34a6fbb9c37bb7cecf3f53b924caefe1cbf7585c3933772afc009dd3e5e74b7f3ad45e5ae0b25789d55df490c67c940fb931582d4248892742e64aca130b72c712403485162c99ab28f2c35a19073f9209fe97b1419808448dc5c92e32f7d9a9456f91bb3e9c99334c81ab62c2ac10f8d6c71d600f3519eaac846211c7c3bbad4aef10967d23c5f47e23b9f95c44af295fadca204a957d0bc30f3c22f3b1834418de93758bc0b985280a2cfdd33638e6bbbfadb9c470a4298e2a337419f006dde3d30c80a275eb71a9931a3cee1320e791ddd92252e94f920fb2e9f56d13d6c8f48b33a06b8bb6e5c27b4b6ab3d8821e39747fa15dd3160e1bf0efc8242a355e27c252d829b766763f50cce88e00b55b81b8b5ff258e5c966e08db0c5eb0b6e8d38b012222d6666e4a9236a7b7110437fdab29e44a3dd901d3a5b642828d574802bd3978fada19d6149bf1760b52d683db9f72a5dfde6e039e2932a556ea9fcb0460bdb89d170edfb8a47a726b83876e0b3a1241939a02aa61a415a195ce648ca8a1c4f0380862de494afb5c6753784b223758bf99e43738fab1878da85fe1d79877abf2a8f276e9bd04fb9de32e583890923172e638f94adbd762e2c067ade07d74f42a2fcd248c9bc728f7381baf532bd6b7e3ec518f8b29cdad1673e200dfdc3fa3e8f2fbb57f3e5feecb989a4ca8bd1f9ee9bbe2038221b9e46b93606b6488374635411676b9496b04890f475e78b5bef701b513b29e761003cadbd6f3ad8e9716a05630a8c43935ca6db23cbef980709c13e9b1207ea1ce9b719380814cdb446a793abc501233cd5d6df9be83b798b23aafc9cc4e148de05e657f48101b3ac749361187ad2d32e1d2677046cc5bb26ccce6ec14320ad056886059a6f2c242598502f3fb13d7f86644ec1e39ce1dbdf0df0738b12fa5c494051e67da1a8a8b56cc6eec338f602bce0b9084e7f1ebd62038ed8aa136f4bf86232e95ccc79da8225d601f7f7c45cc774a359ed15074b79ae4f36f39a7d110fde8f0bae3b8ea424c6d3507a245fdaed3b7096b131b607da66ffe7e6ff7887e6a72e27d2bee657740852aba75673b9c4ea7c791dc47271425f10ab5e53004e37cef1e791615325bb24f997790956c21904ce1ddfcce857b67c96999a5c2a887133b378188f5b384c42107afa096f2e9fd394f5a159ecac14af5c85c50ba7c03139581882f0cab79eb9a545730427d655ac8ec6634a3a1d3e0c67ec46e2e0b361dfe3118373f9fd6c38eefcd42728c9d16fe3f715deef07d7c4ddf40ccfcf78dbeb8c7697581c0dae779c9e152873441c60a10614e6de629fdfc9c4d4a472d896e63627b24a2f65c93e8d6049980ffa93a088eb21d3ac2c7ca63e0fa1229ede9e218eff4036e09267c8b2cfbd207f11c0c5a4054332eeb219b0c07294eeb40bf36516f594cfaa3d819a908e0e559b48d69f86600c5647ef7a8c36b53a3b03302ff21682f4fbcc4ac085010d7da71cbcc1c64173a1869310903962beaf71bbf39dea6c0d3deccaac52f40bc554f1500f865eed3c1de31a2c313bddcf9a332c8acde58ccbfb58a26f2077036eec319f3e707ac94c8d6a7c26a60ed4f7819cec88d691594b369e23248ea911caf6d225740f08bb06dd720c01072d77890fdc1245b389881c002aaba34e7f5788b90ef30b4eb1ca275ed3d2a83059743962f671514a02b89688159a8bd73340e23ea777a1f6bc5e3b947706553197ad4fa46946146319a5235a4df7d2c5ccd67dc1dfa22442ece3719b2212bfa0583c3ee1b87dc85211ac22a6ebdba31ee09f84ab8af170ecac6e6474b38d0d4110723ba27ea094ab0988e32c8630c914518d2eacfe97cba5d24c0498fc4745f910bbf4a7fbb82c9a51d1f0ae302bb8d7648adde30f4ca92f0d811d3ef3f3a51251dcf1c5cd7837b6b585bffa033b8f3484e784250eecf074495eaa906ecae4cf312361c1ed7fd60c62615aade18f374aa0a64e00d85e058da5af38181ef6d9a02442ab27215b97a7c280d49538aa584318a772937e0ab118487e2976ecd6bf53aa041d9361ce2544a6ca4d18298a7062d69ee73e8acdc6fdd8c91be1c232d8973e1f87c51f5bd981d9cde1ae8e75738e20948276cd3317834611bb014a54cf96a2c0e34d90587e0fcf637bcab82fc1373df7516755fc9928f317c008854e7a83e8a574281e63875722d421aea419564bce70bcd3b179333433f4aab7d9b3ac7053602f504add36ed33d28c3a788fae0eabdf7915260c78f23f5615239de2456898d71ecb981a3f0f450315ece831753fa3e0eb4661164fd63d15921541f3b51c6b3921bf293f1be28bcb53a65cb98b69d03ea108dea9409d4ed502e141f22071ac5f56c0bcccfceffab2ec25e2cb48ceabea979d7730e2f594ff9eb7b064dc9421e742a5bf08d796a5137a82185cf7375619f04e329f3f9f0ef258b8944f317f37ce20832a13a4585724ffba04e6c182a909165aea936ae13cdfaa53ba907ca105a9a35e8912e6a00c6312e5adeea24eee2b7af1409ca630daf7c24e9c61601aab765948d9a6479ce18a9fd6a21025adc4cbe31ba0c05943b55e6998b5f94aedf81d152519c6dc4dda574ff7afac787946d1220ff26f2023d1a56eae4c372f074aeac03192ef5e8a9e61fc00fe410125071d82a8bc0806ec7ea978c979f67285b2de826ae7f6c1585f204218450b0807a999e62057f5e4ee2f8f634feda2b29b25c5e59cc10b44916f3f84330cf9c984fc8943650c65fb097017f1e01888de9aab9db06515aee7977a54f9a1f24099607ba50c5192af7d20f54fa3e84cfd2b285ab8dbddce09aba100689f3947cc99d22685cef8e230a04907903c1eb0de87e5c5553038b5823b2d611075e3fe13d39448783d21683b2a2e1f36d9febc6d414d520bbedcbf65e14cfa280febd90dc337b893b5e415a0a41f65fd6b62097ba764cd4b90037779413311960df80e28876a827a94e259314a235e9559994c7e421b3a291eb367717eef864d7026dd0d6f6cfe9c51152e2c1752a15f69824f79c4eaca7b46a10c446029c19f581ce2cf4141f66eb234e31a2bf54d09d81cccf27c5b67d9ea30fe8ee318c0bbcadcde9cb15e7a9fdb0ca839fd84e8846221155162625b1a55db804c75400c8604d9128ec7827a96e3117b658524ad0d693b95a85c059a9d653690ad9208ec48f500a1d766fc66fcc0ba870fa6fa76034ae02b673e46317c458ac4de1f9bfcf4b51fe9f8ac32d05df2a8689777d02c00c82647daa8f57b8b1dfc2a40d2d04299b8f25bb3a49767435af17bff04ef3e52e0a43a0b8dfa05d917e0f7baf8fb4364b76f49cafe516de4a57b97e15b7e13bceac8888bc98d1425d81ef43fd15786717b0687efcc3046b51b5f4f0da159e6489b0c883e271be358e42abc75c8f9dc41360c92742689b5ae97e661658816872a380d162dbd395f0b94ccfbc067054c9c0187c8456cc22d8ae8dda01eb1b4bd2e6916140da3fb483ad06dfb07c39ce5e48561621777697fdec312e38739f4ea84507dd084137961fd01ca083dbee545f026af479daf069f80bdbd2c749cc1985098e3a354728cc24c9881c5cca11539fb3656daf5ec3ad074e152f0c0e890b2edd5cea7c89358cf80c208574f2ff22526a1ba66e13b239a88dcafaca761c71fe68204ef87dcff4f422128fa27a00557dd8b2771d4ddb380d3d1f9109803008b7f82674dd0b0c3a69e1c5bfed20fbd8e899fe9db5c1f1206514741591f6ef18d60703874c83d1e3c0591dac430599b81f634751a4c75e0ae993cfaca60942df648a340883ad9f4d546b10e60a29999ad942346369d9840b4f4ededfd46e4c69ba6364d050b60a6ec4b3d4f4e1e0d37022d554724837aa2989950fe9a135a65fc4e67d4db270142e5c57fcf5644b0fb9343a1334d11c60ae81332e5e533330bee1d0cf2a2c3f917e089b1bc4b0f8c5d7d622c767f54b2ec2b9d5941bbc35089999c1c4ca83c5748552550629f6501f417b6c7e75c6e4a0deeb3923e6ddd74dc008e623763c3e7d5c000bf6c5d3fb04e1015e623dc568443fc10fca837a0211708a1beb78faf1a0f2fc65e96d8303300f4419f6c60fa038120984784f375a33bbd56afe7c483519b9e244e71822befb18a4652cbec1860a46196f60cdac91f97ee619b6e80a7477bb9c67933b4c35cd792adb7ed0b868b46d87bc148f0bb20ac56975dabd1ff2bad658d12e22dcf9d6a3717adbe3cd13ca75c07ab8d5def77f4809d3ade854c9e5efa7cc30d73620c37a6325bf94902b0b6f07cace035df5a3826cc50b7610b4b25157ce02da54d3980a8efa5d5370e8626a1c86651dafcc44a8ce67940842350fa27fc0b54497f5f356e1efe7f631fa6d727183833e9d859eb796834976c70e8ab0af07e9a7b2bc2bacd263eaad412ca86567ebeebe1fa00499ea9f88a774ee2468f9492c175d9b55b123ff899ac7ceaea8411184e56c1c1e5edca0f4635f352d202e2a09ed42268c8625f1116c9ffa7ec247ad4fb19e4f30f970c4b4252c818afe682bff1347bce77757a890d425d5ac74e8bc089cbb8c3e857151505bdbb4931e5f4d6bf1bff78af35f5803907f11232feadce6c019bc02bcba74f218679f078acede270bdb68bf8ebb413542afb2c4df737778e6d0890027f4a72e33322f685fda28a0d83ce7907cd49138655f94bff190369dd738914d526df3daae097b57372df18b470e834c678e22e9ec3ffc5e89378faa568a3e55b84d5f2d9a665618b9ca6e78e789ad4ed2e1a9b82a8327ad1bf3cd564ceae37b1d8d918e16dcd2aaa0f073a09fa6e587eaccb1f77df2a3a0ee4e8d64d84c6624ff72f8ba1d603c43f10d473b8b357b6d89cb5b16bb58001418694200e7c49ff6857c59674d9b0d567ece3e7323aca3204257e302798d70b14bfe22bf7915593d719343118bc5d6d8a8dac2198bafeb8b829f6817500c03d69c92c79c935bf3b3506e5dc44bc588db0564d1f5197f14d4b711e733b3ae71d520fa3fabc39dd4e795a872393fb7176e513716a2b51cae022b037377d69bf69ce01beeb7bc9a47bcf9f2af4e58680a6b18d2ce696ad10f44cecd39d797c1c3f117b1d6c75a4e7ddb564b2c0b4ea625dc06557856e0874db8c8ee0ce3cdb571c520849871d6ed2d3fab97fd1fc8df458904d9f6a7bb1082edfa07daf4ff0f4f4cb7276581406bfb9e464260ba49b2f24620aef3d20cde4fcd06df5aeefc17cdbeb5748085d910d432f40d04c1ddc9d2b0b31052f9c393e04cc8f966f6a87a3362be5abcfc92c3b14d1ad1d08a8757b1e9ba952a4a1d047b0a61611cddd94a747f19ba6fb785a7be4a682393db66952933f4c6acb4dec9e879d9517fba5446444b22b2a4839358b01e457bc60c604529604d5cf942e380854c3f3e39466f15639c571d3fb36e415b33737c53df539b2f04ec3d77e067a4253b1c42063fbd798b3a55e5b98e7326d3bc0f43cf424f36d95ebff5d8d292c2fe0c86a7706ea", 0x1000) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="0626f706", @ANYRES16=r7, @ANYBLOB="00002dbd7000fedbdf25030000000800030008000000080003007f00000008000600080000000800020008000000100004000900000000000000090000000800030005000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000000) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f00000004c0)={{0x7, 0x4}, {0x440b, 0xff}, 0xffffffff, 0x1}) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000700)={0x50000, 0x0, [0x7ff, 0x1ff, 0x4, 0x7, 0xff58, 0x8, 0x101, 0xfb]}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000780)={0x0, 0x6, 0x300b}) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a12") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 629.307664] audit: type=1804 audit(2000000000.050:168): pid=17994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/553/bus" dev="sda1" ino=16602 res=1 03:33:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x100801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r1 = dup2(r0, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$FUSE_POLL(r1, &(0x7f0000000080)={0x18}, 0x18) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r1, r2+10000000}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) timerfd_settime(r0, 0x4, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a12") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 629.443362] audit: type=1804 audit(2000000000.200:169): pid=18007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/554/bus" dev="sda1" ino=16602 res=1 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x100, &(0x7f0000000040)={0x0, 0x1c9c380}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000200)={r3, &(0x7f00000001c0)=""/25}) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f00000000c0)={0x160da2b6, "306e63ba693319985270b40de85f73ac482be9399cee8f77825b34b4c6ccf37b", 0x80, 0x0, 0x7, 0x8, 0x4}) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) [ 629.546093] audit: type=1804 audit(2000000000.290:170): pid=18021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/520/bus" dev="sda1" ino=16575 res=1 03:33:20 executing program 1: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x4) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319b") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000001000/0x2000)=nil, 0x2000}}) 03:33:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="158add00"], 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$KDSETLED(r1, 0x4b32, 0xffffffffffffffff) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = getpid() sched_setattr(r3, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x50}, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, r4, &(0x7f0000000300)=[{&(0x7f0000000a80)="95e4637361e517ea1f0a20b4373c92a88d82300c13ec3eaf70775f1103568fa39b4e7887563a91578a78fa51384cfecaf8f870e32f2845ee7b145b8d75d238defc4a7fe17156064b796762cd1225426b850b627d17203e218480341bc360cc883746b04666fd3da5f995a082ba096effee959ba7ed3220c4791815cada6f5b20d5fe3abba2336f9f7eebd504a306b91661c5164fa03242341ded2c20df4a40609c1d00f820f70616806209eff05aa8bb36ead3b80598a17dc0dd8fb103bde25afb05a801537d0e512d92866c564e", 0xce}], 0x1, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xfffffffffffffffd}) creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0xf89, 0xdd2}, &(0x7f00000000c0)=0xc) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000180)={0x3, 0x1, 0x2}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000200)={0xc, 0x1f, "ae67b679cc37b28ca79c89819e7a4e2aeefa12c9285c57a4ac26b7e2831600"}, 0x25) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB="0500060055e4a1642054644909f27ead"], &(0x7f0000000140)=0x14) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 629.736132] audit: type=1804 audit(2000000000.380:171): pid=18028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/555/bus" dev="sda1" ino=16611 res=1 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319b") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) fadvise64(r1, 0x0, 0x2, 0x5) [ 629.796431] audit: type=1804 audit(2000000000.000:172): pid=18045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/556/bus" dev="sda1" ino=16602 res=1 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x400, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) r2 = gettid() r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0xb3}) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000200)={r4, 0x0, r5}) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000100)={0x6, 0x4}) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) syz_open_procfs$namespace(r2, &(0x7f0000001300)='ns/pid\x00') timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r6 = syz_open_pts(0xffffffffffffffff, 0x400000) ioctl$sock_bt_hci(r3, 0xc00448ff, &(0x7f0000000300)="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") ioctl$TIOCGSOFTCAR(r6, 0x5419, &(0x7f0000000080)) getsockopt$inet6_mreq(r5, 0x29, 0x1f, &(0x7f0000000240)={@mcast1}, &(0x7f0000000280)=0x14) ioctl$SG_GET_KEEP_ORPHAN(r5, 0x2288, &(0x7f00000002c0)) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'ip6_vti0\x00', {0x2, 0x4e23, @multicast2}}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x420080, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) [ 629.977699] audit: type=1804 audit(2000000000.000:173): pid=18060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/521/bus" dev="sda1" ino=16602 res=1 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319b") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 630.146763] audit: type=1804 audit(2000000000.030:174): pid=18064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/557/bus" dev="sda1" ino=16585 res=1 [ 630.168230] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500) 03:33:20 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x9, 0x100000000000913, 0x6}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f00000000c0)='`', 0x0}, 0x18) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) flock(r1, 0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f000000f000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_settime(0x3, &(0x7f0000000100)={r1, r2+30000000}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd0") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 630.181299] audit: type=1804 audit(2000000000.000:175): pid=18087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/558/bus" dev="sda1" ino=16599 res=1 [ 630.210257] FAT-fs (loop0): Filesystem has been set read-only [ 630.216471] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xf3d7, 0x400000) readlinkat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/176, 0xb0) clock_settime(0x10000000000000, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd0") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) [ 630.310534] audit: type=1804 audit(2000000000.170:176): pid=18105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/559/bus" dev="sda1" ino=16605 res=1 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x53, "0eb754e7a4820b539c68aa059260a50a4c4b96431ed2f3db55981a841707dff3d717914cdeb686d59379ab87d43d213344bddde614d2d697c14078f59c4dc9761c8854785501e7a6a42e23f307cda60f1bb7d0"}, &(0x7f0000000240)=0x5b) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r2, @in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x1, 0x800, 0x1, 0x8}, &(0x7f0000000340)=0x98) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x101200, 0x0) write$P9_RMKDIR(r3, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x2, 0x5}}, 0x14) r4 = getpgrp(0x0) ptrace$setopts(0x4206, r4, 0x5, 0x40) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000140)=0x8, 0x4) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f00000000c0)) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") semtimedop(0x0, &(0x7f0000000080)=[{0x3, 0x2, 0x800}, {0x3}], 0x2, &(0x7f00000000c0)) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x9, 0x102) write$selinux_load(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf908000000534521d2582491d79735f8d9f527afc02a204c696e75786f3780243e88d993a6b9a6fccb32af0497449da74be087467b1fa2204c98db70700bc6f0141aa8dc184c6544d4896660c88f"], 0x51) r2 = userfaultfd(0x80000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd0") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 1: r0 = timerfd_create(0x6, 0x800) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) utimes(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={{0x0, 0x7530}}) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x1, 0x0, 0x3, 0xfff, 0x8}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={r3, 0x7ff, 0x20}, &(0x7f00000002c0)=0xc) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) semget(0x3, 0x4, 0x100000000000521) r4 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x100000001, 0x40) write$P9_RXATTRWALK(r4, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0xff}, 0xf) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000000c0)={0xb, 0x7, {0x55, 0x8001, 0xfff, {0xffff, 0x3ff}, {0x3, 0x100000001}, @const={0x7, {0x9, 0x101, 0x1f, 0x7f}}}, {0x51, 0x3, 0xae7a, {0x1, 0x4}, {0xff, 0x5}, @rumble={0x1000, 0x1f}}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) getresuid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000140)='%\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x2100000, &(0x7f0000000380)={'trans=virtio,', {[{@uname={'uname', 0x3d, '/proc/capi/capi20ncci\x00'}}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@cache_loose='cache=loose'}, {@version_9p2000='version=9p2000'}, {@msize={'msize', 0x3d, 0x7fff}}, {@loose='loose'}, {@access_any='access=any'}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x0, 0x7b, 0x33, 0x64, 0x30, 0x77, 0x31], 0x2d, [0x66, 0x34, 0x7f, 0x61], 0x2d, [0x37, 0x32, 0x7f, 0x39], 0x2d, [0x0, 0x37, 0x35, 0x7b], 0x2d, [0x66, 0x35, 0x30, 0x66, 0x34, 0x3d, 0x34, 0x7f]}}}, {@hash='hash'}]}}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) exit(0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000480)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) read(r1, &(0x7f0000000280)=""/131, 0x83) write(r0, &(0x7f0000000080)="2400000012005f3414f9f40700090400818a0400"/36, 0x24) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, 0x0) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r1 = dup(r0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000080)) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, 0x0) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x32, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101000, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000000c0)=[0x9, 0x200]) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) [ 630.722595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, 0x0) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) getpgrp(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20\x00', 0x286800, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000100, 0x32, r1, 0x4) r2 = userfaultfd(0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x8000, 0x0) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() write$FUSE_ENTRY(r3, &(0x7f00000001c0)={0x90, 0xffffffffffffffda, 0x8, {0x4, 0x2, 0x6, 0x9, 0x1, 0x2, {0x3, 0x4, 0x5, 0xfc67, 0x20, 0x2, 0x1, 0x400, 0x21c7, 0x1, 0x7, r4, r5, 0x41c5fe84, 0x6}}}, 0x90) r6 = dup2(r1, r2) ioctl$SIOCX25SCUDMATCHLEN(r6, 0x89e7, &(0x7f00000000c0)={0x42}) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000002c0)) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000280)="caf0364ee806db2be75ac7248ff8c5eb", 0x10) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) clock_settime(0x3, &(0x7f00000000c0)={0x77359400}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x0, 0x2, 0xffff, 0x6, 0x5, 0x9}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ftruncate(0xffffffffffffffff, 0x8200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup2(r0, r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r2, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x4000, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f00000000c0)={0x0, 0x0, {0xf4, 0x18e7, 0x100d, 0x0, 0x7, 0x0, 0x0, 0x4}}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x1000, 0x401, 0xee, 0x7fffffff}, {0x1, 0x6, 0x9, 0x7fff}]}) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) [ 631.430231] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x110002}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0xb08, 0x70bd25, 0x1000, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}}, 0xc0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2000, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e23, 0x4b2, @rand_addr="17edefe829e8783532f90bcfb752df26", 0x3}, {0xa, 0x4e24, 0x4, @rand_addr="92d4b701020ea102f6d362d304c55155", 0x4c6c02dd}, 0x5, [0xffffffffffffffff, 0x1, 0xfffffffffffffffd, 0xffffffff, 0x8, 0x20, 0x400, 0x9]}, 0x5c) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x8000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x301000, 0x0) write$rfkill(r2, &(0x7f00000000c0)={0x7f, 0x1, 0x2, 0x1}, 0x8) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipmr_getroute={0x1c, 0x1a, 0x300, 0x70bd26, 0x25dfdbfb, {0x80, 0x20, 0xb0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x1200}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6006f52600081100fe8000000000000000000000000000ffff02000000000000000000000000000100000002ab24da05320000000000000000"], 0x0) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c, 0x800) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x6, @mcast1, 0x2}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x6, @local, 0xff}, 0x1c) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{r1, r2+30000000}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x280000, 0x0) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ftruncate(0xffffffffffffffff, 0x8200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) r0 = accept4$netrom(0xffffffffffffff9c, &(0x7f0000000040)={{0x3, @null}, [@netrom, @null, @rose, @netrom, @netrom, @bcast, @netrom, @default]}, &(0x7f00000000c0)=0x48, 0x800) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0x50d5, 0x3, 0x5, 0x7, 0x8}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x2000, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x10002, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000240)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3) timerfd_settime(r4, 0x3, &(0x7f0000000000)={{r1, r2+30000000}, {0x77359400}}, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x440002, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e20, @multicast1}, 0x25, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)='bcsf0\x00', 0x0, 0x81b, 0x3}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x8}) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 0: syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="800f00001000110019000300e600000000000102000000000100007109000000004000000200000000000000000000006d5ebe5a0000fff053ef", 0x3a, 0x400}], 0x0, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = socket(0x13, 0x6, 0x1) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) ioctl$NBD_DISCONNECT(r3, 0xab08) bind$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @reserved}, 0x10) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0), 0x10) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0xe4a0165, @rand_addr="b7875d41f94fc6f388ea48e7542d5964", 0x1b8}}, [0x400, 0xfff, 0x4, 0x2, 0x7fffffff, 0x80, 0x8, 0x0, 0x3, 0x7, 0x9, 0x6, 0xff, 0x9, 0xdb]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000280)={r4, 0x81}, 0x8) 03:33:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x10c, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/205, 0xcd) [ 631.796786] EXT4-fs (loop0): Invalid log block size: 1895825409 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ftruncate(0xffffffffffffffff, 0x8200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000180)={0xffffffffffffff80, 0x0, 0x2a, "3609d193aa97a921f1039f3cfa27c98ce6bf23fec58c3c4f118a268161b7c34911ea12631196db3e4f4117c49137ec7462afd6e94efd990aacb36164", 0x23, "dfdcb22ca97d4d7223724b40bccbd2fe125ec73d541ec83537c8015267009f866844b3c647342f921fac31e99bf5974be21ecb79e9a67fe5e56bcc4e", 0x10}) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x7ff) timerfd_create(0xf, 0x800) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000100)={'syzkaller0\x00', {0x2, 0x4e24, @multicast2}}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000000c0)=r2) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x9, 0x80) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x7, 0x4, &(0x7f00000000c0)=0x3}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) init_module(&(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;\x03\x00\x00\x00\x00\x00\x00\x00\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:', 0x223, 0x0) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x843, 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000200)=0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x8000, 0x3, [0x7fff, 0x3, 0x1000]}, &(0x7f0000000100)=0xe) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r3, 0x8, 0x7}, &(0x7f0000000180)=0x8) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) signalfd(r1, &(0x7f0000000100)={0x6}, 0x8) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = fcntl$getown(r1, 0x9) sched_getattr(r2, &(0x7f00000000c0), 0x30, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x1) mmap$perf(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0x8, 0x8810, r3, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x40000004000007) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) [ 632.120828] Unknown ioctl -1073457617 03:33:20 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x100, 0x10000) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000140)="ef73c41dc51595c5e9128e5a2ea3beed5bdfaff5cf1874086869789dadf3eec8ba88ee23fb0b91893416101368d23055a599ef3e61b4ae734dcbfdb2ef165e64a31f7d2285b673ca87a071498ec287ce6ce00703dea014a72079afd940a0f0941e6b925ebe76bde9b645f31a7403ae75dbf5fa9baa6c11eb800ca85779dcb125d9a0a8c40e5e33b7053c0ebc2ae73ef0a14b91f400c6011d7b3a7667df90e37a94cd7b9e6fb2") r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x20080, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f00000000c0)={0x1, 0x1, [0x8, 0x6, 0x80000001, 0x9, 0x5, 0xfffffffffffffff8, 0x2, 0x2]}) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000000480)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000004c0)={0x7, 0x8d7660d15c84bf63, 0x0, 0xa7, r3}, 0x10) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x1) write$P9_RMKNOD(r0, &(0x7f00000000c0)={0x14}, 0x258) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000002000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x4000, 0x1}) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000000c0)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x3, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)=""/114) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000200)={0x2, 0xff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="05bb0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x3ff}, 0x8) 03:33:20 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0xf, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 03:33:20 executing program 2: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000300)='eql\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r3 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x8, 0x20000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @bt={0x0, 0x0, 0xdec, 0x80000001, 0x7fff, 0x0, 0x2, 0x1}}) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f00000002c0)={0x3, @null, r4}) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 632.444052] binder: 18337:18339 Acquire 1 refcount change on invalid ref 0 ret -22 [ 632.475351] binder: 18337:18339 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 632.558695] binder: 18337:18354 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 632.572362] binder: 18337:18354 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:20 executing program 0: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000040)=r1, 0xab) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r2}) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8c1) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x7, 0x20000) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x80) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x54, 0x2, 0x3, {0x2, 0x10000}, {0x81a, 0xcebc}, @ramp={0x710ddc49, 0x6, {0x2, 0x2, 0x1000, 0xfffffffffffffbff}}}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x9d17, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0)=0x9, 0x4) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x220000) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000000c0)={0x77359400}, 0x10) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x3, @local}}, 0x1e) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)='@)wlan1\x00', 0xffffffffffffffff}, 0x30) get_robust_list(r2, &(0x7f0000000200)=&(0x7f00000001c0)={&(0x7f0000000140)={&(0x7f0000000100)}, 0x0, &(0x7f0000000180)}, &(0x7f0000000240)=0x18) 03:33:20 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) membarrier(0x2, 0x0) [ 633.276635] binder: 18383:18389 Acquire 1 refcount change on invalid ref 0 ret -22 [ 633.309960] binder: 18383:18389 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(0xffffffffffffffff, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 633.416165] binder: 18383:18397 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 633.443645] binder: 18383:18397 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000100)={r1, 0xffff, 0x4}, &(0x7f0000000140)={'enc=', 'raw', ' hash=', {'ghash-clmulni\x00'}}, &(0x7f00000001c0)="1286928108c14044804fc295dca3ffb9ed6f1c1895b485b4402dd80441911ac12370f4a94f869899dce99b97383cf82d09", &(0x7f0000000200)="e96bc2474e7425f90832730e6f33665cef6e1c19f0347b2101404736d0bbe6baf7ed0b3ad704d21a48924acb386fbc6ebee5b23d495a527e0107b415884ca4922e9cb5031c7f73d96191010fef0c870e64f81291079b40fece0bf8295bee40764709243dcee69072fa431cf71e5724f5a08ccd70b087bd865deffc7c96ecec276b608c603dbae58d479d052cf3198379e97b603b8d63da81c97f8a5dffa7151b4160a2e7e0d1c3163b1c61e527b5e889fb74ad215835b7529bc4ccf99311c9d253783460465fc3ce5caf285ef7") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x400000, 0x30, 0xffffffffffffffff, 0x1) r2 = userfaultfd(0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000340)={0x1, 0x3}, 0x2) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f0000930000/0x4000)=nil, 0x4000, 0x8000001000004, 0x8031, 0xffffffffffffffff, 0x0) 03:33:20 executing program 1: clock_settime(0x7, &(0x7f00000000c0)={0x0, 0x989680}) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000140)={{0x77359400}, {r1, r2+30000000}}, &(0x7f0000000180)) clock_settime(0x2, &(0x7f0000000040)) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(0xffffffffffffffff, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) 03:33:20 executing program 0: getpgrp(0x0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f059018ebaf373a701a455fcc070000000000000008bb6bd4d185b95b0c5c4fbd4de7b2a8a4bc6b040000f79b4c770006c0080000000040"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(0xffffffffffffffff, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 634.138510] binder: 18426:18428 Acquire 1 refcount change on invalid ref 0 ret -22 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e21, @remote}, {0x7, @dev={[], 0xd}}, 0x1c, {0x2, 0x4e21, @local}, 'syz_tun\x00'}) r1 = syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0xfffffffffffffffa, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000340)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000380)={0x0, 0x0, 0x100}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000003c0)={r2, r3}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000140)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x109000, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000200)={'raw\x00', 0x94, "47623de342f36e291cfcca5379fc128d76908b3a74b9794d7377c02dbd6cc24c435bd26ec7758d959439627edcb4fe90f0e12f646d1bdc32293fdd4cb663ccf6ea60680fcaa97b25c650c5703e19838f2bfe4c9777b55e1cfd56b13d0a4aa6582a40d16943afa5a6e3c6831bf1b193badb535c87fee595bb5c1cdb43af2c06f67c5ac9925be3613a778e709dcea985743f4b0006"}, &(0x7f00000002c0)=0xb8) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 634.191068] binder: 18426:18434 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000140)={r0, r1+10000000}) r2 = timerfd_create(0x0, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) connect$x25(r3, &(0x7f00000001c0)={0x9, @remote={[], 0x1}}, 0x12) r4 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1d10, 0x800) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f00000000c0)=0x5, 0x4) timerfd_settime(r2, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) ioctl$RTC_VL_CLR(r3, 0x7014) clock_settime(0xffffffffffffffff, &(0x7f0000000040)) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@empty, @multicast1, 0x0}, &(0x7f00000000c0)=0xc) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x9) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@local, @loopback, r2}, 0xc) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) [ 634.328648] binder: 18426:18459 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 634.360177] binder: 18426:18459 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x40) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000180)=""/114) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x10080, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) bind$x25(r2, &(0x7f0000000100)={0x9, @null=' \x00'}, 0x12) [ 634.972481] binder: 18472:18473 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 635.063645] binder: 18472:18480 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 635.071273] binder: 18472:18480 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:22 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xccfb, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0xb) 03:33:22 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x7ff, 0x200, 0x5, 0x8, 0x3, 0x0, 0x8, 0x2e4, 0x40, 0x5e, 0x10000, 0xc5d, 0x38, 0x1, 0x1, 0x0, 0x5}, [{0x70000007, 0x45, 0x6, 0x324, 0x9ab5, 0xacaa, 0x2795, 0xfffffffffffffffd}], "b27d41a1e0116c33a72a6e7b5ce65311a0f999dfdf4d45d4e297911f06c33b8c3d045286f786fe6ebd"}, 0xa1) write$binfmt_misc(r0, &(0x7f00000002c0)={'syz0', "a0681823934ac987c6defae3f96b44af246cb2aef79c"}, 0x1a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10, 0x612e245715afba8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl(r1, 0x6, &(0x7f00000000c0)="ba0cd7bf4619f21de7bb55f3989d46c8be2c76cac2c209ed28c760414c1bcce20dbe3c2085d0a3270201007fc6cee7748015896228166825d291ae59f6216e3c087e") ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:22 executing program 1: r0 = timerfd_create(0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x80000001, 0x7}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x101, 0xe311, 0x2, 0x7f, 0x6, 0x55a, 0x2, {0x0, @in6={{0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}, 0x1}}, 0x2, 0xed, 0xffffffffffffff01, 0x7, 0x10000000000000}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000002c0)={r1, 0x1, 0x6, 0xfffffffffffffffd, 0x5, 0x3ff, 0x8, 0x1000, {r2, @in6={{0xa, 0x4e24, 0x200, @empty, 0x5}}, 0x1, 0x3, 0x5, 0xd84e, 0x8}}, &(0x7f0000000380)=0xb0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x200000, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x4) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:22 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x5, &(0x7f0000000200)={0x0, 0x0}) clock_settime(0x3, &(0x7f0000000040)={r1, r2+30000000}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) socketpair(0x0, 0x0, 0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x1b18, 0x2, 0xff, 0xc, 0x7, 0x8}, &(0x7f0000000140)=0x20) 03:33:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(0x0, 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 637.235856] kauditd_printk_skb: 22 callbacks suppressed [ 637.235867] audit: type=1804 audit(2000000002.240:199): pid=18490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/541/bus" dev="sda1" ino=16796 res=1 [ 637.237374] binder: 18488:18491 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000100)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) r3 = shmget$private(0x0, 0x5000, 0x54000fa0, &(0x7f000000e000/0x5000)=nil) shmat(r3, &(0x7f000000f000/0x1000)=nil, 0x7000) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x200000, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x3}) 03:33:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:22 executing program 1: r0 = timerfd_create(0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x40000, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f00000000c0)={0x58e9, 0x3, 0xbbb}) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xc0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x3, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x401, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) [ 637.316564] audit: type=1804 audit(2000000002.320:200): pid=18497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/542/bus" dev="sda1" ino=16781 res=1 [ 637.347415] binder: 18488:18505 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 637.416003] binder: 18488:18513 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0xc0, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000100)=0x4220100) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8000, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 637.492906] audit: type=1804 audit(2000000002.380:201): pid=18506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/580/bus" dev="sda1" ino=16792 res=1 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x59c, 0x80) bind$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x1000, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x24) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) [ 637.526397] audit: type=1804 audit(2000000002.430:202): pid=18518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/543/bus" dev="sda1" ino=16796 res=1 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(0x0, 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 637.591688] audit: type=1804 audit(2000000000.130:203): pid=18527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/544/bus" dev="sda1" ino=16586 res=1 [ 637.718645] audit: type=1804 audit(2000000000.000:204): pid=18536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/581/bus" dev="sda1" ino=16597 res=1 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xc0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x3, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x401, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x400, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) ioctl(r0, 0x1000008912, &(0x7f0000000400)="0adc1f123c123f3182d070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r1, &(0x7f0000000300)={0x78, 0xffffffffffffffda, 0x8, {0x10000000000, 0xf349, 0x0, {0x5, 0x7d8d, 0x7, 0x1, 0x8, 0x5, 0x0, 0x4, 0x100000000008, 0x0, 0x1, r3, r4, 0x9, 0x3}}}, 0x78) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x101000) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(0x0, 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000000c0)=""/4096) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) [ 638.057015] audit: type=1804 audit(2000000000.000:205): pid=18552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/582/bus" dev="sda1" ino=16602 res=1 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) r1 = getpgrp(0x0) waitid(0x3, r1, 0x0, 0x2, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = accept4(r0, &(0x7f00000000c0)=@nl=@proc, &(0x7f0000000040)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000140)={0x4, [0x0, 0x8, 0x7fff, 0x7]}, &(0x7f0000000180)=0xc) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="800f00001000110019000300e6000000000001020000000001000000090000000040000000400000c0000000000000006d5ebe5a0000fff053efe9f5592edec3ad8fe864e3f2b3ba9f8d3cf9b77960be1dcfdc7a0db653b9006bc0fdffffff5d2da0", 0x62, 0x400}], 0x0, 0x0) [ 638.137972] binder: 18555:18559 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 638.157073] audit: type=1804 audit(2000000000.050:206): pid=18556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/545/bus" dev="sda1" ino=16605 res=1 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0xffffffffffffffff}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000200)={0x1, 'bridge_slave_0\x00', 0x4}, 0x18) getpeername$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=0x0, &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r3, 0xb09}, 0x8) [ 638.209518] binder: 18555:18568 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 638.251348] binder: 18555:18568 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 638.266904] audit: type=1804 audit(2000000000.020:207): pid=18569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/546/bus" dev="sda1" ino=16597 res=1 [ 638.274652] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (29) [ 638.373758] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (29) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x400) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0x80000001}, 0x2) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(0xffffffffffffffff, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x40, 0x0) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="000000f502830400ea000000eb00fc008fe8b825c4642242375592ac9bf679cfd7f041d966760329919a628cdf2f3810ceeeb4791a136c3d7e"], 0x49) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000180)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x0, 0x80000001, 0x5}, {0x3, 0x0, 0x26, 0x1f}, {0x3ff, 0x6, 0x4c0f1981, 0x3}]}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") read(r1, &(0x7f0000000280)=""/131, 0x20000303) write(r0, &(0x7f0000000080)="2400000012005f3414f9f40700090400818a0400"/36, 0x24) [ 638.951891] audit: type=1326 audit(2000000000.740:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=18590 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0x0 [ 638.962177] binder: 18596:18597 ioctl c0306201 0 returned -14 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(0xffffffffffffffff, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) iopl(0x20) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 638.996364] binder: 18596:18597 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 639.018946] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(0xffffffffffffffff, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x3bb07) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x6, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 639.086086] binder: 18596:18607 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 639.102628] binder: 18596:18607 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x600, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x100000001, 0x1, 0xff, 0x4, 0xfff, 0x2}, 0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x144, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x40, 0x38, &(0x7f0000000140)=[@ptr={0x70742a85, 0x1, &(0x7f0000000100), 0x1, 0x1, 0xd}, @fd={0x66642a85, 0x0, r1}], &(0x7f0000000180)=[0x30, 0x28, 0x20, 0x30, 0x38, 0xf7463aaa2cf86848, 0x38]}, 0x6}}, @clear_death={0x400c630f, 0x3, 0x4}, @transaction_sg={0x40486311, {{0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20, 0x38, &(0x7f00000001c0)=[@fda={0x66646185, 0xa, 0x1, 0x3a}], &(0x7f0000000200)=[0x179fccdbcb27221a, 0x58, 0xe0ba28a9922271e9, 0x78, 0x0, 0x78, 0x30]}}}, @decrefs, @transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x38, &(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x68, 0x0, 0x38, 0x30, 0x48, 0x38]}, 0x9}}, @enter_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x8d, 0x0, &(0x7f00000004c0)="5258c2143ef9b0bb437638878a49f771784c57fdbd3ca52dc0a41ebd88f24dc8fc29e16e87bee6a63c9ab8be6d14582689395ee3dfff4cd0abd49198566afc1753c22ce989e0b740965c6b7bcd6ff419fb0d1e7626c7ab60559c8821ee66bf01fac8aab85d94bcfe70f86dae4c9ac74104d25a7b8ca60b97f9272cff5d660c20fa111c6c42ac34a04cb7dbfdec"}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) fcntl$addseals(r0, 0x409, 0x8) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) 03:33:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) [ 639.736565] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 639.822836] input: syz1 as /devices/virtual/input/input48 [ 639.837191] binder: 18633:18639 ioctl c0306201 0 returned -14 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x6], 0x1, 0x800, 0x7, 0xe4, 0xfffffffffffffffb, 0x100000000, {0x7f, 0x10001, 0x0, 0x8, 0x8, 0x9, 0x6, 0x1, 0x10001, 0x81, 0x1, 0x4, 0x8001, 0x3ff, "4e2f0d073ffcf6f5bc1f5ef1236c3500d15d18f24c2e590022f787d23537435b"}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) fcntl$setsig(r1, 0xa, 0xa) dup2(r2, r1) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @bt={0x7, 0x50, 0x100000001, 0xcc, 0x2, 0x1, 0x0, 0xc}}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) 03:33:20 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101900, 0x0) bind$ax25(r0, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x7fff}, 0x8) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 639.870919] binder: 18633:18639 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000100)=0x3) 03:33:20 executing program 1: r0 = timerfd_create(0xb, 0x800) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x6, &(0x7f0000000040)={0x77359400}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000080)='ppp1\x00', 0xffffffffffffffff}, 0x30) fcntl$setown(r0, 0x8, r1) 03:33:20 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x7) [ 639.949785] binder: 18633:18653 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 640.009210] binder: 18633:18661 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(0x0, 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) r1 = shmget(0x1, 0x2000, 0x100, &(0x7f0000003000/0x2000)=nil) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x20, 0x22240) accept4$unix(r2, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e, 0x0) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000100)=""/36) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xffffffff, 0x105040) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000000c0), 0x10) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x20000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) [ 640.671032] binder: 18678:18681 ioctl c0306201 0 returned -14 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 640.713793] binder: 18678:18681 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000140)={r3, 0xe7c, 0x5e, "82568a6c265636d213b4588192456ea5adc59bf84e4d457dda36a427d6180c78636d7ecd8ab049df9549763d0b808ee498d3996f3b19592d60597438b2a79f78250f5efc63f0a0118dad5ee43970723b6356171294d08639c85b4004a3a2"}, 0x66) 03:33:20 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000000c0)={0x4, 0x5, 0xfff, 0x4, 0xe587, 0x0, 0xe}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x2040, 0x0) r2 = accept4$tipc(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x80000) r3 = timerfd_create(0xfffffffffffffffe, 0x0) recvmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=""/189, 0xbd}, 0x6}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/34, 0x22}], 0x1, &(0x7f0000000780)=""/52, 0x34}, 0x80}, {{&(0x7f00000007c0)=@caif=@util, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)=""/234, 0xea}], 0x1, &(0x7f0000000980)=""/202, 0xca}, 0x80000001}], 0x3, 0x20, &(0x7f0000000b40)) timerfd_settime(r3, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0xf, @vbi={0x4, 0x40, 0x5, 0x35315241, [0x1000, 0x40], [0xfffffffffffff001, 0x9], 0x108}}) timerfd_settime(r3, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x8a, "4b9b751bc794aff40ace7bcc58bcfbf8f09dae749dca9851b92f1b430b3258cd44ed7ddc8d0e630c3ce10b22fb42be74b81ea8bc48bf5a2a7517031aff32e3908afd077260ab629aba525b74f9cdb3757ccf3f4f663af954ea8b86a51c8111b9dbf3dae1b457c0183b4dc2575b0b7f6a3e762c6671330ac7151fc599e3cdcc6ef52a99d0cd0c4f60fa11"}, &(0x7f0000000440)=0x92) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000540)={0x200, 0x8, 0xfffffffffffffffd, 0x3, 0xd6, 0x100000001}) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000480)={r4, @in={{0x2, 0x4e22, @broadcast}}}, 0x84) r5 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}]}) [ 640.804485] binder: 18678:18694 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 640.824745] binder: 18678:18694 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(0x0, 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="d9fdbda0798fa340fd931104a4e9870938e08ab5ec0f3ada994d5225da04e884597cc6f0007336ebbd3235e751c0fa2ca4c1824850c4dee4e1dcd953767736877b", 0x41}], 0x1, 0x0) timerfd_settime(r0, 0x7, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x32, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_create(0x7, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001540)='/dev/dlm_plock\x00', 0x101000, 0x0) getsockname$unix(r1, &(0x7f0000001580), &(0x7f0000001600)=0x6e) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 641.563593] binder: 18715:18721 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(0x0, 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xffff, &(0x7f00000000c0)="477d4d99160c960fa389fc87a71400dc795f543c686e4675cc4cde456a91f38bdda37b5bb703f942996da6c931c84a210e54e5d753d4b038c536543059770946b97ca5cc5b3af6dcf24310cd7c507712e4f925b7c8365c8f37ab14c676a38c6bb7304ec208b21b0b490df036eb3d7565462b5f9d42926e17735b05ac134778b238594bd432f3c1aaa6") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0xfffffffffffffffe, 0x1, {0x7, 0x1d, 0x6, 0x40000, 0x3, 0x5f, 0x7fffffff, 0x8}}, 0x50) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) [ 641.657729] binder: 18715:18733 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 641.674385] binder: 18715:18733 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x6, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x5, &(0x7f0000000040)={0x0, 0x989680}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x70, 0x48, 0x8, 0x9, 0x8, 0x0, 0x3, 0x82810, 0x4, 0x9, 0x1, 0x20, 0x0, 0x2, 0xdf, 0x8, 0x7fffffff, 0x0, 0x4, 0x1, 0x40, 0x0, 0x7, 0x3, 0xffffffff80000001, 0x8378, 0x0, 0x72d7, 0x100, 0xb0, 0x4aae, 0x2, 0x0, 0x6, 0xffffffff7fffffff, 0x2, 0xe54, 0x0, 0xee, 0x1, @perf_config_ext={0x4, 0xff}, 0x1000, 0x6, 0xffffffffffffff8b, 0x1, 0x6, 0x68a2, 0x8d6}, r1, 0x7, 0xffffffffffffff9c, 0x9) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x101000, 0x0) timerfd_settime(r1, 0x3, &(0x7f000000b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xfffffffffffffffc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f00000006c0)=0xe8) syz_mount_image$msdos(&(0x7f0000000240)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x2, 0x4, &(0x7f0000000540)=[{&(0x7f0000000340)="2c9d57ae1f76ff61f42059f1657ce1541a1522e12731a58dc55c1819b2c2edb4c96198eb7e5a5af58a96c3012b", 0x2d, 0x4}, {&(0x7f0000000380)="7604fb23e40b3f5bd0c3e560eb52fe3f00b700d934b6313f0b7006964b6df78fe0bfa6698355e5fbe99a48601364217c13f4f87712f93607bdb45486c8eb99ac914a40c49ecaf7f3f22eb337e83e81c01b", 0x51, 0x5}, {&(0x7f0000000400)="7eee7965579595bbd61080cb381bb7f21817829ff7231b1ac53aac146f5e021e96b4d9aa4ca1a8eb5aa4b229b820fd3610fbc8a5a21d9faed4185362dff119a182a28119f22d9156cca2dca81e30e1ca72e8e7dc0068cf91aec8f7f078755eb3bd5de6c6a1662cdea8513f381fea620b7f669cdc93115da4fdf373aa9b4933f41e3c5359ed38335b40fc48a477b7fc46329dc2546edba8b55a325d591d929cf92003b91e537c541f9fb591b20a8914396b000d4eaab0654b1c4c96dcb1a210ab2c97e40fab9066d6d190420b905443b2bb6b", 0xd2, 0xea8}, {&(0x7f0000000500)="816abd028d09c7df14335783561ad4dbfb4bf9fb1da8b3a04c4ff684292cc8193881a80dcaaa83e5a641552c4300959519a2ac6fcee695a7cc2cf199", 0x3c, 0x8}], 0x20, &(0x7f0000000700)={[{@dots='dots'}], [{@euid_lt={'euid<', r0}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@dont_appraise='dont_appraise'}, {@obj_type={'obj_type', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/radio#\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/radio#\x00'}}, {@audit='audit'}]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000300)={@rand_addr="796481ccccdc98f181ec2578d3529a21", r3}, 0x14) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x8000000000000032, r1, 0x400000000) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f0000000200)={0x1, 0xfffffffffffffff7, 0xd6}) write$nbd(r4, &(0x7f00000007c0)={0x67446698, 0x1, 0x4, 0x0, 0x4, "0b05fc83548d6b8b14b0e5ac7f1b6d9054f6c17c5e6253355b337bce79a8b06e65c0cb8759c3576edc61f7d855a1019de280e512837aa07abfadef933746647a756802c10223103ad3d71cbb981420ea83fe4405b7652bc411ad023f864cd1f1362be946a82e9dbf27462a76bb8bde67899999846fc57bbd9041ac1ed6ddb10f5f71be4d2498faf4eda456a16c88254fad2478dc78d0b00b6f37a48056e443d9ca4b4ae1b7e0d57ce014c4bcd25810ccb9acc65cdb39c8a12be07dcf86187fda32cb2537e1f9e786c0d109d45aaa3a936ac4b6"}, 0xe3) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r6 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7920, 0x8240) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @bt={0x8000, 0x8, 0xeb0, 0x5006, 0x8000, 0xffffffff80000001, 0x2, 0x1}}) [ 642.378151] kauditd_printk_skb: 11 callbacks suppressed [ 642.378161] audit: type=1804 audit(2000000000.680:220): pid=18749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/590/bus" dev="sda1" ino=16587 res=1 [ 642.418774] binder: 18754:18755 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) [ 642.465303] audit: type=1804 audit(2000000000.040:221): pid=18757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/556/bus" dev="sda1" ino=16605 res=1 [ 642.499469] binder: 18754:18764 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) timerfd_create(0x7, 0x800) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) getsockname$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) [ 642.515167] binder: 18754:18764 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 642.525224] audit: type=1804 audit(2000000000.000:222): pid=18757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/556/bus" dev="sda1" ino=16605 res=1 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x36, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000000003a, &(0x7f0000000240)="00dc3fba002fff5403b97084598d95a296fa41aa346f453089871d99f21558df99cfe1f9b1a344b74cb918869d9a60cb0e401c771dace535c1b88c87cb86cd313823f4b885b249e05e7f82957669ee28307846f1f12d03eedfd0ede937851c3593a5737e99110d96ccbe8b6e631ae886f8b825a6489f9e0aa2bdb81f0101503423090fb5bfb6ff9d7b52e6264f6a1e8efc9d23ed058375a81ef5ab1c4d4d2469c9eae400a8b55e380025a0ec5bd57ec5205589ad87d210c78dfd867353cceb6cc379722114dd904d3c4f486cda53e2f57eabc18a5fa11e48a06bcea23878272671181134c0308826dc05526b7a2d69317118db752a73ca0ca01f159204f547") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) [ 642.593106] audit: type=1804 audit(2000000000.130:223): pid=18771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/591/bus" dev="sda1" ino=16602 res=1 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x101000, 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000200)={0x18, 0x0, 0x2, {0xc6d}}, 0x18) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x6}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000340)={r3, 0x5ae9}, 0x8) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) fsetxattr$security_selinux(r0, &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:traceroute_exec_t:s0\x00', 0x27, 0x1) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) ptrace$setopts(0x4206, r4, 0x8, 0x0) clock_settime(0x3, &(0x7f0000000140)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000380)=""/202) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 642.725619] audit: type=1804 audit(2000000000.060:224): pid=18786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/557/bus" dev="sda1" ino=16605 res=1 [ 642.770523] audit: type=1804 audit(2000000000.060:225): pid=18786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/557/bus" dev="sda1" ino=16605 res=1 [ 642.824778] audit: type=1804 audit(2000000000.150:226): pid=18790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/592/bus" dev="sda1" ino=16584 res=1 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl(r0, 0xffffffff, &(0x7f00000000c0)="9ca805293603fe5511fb27485c91a297e3209bacf4d39db392b4dc261cdbc148498f9b762913b82d185a0630f1fa36357581f3cfb5ce5325db4480d28accb86b2eb90d45ed3e4701a0cd122206e4cc1ca9891bc95f7a20bb59a2b6dea3a2004655ec8934d4c66db93e23c724d85d7a5464372b3ae3154badeb64aa") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x80010, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x24}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x101806, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x51) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x2}) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r1 = dup3(r0, r0, 0x80000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000240)={0x5, 0x2, 0x80000000, 0x2}, 0x6) r2 = gettid() r3 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000340)={r1, r0, 0x4}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000280)=""/32, 0x20}, &(0x7f00000002c0), 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x3f, @mcast1, 0x1}}, [0x6, 0x7, 0x3f, 0xfffffffffffffffa, 0x1f, 0x20, 0x9b57, 0xfffffffffffffff8, 0x8, 0x6d, 0x7, 0x5, 0x2, 0x4, 0x4]}, &(0x7f00000001c0)=0x100) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r5, 0x4) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 643.244062] binder: 18794:18795 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 643.291356] audit: type=1804 audit(2000000000.630:227): pid=18806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/558/bus" dev="sda1" ino=16611 res=1 [ 643.327829] binder: 18794:18808 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x800c0, 0x0) getsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f00000000c0)=""/49, &(0x7f0000000100)=0x31) fsync(r0) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) [ 643.339947] binder: 18794:18808 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 643.360174] audit: type=1804 audit(2000000000.020:228): pid=18806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/558/bus" dev="sda1" ino=16611 res=1 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@v1={0x2, "b2768b897e90"}, 0x7, 0x2) [ 643.402474] audit: type=1804 audit(2000000000.040:229): pid=18804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/593/bus" dev="sda1" ino=16612 res=1 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) eventfd(0xb89) write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e213eb6048830b3a820557999a630bf50744a2539904c6fa30f544e27895ab915c25b04fa683caec2c9ca8927f8b90e59540d418ed22f9561399c581197aafc54758e8c8a9571a366ff899e8efc873d71be9ee8786a3113161630c3743ea3e098087554b91446273547e6e8a912a08bfcd33eb573139e44f23245a5e3a9313411150ab060ee649e0f0bbced7e129ce4c7cee1b76186ed6fea020c1deec9d3696c5ddf0a51507a03b2cf175642d487dbcd78790790e2c4b8a09e2237c1af8fcf784b87402ad17364f123edc95c664a00a1e68d9f210e54b0a0e2872c4a75724742e13c3351dd3d92f3b0bdb30", @ANYRES16=r2, @ANYBLOB="100628bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000080)={0x7}, 0x0, &(0x7f00000000c0), 0x8) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140), 0x4) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 644.059180] binder: 18832:18834 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=0x0, &(0x7f0000000300)=0x4) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x147202, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @loopback, @broadcast}, &(0x7f0000000180)=0xc) bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, r4, 0x1}, 0xc) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000240)={0x1, 0x0, [{}]}) creat(&(0x7f0000000200)='./file0\x00', 0x124) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x63, 0xffffffffffffff81, 0x9, 0x101}]}, 0x10) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) [ 644.126652] binder: 18832:18846 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 644.164817] binder: 18832:18846 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:20 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000740)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x40000, 0x0) write$uinput_user_dev(r2, &(0x7f00000000c0)={'syz1\x00', {0x80, 0x3, 0x5}, 0x15, [0x2, 0x1, 0x588, 0x10000, 0x0, 0x8, 0x4, 0x100, 0x9, 0x98b, 0x5, 0x1, 0xdcd, 0x40, 0x3c3d, 0xfff, 0x400, 0x2, 0x349c, 0xaeb8, 0x6, 0x9, 0x3, 0x0, 0x80, 0x9, 0x1, 0xffffffffffffffff, 0x449843e, 0x1, 0x9, 0x8, 0x7, 0x40, 0xfffffffffffffffd, 0x4, 0xfffffffffffffffb, 0x0, 0x6, 0xffffffff, 0x2, 0x3, 0x2, 0x2, 0x0, 0x6, 0x484, 0x6, 0x80000000, 0x20, 0x1, 0xffff, 0x7, 0x2, 0x60000000000, 0x0, 0x0, 0x5, 0x101, 0xd7, 0x1, 0x0, 0x6, 0x9], [0x7fff, 0x8, 0x0, 0x8, 0x6, 0x3, 0xffffffffffffffe4, 0xd5, 0x1, 0x2, 0x1, 0xd771, 0x75, 0xfffffffffffffffb, 0x0, 0x4, 0x3f, 0x8000, 0xaba, 0x81, 0x100, 0x4, 0x5, 0x0, 0xfff, 0x100000001, 0x2, 0xa0, 0x3eb9, 0xd7, 0x0, 0x8, 0x1, 0x7, 0x200, 0x6, 0x4, 0x46ea, 0x80, 0x5, 0x3, 0xe2, 0x7, 0x1ff, 0x5, 0x0, 0x563, 0x3, 0x3d, 0x8, 0x0, 0x65, 0x1ddb, 0xfffffffffffffffd, 0xdc, 0x7, 0x1, 0x7, 0xc717, 0x2, 0xc46, 0x4, 0x6, 0x40d], [0x8, 0x3, 0x3ff, 0xff, 0x8, 0x20, 0x401, 0x8e9, 0x1f, 0x8, 0x7fd, 0xff, 0x5, 0x80000001, 0x7, 0x2, 0x1, 0x5, 0x4, 0x5fc, 0xfa1, 0xffff, 0x8, 0xff, 0x10000, 0x5, 0x8, 0x98, 0x0, 0x74b7, 0x7f, 0x6, 0x2, 0x2, 0x5, 0x1f, 0xff, 0xf4aa, 0x8001, 0x9, 0x80, 0x80000000, 0xfffffffffffffffa, 0x8, 0x8, 0x5, 0x7c667e0d, 0x85, 0xf0ab, 0xaf7, 0x4, 0x1000, 0x885, 0x9, 0x3, 0xae, 0x6, 0x7c3, 0x1, 0x1, 0x3f, 0x0, 0x1, 0x8], [0xb8e, 0x10000, 0x7, 0x2, 0x9, 0xeca, 0x7, 0x9499, 0x10001, 0x3b6, 0x7, 0x2, 0x8, 0xfffffffffffffff9, 0x6, 0x1, 0xead3, 0x100000001, 0x6, 0x8, 0x8, 0x36f1, 0x43b, 0xa3e7, 0x9, 0x6, 0x0, 0x0, 0xffffffff, 0x1, 0x9, 0x121, 0x0, 0x80000000, 0x3, 0x9, 0x0, 0x7ff, 0x0, 0x7f, 0x0, 0x672d, 0x1, 0x6, 0xffffffffffffff5c, 0x9, 0x81, 0x9, 0x3bd980b7, 0x100, 0x480000, 0x8, 0x7fffffff, 0x1000, 0x4, 0x7, 0x4, 0x7, 0xff, 0xffffffffffffffac, 0x401, 0x5, 0x100000001]}, 0x45c) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000580)={{0xa, 0x4e20, 0x74, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, {0xa, 0x4e24, 0x7, @ipv4={[], [], @remote}}, 0x80000001, [0x0, 0x1c7b, 0xd2, 0x96, 0x7fffffff, 0xff, 0x10000, 0x7fffffff]}, 0x5c) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000880)=""/195) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) kcmp(r1, r2, 0x3, r0, r0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80800) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x3f, @loopback, 0xfffffffffffffffa, 0x3, 'wrr\x00', 0x2, 0x100000001, 0x1b}, 0x2c) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(0x0, 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x3f, 0x22000) lseek(r0, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000100)=0x7) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) inotify_init1(0x80800) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x73, @empty, 0x4e23, 0x3, 'wrr\x00', 0x2, 0x4, 0x6}, 0x2c) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000100)={{0x6d, 0x5}, {0x100000001, 0x7fff}, 0x3, 0x7, 0xed}) [ 644.908924] IPVS: set_ctl: invalid protocol: 63 127.0.0.1:65530 [ 644.937712] IPVS: set_ctl: invalid protocol: 63 127.0.0.1:65530 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(0x0, 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x100, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000001100)={0x1000, &(0x7f0000000100)=""/4096}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x40}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) [ 644.959612] binder: 18882:18883 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, &(0x7f0000000100)=0x80) getsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000140)=""/27, &(0x7f0000000180)=0x1b) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(0x0, 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$ceph(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240)='./file0\x00', 0x400, 0x2, &(0x7f0000000280)=[{&(0x7f0000000400)="7d81eb639d4e8dfeb284d21475d65e9bc183c04414f3b88378a592fd80ce82e0b648ef278ef1c74263be123332d4d7cf4d3907083b5ac869e84aa59e4f3ca5d95b61e4fbd6033c64e8ddde78d8dd553b7f990d6338d31d00e41480df7caf2894efc16c8e10483e72ee14607e335110ded315e6c93c58035e0994cba3aef9532274fcc3c213887d314f00343b01c832f7b7d76f8df66795277bcae4b33b6a6d5d5cd6fefc3fc87fee65932dd7fb413fee1614a8d7d7217c33", 0xb8, 0xffff}, {&(0x7f00000004c0)="7833d810dbef2369ad270d26ac920729b6823f6b7b782b457d86a8f8e90aa053f4a5a35341d97c80886538460449f18e52727a613ec77e1f3e74597d05e87689c21e1dcc30109a953e16585dbb70a856456e58f214a3c133424bdd08ea137a119fa24ce17c54399a0575561383eec6f315c3683c175d9ac29186e03b5b0a6680f4d3d7c96055bf5f5f1215579d8b81f5419f1fbf8ac720b2841dd0c17e3c57c701a655ccfd3c21e77c7082f7ae35f823ba", 0xb1}], 0x946008, &(0x7f0000000380)='\x00') r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x60040, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f00000007c0), 0x4) getpgid(0x0) io_setup(0xfffffffffffffff7, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x20080, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000004000, 0x0, 0xfffffffe, 0x1107, 0x2000000, 0x0, 0x1000000000000, 0x0, 0x6]}}) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0245628, &(0x7f0000000040)) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x5}) request_key(&(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f00000001c0)) ioctl$TIOCSSERIAL(r4, 0x541f, &(0x7f0000000300)={0x8, 0xa5b, 0x100, 0x0, 0x63, 0x57e, 0xfffffffffffffff7, 0x0, 0x8, 0x6, 0xaf9, 0x3, 0x400, 0x69f, 0x0, 0x2, 0x1000, 0x1}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f00000002c0)) time(&(0x7f0000000180)) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @default, @bpq0='bpq0\x00', 0x8, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) [ 645.075227] binder: 18882:18898 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 645.109572] binder: 18882:18898 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60a6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x8c}}, 0x8090) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) pipe(&(0x7f0000000240)) splice(r0, 0x0, r1, 0x0, 0xc0, 0x0) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xfa4, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000100)={0x0, @reserved}) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x80000, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 1: r0 = timerfd_create(0x9, 0xfffffffffffffffe) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x40000004}) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) pipe(&(0x7f0000000240)) splice(r0, 0x0, r1, 0x0, 0xc0, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000000c0)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000040)={0x2, 0x7ff, 0xd6}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 645.813071] binder: 18940:18943 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000000c0)={0x7, 0x6, 0x1, 'queue0\x00', 0x10001}) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000180)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) pipe(&(0x7f0000000240)) splice(r0, 0x0, r1, 0x0, 0xc0, 0x0) [ 645.913485] binder: 18940:18943 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 645.929368] binder: 18940:18943 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffffffff, 0x1, 0x1, 0x2, 0x4, 0x3}, &(0x7f0000000080)=0x20) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x200000000000800) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) close(0xffffffffffffffff) pipe(&(0x7f0000000240)) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xc0, 0x0) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xb7, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000000c0)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x1, 0x2, 0x42a4}) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0xfffffffffffffff9}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = accept(r0, &(0x7f00000000c0)=@ipx, &(0x7f0000000040)=0x80) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xa9, "b0113d33e2b3ef82f499a9e33f222ba9a8e2e9cc493362df3bd59b0f8a2f976d3341fb8e7cf5a2073f57ac4bb69cceadf23af755ca45994d208fc13fce716805253ba49ed11410dccbaef5d35b4321cd471e817083e9a6aac5fd0684e73b0a0f0cbab97bb8c83758a79d67df6aeed35bad84b220f92459bdd7de188640e74ad8bf145c034d791ae480512b91305642163d629ee745ee5a43963a2bb24d40308e18fe06827c7bd56e23"}, &(0x7f0000000200)=0xb1) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000240)={r3, 0x7fffffff, 0x5c, "c1f2780588036477eec882c21a0f889bfb195960ebab4e71399752110ebdbdf062a17dba9a2b9d7ed526379dbe1aba3cd08c73403f8100047a1e9dc5700c78c4f6ac27298198556d1acc0c95f3c00f52dbf19b31b4af82e6713a8878"}, 0x64) connect$nfc_llcp(r2, &(0x7f00000004c0)={0x27, 0x0, 0x1, 0x2, 0x100000000, 0x3, "bb8d7ae60c5d2d2b1e60784830f099af5be58d319d6b6db19483497dd7294f05af6883f6b1fb95fe134c038249f626fb0af6b144c001213a977c2b38cf135e", 0xd}, 0x60) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x5}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x14) connect$llc(r2, &(0x7f00000003c0)={0x1a, 0x311, 0x8, 0x8, 0x100000000}, 0x10) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000080)={0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}]}) 03:33:20 executing program 1: timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000080)={0x77359400}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) close(0xffffffffffffffff) pipe(&(0x7f0000000240)) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xc0, 0x0) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x204640, 0x0) sendmsg$nl_generic(r2, &(0x7f0000001200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000100)={0x10b4, 0x33, 0x10, 0x70bd26, 0x25dfdbfc, {0x18}, [@typed={0xc, 0x56, @str='^wlan1\x00'}, @nested={0x1024, 0x5d, [@typed={0x1004, 0x36, @binary="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"}, @generic="8add2a5eb7aa51de4e685d796c738145dffecec97c570dc94116932d"]}, @generic="e91374b58ad1bf979ee25c0c0070568daf5bdd1ea61e6ed5310d580f5233f38e7f1f179c78cb17b77f046b864d4dc948a4ec15ab5b912870d5cb18fb356d6b51de954c8a49a324d98c81bdc2bf3b42049fbc5fcf1a4862face4cfb74ec496612ed9ad45988874362230af1aab02a"]}, 0x10b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r1 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000280)={0x0, @ctrl={0x0, 0x0, @value64}}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) close(0xffffffffffffffff) pipe(&(0x7f0000000240)) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xc0, 0x0) [ 646.736686] binder: 18980:18996 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 646.775405] binder: 18980:18996 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0xffffffffffffffff) close(r1) pipe(&(0x7f0000000240)) splice(r0, 0x0, r1, 0x0, 0xc0, 0x0) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0xffffffffffffffff) close(r1) pipe(&(0x7f0000000240)) splice(r0, 0x0, r1, 0x0, 0xc0, 0x0) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x8000000}) userfaultfd(0x800) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(0x0, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0xffffffffffffffff) close(r1) pipe(&(0x7f0000000240)) splice(r0, 0x0, r1, 0x0, 0xc0, 0x0) [ 647.468104] kauditd_printk_skb: 13 callbacks suppressed [ 647.468136] audit: type=1804 audit(2000000000.640:243): pid=19025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/603/bus" dev="sda1" ino=16611 res=1 [ 647.574861] binder: 19024:19037 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 647.589967] binder: 19024:19037 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 647.597998] audit: type=1804 audit(2000000000.750:244): pid=19036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/604/bus" dev="sda1" ino=16574 res=1 03:33:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x40000001, 0x0) r1 = dup2(r0, r0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000240)="1783d2789846369cb088f84843ca7f563702ed565752caeb", 0x18}], 0x1) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(0x0, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000001d80)='/dev/midi#\x00', 0xfffffffffffffff7, 0x8000) connect(r0, &(0x7f0000008e40)=@generic={0x1, "6961e68cde255a61987836348d6c71ae647943d05335e84ff24164948fb65f9b05418728d65bc579eb411446351999b597dda37d4f11ad4742d15df9bf3cce41780eacb2fb31e3e1733962f7b5205c0f9a11432dd48aa4082ce92384f950743549f5a3d099a475f123effb19fc59f4f5c26cd9f2de591ce3f1ebdbcc86c5"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x406, r1) bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) clock_gettime(0x0, &(0x7f0000008dc0)={0x0, 0x0}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000008ec0)='net/rt_acct\x00') epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r1) recvmmsg(r2, &(0x7f0000008b40)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/10, 0xa}], 0x1, &(0x7f0000000300)=""/71, 0x47}, 0x6}, {{&(0x7f0000000380)=@caif=@dgm, 0x80, &(0x7f0000000800)=[{&(0x7f0000000400)=""/142, 0x8e}, {&(0x7f00000004c0)=""/27, 0x1b}, {&(0x7f0000000500)=""/126, 0x7e}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/102, 0x66}, {&(0x7f0000000700)=""/201, 0xc9}], 0x6, &(0x7f0000000880)=""/136, 0x88}, 0x675d53e6}, {{&(0x7f0000000940)=@un=@abs, 0x80, &(0x7f0000000b40)=[{&(0x7f00000009c0)=""/150, 0x96}, {&(0x7f0000000a80)=""/137, 0x89}], 0x2, &(0x7f0000000b80)=""/27, 0x1b}, 0x4}, {{&(0x7f0000000bc0)=@caif=@util, 0x80, &(0x7f0000002040)=[{&(0x7f0000000c40)=""/206, 0xce}, {&(0x7f0000000d40)=""/2, 0x2}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/156, 0x9c}, {&(0x7f0000001e80)=""/37, 0x25}, {&(0x7f0000001ec0)=""/169, 0xa9}], 0x7}, 0x2}, {{&(0x7f00000020c0)=@sco, 0x80, &(0x7f0000003300)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/103, 0x67}, {&(0x7f0000001f80)=""/24, 0x18}, {&(0x7f00000031c0)=""/174, 0xae}, {&(0x7f0000003280)=""/124, 0x7c}], 0x5, &(0x7f0000003380)=""/12, 0xc}, 0x2}, {{&(0x7f00000033c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/110, 0x6e}], 0x1}, 0x18}, {{0x0, 0x0, &(0x7f0000005880)=[{&(0x7f0000003500)=""/202, 0xca}, {&(0x7f0000003600)=""/62, 0x3e}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/217, 0xd9}, {&(0x7f0000004740)=""/131, 0x83}, {&(0x7f0000004800)=""/62, 0x3e}, {&(0x7f0000004840)=""/4096, 0x1000}, {&(0x7f0000005840)=""/55, 0x37}], 0x8, &(0x7f0000005900)=""/137, 0x89}, 0xe0}, {{&(0x7f00000059c0)=@x25, 0x80, &(0x7f0000005c80)=[{&(0x7f0000005a40)=""/43, 0x2b}, {&(0x7f0000005a80)=""/191, 0xbf}, {&(0x7f0000005b40)=""/168, 0xa8}, {&(0x7f0000005c00)=""/110, 0x6e}], 0x4, &(0x7f0000005cc0)=""/149, 0x95}, 0x5f5a3e24}, {{&(0x7f0000005d80)=@can, 0x80, &(0x7f0000006200)=[{&(0x7f0000005e00)=""/221, 0xdd}, {&(0x7f0000005f00)=""/181, 0xb5}, {&(0x7f0000005fc0)=""/141, 0x8d}, {&(0x7f0000006080)=""/224, 0xe0}, {&(0x7f0000006180)=""/96, 0x60}], 0x5, &(0x7f0000006280)=""/174, 0xae}, 0xda}, {{&(0x7f0000006340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000008980)=[{&(0x7f00000063c0)=""/103, 0x67}, {&(0x7f0000006440)=""/230, 0xe6}, {&(0x7f0000006540)=""/147, 0x93}, {&(0x7f0000006600)=""/4096, 0x1000}, {&(0x7f0000007600)=""/248, 0xf8}, {&(0x7f0000007700)=""/195, 0xc3}, {&(0x7f0000007800)=""/3, 0x3}, {&(0x7f0000007840)=""/243, 0xf3}, {&(0x7f0000007940)=""/4096, 0x1000}, {&(0x7f0000008940)=""/45, 0x2d}], 0xa, &(0x7f0000008a40)=""/239, 0xef}, 0x9}], 0xa, 0x0, &(0x7f0000008e00)={r3, r4+10000000}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000140)="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") 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) [ 647.719556] audit: type=1804 audit(2000000000.070:245): pid=19049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/605/bus" dev="sda1" ino=16612 res=1 [ 647.802967] input: syz1 as /devices/virtual/input/input52 [ 647.835021] input: syz1 as /devices/virtual/input/input53 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(0x0, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2080, 0x0) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x400300, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x34, 0x5, 0x0, 0x0, {0x2801, 0x1000000}, [@nested={0x4}]}, 0x18}}, 0x0) 03:33:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x22, 0x0, 0x0, 0x9b11}, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 648.316092] audit: type=1804 audit(2000000000.670:246): pid=19070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/606/bus" dev="sda1" ino=16602 res=1 03:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x484080) epoll_pwait(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x6, 0x4, &(0x7f0000000180)={0x38000000000}, 0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000002c0)=@get={0x1, &(0x7f00000001c0)=""/197, 0x40a0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) r3 = dup2(r2, r2) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000040)=0x40) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 648.391173] binder: 19072:19081 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 648.420807] binder: 19072:19081 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:20 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000), 0x0) flock(0xffffffffffffffff, 0x0) gettid() fstat(0xffffffffffffffff, &(0x7f0000000600)) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000540)={0x20, 0x0, 0x2, {0x0, 0x5}}, 0x20) chdir(&(0x7f0000000180)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x4) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000400)=""/124) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000140)='bond_slave_1\x00'}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x8, 0x6, 0x8000}, 0xfffffffffffffcf2) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, "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", 0x1000}, 0xfffffc41) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x324}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r2, &(0x7f0000000000), 0x1c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000100)=@proc, 0xc, &(0x7f0000000440), 0x0, &(0x7f0000000d00)}, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 648.462987] audit: type=1804 audit(2000000000.820:247): pid=19083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/607/bus" dev="sda1" ino=16584 res=1 03:33:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 648.616977] audit: type=1804 audit(2000000000.880:248): pid=19093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/571/bus" dev="sda1" ino=16590 res=1 [ 648.657724] audit: type=1804 audit(2000000000.960:249): pid=19103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/608/bus" dev="sda1" ino=16579 res=1 03:33:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:21 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xbb40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0x0) stat(0x0, 0x0) getuid() getegid() r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) unshare(0x40000000) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x800, 0x0, 0x20, 0xffff, 0x80000001, 0x9, 0x48, 0xd2e, 0x7, 0x3, 0x8000, 0x9, 0x5, 0xfbfa, 0x5f, 0xfffffffffffffffa, 0x2, 0x2, 0x9, 0x9, 0xb4, 0x0, 0x3, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffff6bd, 0x0, @perf_config_ext={0xccd, 0x15}, 0x80, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffff26c, 0x2}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xb) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000080)={0xf, 0x3e, {0x56, 0x3a, 0x0, {0x3f, 0x7fffffff}, {0xfffffffffffffffb, 0x8}, @const={0x9fd, {0x6, 0x80000001, 0x2b2, 0x6bc8}}}, {0x57, 0x3ff, 0x66c9240f, {0x1, 0xf6a6}, {0x1}, @ramp={0x7, 0x8, {0x0, 0x400, 0x5, 0x886}}}}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='personality\x00`\xe0\x7fm\t\xd5Z\xf7bYNcnS~\x15Z\xcc\xa2\x9f\x98=\xd6P\xe0\x14\xce}H\xe8\x7f}\xa7\xb0\x85iSb\x9f\x00j2m{Z\xfd\x88\n\xa9\nzP\xf0\x16\xe1\x81\xe0\"-\xce\xe55\xc6\xba>\xb2\xf8\x04\xa6\xc7\xc8\xf4\x13\xdb\x04\xb3\x0f\xe8;b\xb0\xfc\x1d\f\x10\xa5\x04\xe3HH\x9d\x9c\x19PP\x9a\x86\xe0\x8d\\S\xcd\x11\x8d\x1b\x8bb\xe2\xde{j\xe5B\xe4\xdb\x02?\xd0\bT\xc6W\xffLE?\xc3\x8a\xf2\xf87\x8eK\xb4\xe92\f\xe7\xe7x\x80\x93\xf9-\xcb\xe0,45\x8b\xf2\xff\x8c') ioctl$EVIOCSABS2F(r2, 0x401845ef, 0x0) 03:33:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3ff, 0x40) write$P9_RLCREATE(r1, &(0x7f0000000140)={0x18, 0xf, 0x1, {{0x2, 0x1, 0x1}, 0x400}}, 0x18) r2 = userfaultfd(0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x846fe) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000000c0)=0x80000000, 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) pread64(r1, &(0x7f00000001c0)=""/148, 0x94, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socket$inet(0x2, 0xa, 0x803) 03:33:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 649.170223] audit: type=1804 audit(2000000001.520:250): pid=19117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/609/bus" dev="sda1" ino=16611 res=1 03:33:21 executing program 0: close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) close(r1) pipe(&(0x7f0000000240)) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xc0, 0x0) 03:33:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x2000000000000803}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 649.295271] binder: 19121:19134 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 649.354782] binder: 19121:19138 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 649.362958] audit: type=1804 audit(2000000001.530:251): pid=19119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/572/bus" dev="sda1" ino=16701 res=1 [ 649.403870] IPVS: ftp: loaded support on port[0] = 21 [ 649.460640] audit: type=1804 audit(2000000001.620:252): pid=19129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/573/bus" dev="sda1" ino=16701 res=1 [ 649.783113] IPVS: ftp: loaded support on port[0] = 21 03:33:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) set_robust_list(&(0x7f0000000140)={&(0x7f00000000c0), 0x5eca0964, &(0x7f0000000100)}, 0x18) ioctl(r0, 0x1000008912, &(0x7f0000000180)="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") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0xbe52, &(0x7f00000002c0)=0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:22 executing program 0: close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) close(r1) pipe(&(0x7f0000000240)) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xc0, 0x0) 03:33:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x2) sendfile(r0, r0, 0x0, 0x800000000000de) 03:33:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000013000/0x1000)=nil, 0x1000}, 0xfffffffffffffffe}) 03:33:22 executing program 0: close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) close(r1) pipe(&(0x7f0000000240)) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xc0, 0x0) 03:33:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 650.146209] binder: 19150:19164 BC_CLEAR_DEATH_NOTIFICATION death notification not active 03:33:22 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffffffffffffc, &(0x7f0000000080)=0x10001) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0) poll(&(0x7f0000000000)=[{r0}, {r1, 0x8000}], 0x2, 0x1ff) ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) [ 650.187364] binder: 19150:19175 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) setsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f0000000040)=0x4, 0x4) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:23 executing program 0: r0 = socket(0x0, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:23 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)) 03:33:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_buf(r1, 0x29, 0x3e, 0x0, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 03:33:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x1, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x0, 0x0) sched_setparam(0x0, &(0x7f0000000000)=0x96a4) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x12000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x6a) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000001, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000040)={0x80000001, 0x4, 0x8, 'queue0\x00', 0x80}) write$P9_RREMOVE(r3, &(0x7f0000000000)={0x7}, 0x7) recvmmsg(r2, &(0x7f00000001c0), 0x315, 0xea225aec34b1dd0e, 0x0) 03:33:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:23 executing program 0: r0 = socket(0x0, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) [ 650.972411] binder: 19195:19206 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 651.007442] binder: 19195:19206 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:23 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:24 executing program 0: r0 = socket(0x0, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x1, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x0, 0x0) sched_setparam(0x0, &(0x7f0000000000)=0x96a4) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x12000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x6a) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000001, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000040)={0x80000001, 0x4, 0x8, 'queue0\x00', 0x80}) write$P9_RREMOVE(r3, &(0x7f0000000000)={0x7}, 0x7) recvmmsg(r2, &(0x7f00000001c0), 0x315, 0xea225aec34b1dd0e, 0x0) 03:33:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x3, 0x6) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000040)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=[{0x10, 0x0, 0x7}], 0x10}, 0x0) 03:33:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usb(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r1, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) 03:33:24 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 651.756898] binder: 19240:19247 ioctl c0306201 0 returned -14 03:33:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x20001000) 03:33:24 executing program 0: r0 = socket(0x10, 0x0, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) [ 651.858434] binder: 19240:19254 BC_CLEAR_DEATH_NOTIFICATION death notification not active 03:33:24 executing program 0: r0 = socket(0x10, 0x0, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) [ 651.903760] binder: 19240:19254 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) 03:33:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x20001000) 03:33:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000140)}) 03:33:24 executing program 0: r0 = socket(0x10, 0x0, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:24 executing program 2: clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c9) ptrace(0x11, r0) 03:33:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 652.599734] binder: 19281:19285 ioctl c0306201 0 returned -14 [ 652.605795] kauditd_printk_skb: 16 callbacks suppressed [ 652.605803] audit: type=1804 audit(2000000004.950:269): pid=19286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/617/bus" dev="sda1" ino=16858 res=1 03:33:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x20001000) [ 652.696682] audit: type=1804 audit(2000000004.970:270): pid=19287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/583/bus" dev="sda1" ino=16860 res=1 [ 652.704970] binder: 19281:19290 BC_CLEAR_DEATH_NOTIFICATION death notification not active 03:33:25 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0xffffffffffffffff) close(r0) close(0xffffffffffffffff) 03:33:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) [ 652.756484] binder: 19281:19301 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 652.887728] audit: type=1804 audit(2000000005.120:271): pid=19297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/584/bus" dev="sda1" ino=16837 res=1 [ 652.927888] audit: type=1804 audit(2000000005.130:272): pid=19300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/618/bus" dev="sda1" ino=16842 res=1 [ 652.956698] audit: type=1804 audit(2000000005.240:273): pid=19312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/585/bus" dev="sda1" ino=16755 res=1 03:33:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180), 0x0, 0x20001000) 03:33:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:25 executing program 1: 03:33:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:25 executing program 2: 03:33:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) [ 653.414608] audit: type=1804 audit(2000000005.770:274): pid=19323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/586/bus" dev="sda1" ino=16771 res=1 03:33:25 executing program 1: getpgrp(0x0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f059018ebaf373a701a455fcc070000000000000008bb6bd4d185b95b0c5c4fbd4de7b2a8a4bc6b040000f79b4c770006c0080000000040"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:33:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 653.484833] binder: 19326:19329 ioctl c0306201 0 returned -14 03:33:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180), 0x0, 0x20001000) [ 653.521502] audit: type=1804 audit(2000000005.840:275): pid=19327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/619/bus" dev="sda1" ino=16835 res=1 [ 653.560502] binder: 19326:19340 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 653.609299] binder: 19326:19346 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 653.649734] audit: type=1804 audit(2000000005.940:276): pid=19338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/587/bus" dev="sda1" ino=16846 res=1 [ 653.685395] audit: type=1804 audit(2000000006.040:277): pid=19352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/620/bus" dev="sda1" ino=16861 res=1 03:33:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:26 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a29de644", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="050300000d000000230200000000000000000000000000000a00000000000000961100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfef9ce76adf295520a05800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000f000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000843d000000000000000000000000000000000000000000000000009d9adf9a"], 0x22f) 03:33:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180), 0x0, 0x20001000) 03:33:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 03:33:26 executing program 2: 03:33:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0xffffffffffffffff) close(r1) pipe(&(0x7f0000000240)) splice(r0, 0x0, r1, 0x0, 0xc0, 0x0) [ 654.315888] audit: type=1804 audit(2000000006.670:278): pid=19369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/588/bus" dev="sda1" ino=16846 res=1 03:33:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{0x0}], 0x1, 0x20001000) 03:33:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x20001000) 03:33:26 executing program 1: 03:33:26 executing program 2: 03:33:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0xffffffffffffffff) close(r1) pipe(&(0x7f0000000240)) splice(r0, 0x0, r1, 0x0, 0xc0, 0x0) 03:33:26 executing program 1: [ 654.455878] binder: 19370:19384 BC_CLEAR_DEATH_NOTIFICATION death notification not active 03:33:26 executing program 2: 03:33:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{0x0}], 0x1, 0x20001000) [ 654.521801] binder: 19370:19384 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:27 executing program 1: 03:33:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0xffffffffffffffff) close(r1) pipe(&(0x7f0000000240)) splice(r0, 0x0, r1, 0x0, 0xc0, 0x0) 03:33:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x20001000) 03:33:27 executing program 2: 03:33:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{0x0}], 0x1, 0x20001000) 03:33:27 executing program 1: 03:33:27 executing program 2: 03:33:27 executing program 1: 03:33:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x0) 03:33:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(0xffffffffffffffff) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x20001000) [ 655.332945] binder: 19412:19425 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 655.388649] binder: 19412:19428 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:28 executing program 2: 03:33:28 executing program 1: 03:33:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x0) 03:33:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(0xffffffffffffffff) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180), 0x0, 0x20001000) 03:33:28 executing program 2: 03:33:28 executing program 1: 03:33:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(0xffffffffffffffff) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:28 executing program 1: 03:33:28 executing program 2: 03:33:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x0) [ 656.228275] binder: 19443:19449 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 656.258582] binder: 19443:19449 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180), 0x0, 0x20001000) 03:33:29 executing program 2: 03:33:29 executing program 1: 03:33:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(0x0) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:29 executing program 5: 03:33:29 executing program 1: 03:33:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(0x0) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:29 executing program 5: 03:33:29 executing program 2: 03:33:29 executing program 1: 03:33:29 executing program 2: [ 657.118582] binder: 19467:19481 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 657.138191] binder: 19467:19481 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:30 executing program 5: 03:33:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180), 0x0, 0x20001000) 03:33:30 executing program 1: 03:33:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(0x0) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:30 executing program 2: 03:33:30 executing program 2: 03:33:30 executing program 5: 03:33:30 executing program 1: 03:33:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xc0, 0x0) [ 657.893616] kauditd_printk_skb: 12 callbacks suppressed [ 657.893626] audit: type=1804 audit(2000000010.250:291): pid=19492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/594/bus" dev="sda1" ino=16964 res=1 03:33:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{0x0}], 0x1, 0x20001000) 03:33:30 executing program 2: [ 657.968424] binder: 19487:19499 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 658.019221] binder: 19487:19506 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 658.069627] audit: type=1804 audit(2000000010.420:292): pid=19508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/595/bus" dev="sda1" ino=16928 res=1 03:33:31 executing program 5: 03:33:31 executing program 1: 03:33:31 executing program 2: 03:33:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{0x0}], 0x1, 0x20001000) 03:33:31 executing program 2: 03:33:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:31 executing program 5: 03:33:31 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0) io_setup(0x5fa7, &(0x7f0000000140)) 03:33:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{0x0}], 0x1, 0x20001000) [ 658.742347] audit: type=1804 audit(2000000011.100:293): pid=19520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/596/bus" dev="sda1" ino=16980 res=1 03:33:31 executing program 2: 03:33:31 executing program 5: 03:33:31 executing program 2: 03:33:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xc0, 0x0) 03:33:31 executing program 5: [ 658.871856] audit: type=1804 audit(2000000011.230:294): pid=19534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/597/bus" dev="sda1" ino=16983 res=1 [ 658.913007] binder: 19519:19539 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 658.938930] binder: 19519:19536 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xc0, 0x0) 03:33:31 executing program 2: 03:33:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x0) 03:33:31 executing program 5: 03:33:31 executing program 1: 03:33:32 executing program 5: 03:33:32 executing program 2: 03:33:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xc0, 0x0) 03:33:32 executing program 1: 03:33:32 executing program 5: 03:33:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x0) [ 659.692119] audit: type=1804 audit(2000000012.050:295): pid=19562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/598/bus" dev="sda1" ino=16969 res=1 [ 659.787676] binder: 19561:19569 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 659.805622] audit: type=1804 audit(2000000012.160:296): pid=19572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/599/bus" dev="sda1" ino=16965 res=1 03:33:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:32 executing program 2: 03:33:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 03:33:32 executing program 1: 03:33:32 executing program 5: 03:33:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x0) 03:33:32 executing program 2: 03:33:32 executing program 5: [ 660.473643] binder: undelivered death notification, 0000000000000000 03:33:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 03:33:32 executing program 2: 03:33:32 executing program 1: 03:33:32 executing program 5: [ 660.579277] audit: type=1804 audit(2000000012.930:297): pid=19589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir774639695/syzkaller.hI5OJ9/600/bus" dev="sda1" ino=16965 res=1 [ 660.697247] binder: 19588:19597 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:33 executing program 1: 03:33:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 03:33:33 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) llistxattr(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) 03:33:33 executing program 4: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x42}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:33:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:33 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) getsockopt$netlink(r0, 0x10e, 0x1, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) membarrier(0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) prctl$PR_SET_FPEXC(0xc, 0x0) [ 661.370077] binder: undelivered death notification, 0000000000000000 03:33:33 executing program 1: mkdir(&(0x7f0000000680)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000340)=""/213) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = memfd_create(&(0x7f0000000300)='}}-\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="73797a31d96d5de2361ec735eaefbbc44b0a03a9645afc4ef1be01fa8dff6aa640797e93fc6bbbc58165ebea25878b8a8da2d63190b8f323d79e28943ebc6e05f442ec8ab4712531e6e3d021fdf638ff2137a52dc71c80e25e20f731587ce34cbe77220c3f5db36901af8b7629eef90f06d348fae6234b600f5f381561299e4a"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) 03:33:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0xffffffffffffffff) close(r1) pipe(&(0x7f0000000240)) splice(r0, 0x0, r1, 0x0, 0xc0, 0x0) 03:33:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:33 executing program 5: syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(0x0, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 661.506711] binder: 19610:19630 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 661.538663] audit: type=1804 audit(2000000013.890:298): pid=19629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir445493227/syzkaller.Ie9b55/563/bus" dev="sda1" ino=16971 res=1 03:33:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:34 executing program 4 (fault-call:8 fault-nth:0): r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) [ 661.684861] audit: type=1804 audit(2000000013.970:299): pid=19637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/643/bus" dev="sda1" ino=16843 res=1 [ 661.797009] audit: type=1804 audit(2000000014.020:300): pid=19642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir048957282/syzkaller.7hWPqf/656/bus" dev="sda1" ino=17007 res=1 03:33:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:34 executing program 5 (fault-call:9 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:34 executing program 0 (fault-call:11 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001140)="0adc03263c343f319bd070") syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="756d61736b3d30306d80303030303030303030301900003030303030322c747970ff3d5113f4a2c764fe31e7b9ea8cb212d66f9afc21"]) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000180)=0x1) [ 662.220918] binder: undelivered death notification, 0000000000000000 [ 662.282968] hfsplus: unable to parse mount options [ 662.290689] binder: 19660:19665 ioctl c0306201 0 returned -14 [ 662.299137] FAULT_INJECTION: forcing a failure. [ 662.299137] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 662.304097] FAULT_INJECTION: forcing a failure. [ 662.304097] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 662.311726] CPU: 1 PID: 19661 Comm: syz-executor.0 Not tainted 4.14.112 #2 [ 662.329924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 662.339290] Call Trace: [ 662.341892] dump_stack+0x138/0x19c [ 662.345536] should_fail.cold+0x10f/0x159 [ 662.349697] ? __might_sleep+0x93/0xb0 [ 662.353594] __alloc_pages_nodemask+0x1d6/0x7a0 [ 662.358272] ? fsnotify+0x933/0x11e0 [ 662.361992] ? __alloc_pages_slowpath+0x2930/0x2930 [ 662.367023] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 662.373715] alloc_pages_current+0xec/0x1e0 [ 662.378055] __get_free_pages+0xf/0x40 [ 662.381956] mem_rw.isra.0+0x72/0x2e0 [ 662.382184] binder: 19660:19668 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 662.385772] ? security_file_permission+0x8f/0x1f0 [ 662.385789] mem_read+0x52/0x70 [ 662.385803] do_iter_read+0x3e7/0x5b0 [ 662.385824] vfs_readv+0xd3/0x130 [ 662.385837] ? compat_rw_copy_check_uvector+0x310/0x310 [ 662.385864] ? __fget+0x237/0x370 [ 662.417588] ? __fget_light+0x172/0x1f0 [ 662.421573] do_preadv+0x15d/0x200 [ 662.425123] ? do_readv+0x220/0x220 [ 662.428764] ? SyS_writev+0x30/0x30 [ 662.432399] SyS_preadv+0x31/0x40 [ 662.435878] do_syscall_64+0x1eb/0x630 [ 662.439773] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 662.444640] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 662.449873] RIP: 0033:0x458c29 [ 662.453065] RSP: 002b:00007f3b78932c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 662.460789] RAX: ffffffffffffffda RBX: 00007f3b78932c90 RCX: 0000000000458c29 [ 662.468080] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000008 [ 662.475384] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 03:33:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) openat$userio(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/userio\x00', 0x84, 0x0) fanotify_init(0x12, 0x80000) openat$vhci(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vhci\x00', 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000200)=""/86) sendmsg(r0, &(0x7f0000000940)={&(0x7f0000000140)=@nl=@proc={0x10, 0x0, 0x25dfdbfe}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)="15f0d9ab8bbd26d1f092dc5c1f67c28b", 0x10}], 0x1}, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x278, 0x80) syz_mount_image$bfs(&(0x7f0000000100)='bfs\x00', &(0x7f0000000280)='./file0\x00', 0xe69f, 0x5, &(0x7f0000000640)=[{&(0x7f0000000300)="19e56833e877176c795ab38c4028c178eebfac2e69376b5833c14e124b510d956b95bbf207ebcbe869d1b3a13542e9d9", 0x30, 0x80000001}, {&(0x7f0000000340)="0376c2241a539dcb65951637665495b7152398c0ba32bb53db78393dbceb46e4d23a78d43f5e0490e6d780f00adf06fba94f2e36276dbcc8ddeecf7d5ebefed76909a2992716f31839feb25676fef740a49696cf2b8f63e7e3b48dde7b05c08585ae991d2a6de31b742fcaac955ae0238110dbed1ce74a01080e75e5c9cdfda9c08a0d2aeafe312494dc0b4f8c0a25542fe9f521aa3a8fe7d9337e6b7fce168f75c7812fab1849e2117ce93861555bc458a805d866dd2fa400336d11b7e947f9e0fc407bdc", 0xc5, 0x800}, {&(0x7f0000000440)="85b044275dbc8b0da2810629a8f9fd9cf1711b119b978c5c648572de6da0", 0x1e, 0x4}, {&(0x7f0000000480)="37d1774cf7d49b9f1a82769f8a956e4eb4040fca2275efab1799e980d7bfeed79513f4a7c1691dc8c7d9a0f017596527503d68017b993bda61f181156a210c9b90fce5bd75fee9289a25432e1ce404baf832b3ee1bcde606471305a29a8cd00d646bc9e8624182968e5bf54ba308b34e7d0b", 0x72, 0xf039}, {&(0x7f0000000540)="115ea09152f41b0a4709e9e0b842125dbed0587f4883e2ac3b12c76c6b490477b079744cbac64301204acf5951ca9f5d0d6cc2143528ef4c5ef935f3b2212c2edec6c65c43bc775035f8ccade21fc623c0d160b4afeba1ae589e0ed2d5384c02eea291e867fccfca14bff71823c4b4131561a5180e2ac247799f5dff9a13cea7eece89c48f665d8cd636aad08eb1fe1ce69eeea5df45477174e4984a5c1b21e4e15dde1053b3274348cd5f6253f4499571fcc36e94430e8c2a9c0640de461a4bcae5a54f11b656c027c7a512cc4ab4d6b83358ec9e92515231f1f113650dad00d0863afde10bc72d31aea915ca54ca", 0xef, 0x1}], 0x88000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r2}, 0x10) [ 662.482663] R10: 0000000020001000 R11: 0000000000000246 R12: 00007f3b789336d4 [ 662.489941] R13: 00000000004c5969 R14: 00000000004d9cc8 R15: 0000000000000009 [ 662.497244] CPU: 0 PID: 19664 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 662.504303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 662.513762] Call Trace: [ 662.516368] dump_stack+0x138/0x19c [ 662.520012] should_fail.cold+0x10f/0x159 [ 662.524176] ? __might_sleep+0x93/0xb0 [ 662.526273] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48523 sclass=netlink_tcpdiag_socket pig=19671 comm=syz-executor.2 [ 662.528076] __alloc_pages_nodemask+0x1d6/0x7a0 [ 662.528088] ? fsnotify+0x933/0x11e0 [ 662.528101] ? __alloc_pages_slowpath+0x2930/0x2930 [ 662.528117] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 662.545451] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48523 sclass=netlink_tcpdiag_socket pig=19671 comm=syz-executor.2 [ 662.549097] alloc_pages_current+0xec/0x1e0 [ 662.549115] __get_free_pages+0xf/0x40 [ 662.549127] mem_rw.isra.0+0x72/0x2e0 [ 662.549143] ? security_file_permission+0x8f/0x1f0 [ 662.590256] mem_read+0x52/0x70 [ 662.593523] do_iter_read+0x3e7/0x5b0 [ 662.597348] vfs_readv+0xd3/0x130 [ 662.600809] ? compat_rw_copy_check_uvector+0x310/0x310 [ 662.606169] ? __fget+0x237/0x370 [ 662.609632] ? __fget_light+0x172/0x1f0 [ 662.613610] do_preadv+0x15d/0x200 [ 662.617160] ? do_readv+0x220/0x220 [ 662.620773] ? SyS_writev+0x30/0x30 [ 662.624396] SyS_preadv+0x31/0x40 [ 662.627838] do_syscall_64+0x1eb/0x630 [ 662.631710] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 662.636552] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 662.641765] RIP: 0033:0x458c29 [ 662.644942] RSP: 002b:00007f8698ff1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 662.652651] RAX: ffffffffffffffda RBX: 00007f8698ff1c90 RCX: 0000000000458c29 [ 662.659915] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000007 [ 662.667203] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 662.674485] R10: 0000000020001000 R11: 0000000000000246 R12: 00007f8698ff26d4 03:33:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="760a90", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040004,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000640), 0x4) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.ima\x00', &(0x7f0000000580)=@ng={0x4, 0x8, 'L'}, 0x3, 0x2) r1 = accept(0xffffffffffffff9c, &(0x7f0000000340), &(0x7f00000001c0)=0x80) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000002c0)) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 03:33:35 executing program 0 (fault-call:11 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 662.681761] R13: 00000000004c5969 R14: 00000000004d9cc8 R15: 0000000000000008 [ 662.698065] FAULT_INJECTION: forcing a failure. [ 662.698065] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 662.724826] CPU: 0 PID: 19650 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 662.731861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 662.741272] Call Trace: [ 662.743883] dump_stack+0x138/0x19c [ 662.747532] should_fail.cold+0x10f/0x159 [ 662.751693] ? __might_sleep+0x93/0xb0 [ 662.755586] __alloc_pages_nodemask+0x1d6/0x7a0 [ 662.755603] ? __alloc_pages_slowpath+0x2930/0x2930 [ 662.755621] ? __lock_acquire+0x5f9/0x45e0 [ 662.755638] alloc_pages_current+0xec/0x1e0 [ 662.755653] pte_alloc_one+0x1a/0x100 [ 662.755664] __pte_alloc+0x2a/0x2d0 [ 662.777721] __handle_mm_fault+0x2a8b/0x3470 [ 662.777739] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 662.777751] ? find_held_lock+0x35/0x130 [ 662.777763] ? handle_mm_fault+0x1b6/0x7c0 [ 662.777787] handle_mm_fault+0x293/0x7c0 [ 662.785830] __do_page_fault+0x4c1/0xb80 [ 662.785847] ? vmalloc_fault+0xe60/0xe60 [ 662.785861] ? page_fault+0x2f/0x50 [ 662.785876] do_page_fault+0x71/0x515 [ 662.785886] ? page_fault+0x2f/0x50 [ 662.785898] page_fault+0x45/0x50 [ 662.785910] RIP: 0033:0x4737fd [ 662.798197] hfsplus: unable to parse mount options [ 662.799447] RSP: 002b:00007fca46ffe4d0 EFLAGS: 00010246 [ 662.799458] RAX: 00007fca46ffe5f0 RBX: 0000000000712f20 RCX: 00000000ffffffff [ 662.799465] RDX: 00007fca47000ba0 RSI: 00000000004c9360 RDI: 0000000000712f20 [ 662.799472] RBP: 00007fca47000b70 R08: 0000000000a54ef0 R09: 00000000004c9360 [ 662.799479] R10: 00007fca47001700 R11: 0000000000000000 R12: 00000000004c9360 [ 662.799486] R13: 00007fca47000ba0 R14: 00000000004dd340 R15: 0000000000000007 [ 662.866437] FAULT_INJECTION: forcing a failure. 03:33:35 executing program 5 (fault-call:9 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 662.866437] name fail_page_alloc, interval 1, probability 0, space 0, times 0 03:33:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xfffffffffffffed6, 0x200007fd, &(0x7f00000008c0)={0x2, 0x0, @local}, 0xfffffffffffffe9c) [ 662.939221] kauditd_printk_skb: 7 callbacks suppressed [ 662.939231] audit: type=1804 audit(2000000015.290:308): pid=19686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/646/bus" dev="sda1" ino=16992 res=1 [ 662.950678] CPU: 1 PID: 19681 Comm: syz-executor.0 Not tainted 4.14.112 #2 [ 662.978866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 662.985442] oom_reaper: reaped process 19650 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 662.988226] Call Trace: [ 662.988248] dump_stack+0x138/0x19c [ 662.988265] should_fail.cold+0x10f/0x159 [ 662.988276] ? __might_sleep+0x93/0xb0 [ 662.988290] __alloc_pages_nodemask+0x1d6/0x7a0 [ 662.988304] ? __alloc_pages_slowpath+0x2930/0x2930 [ 662.988322] ? __do_page_cache_readahead+0x28e/0x970 [ 663.007534] FAULT_INJECTION: forcing a failure. [ 663.007534] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 663.008909] alloc_pages_current+0xec/0x1e0 [ 663.043725] __page_cache_alloc+0x248/0x3e0 [ 663.048080] __do_page_cache_readahead+0x2d9/0x970 [ 663.053044] ? read_cache_pages+0x600/0x600 [ 663.057392] ? find_get_entry+0x23c/0x520 [ 663.061562] ? pagecache_get_page+0x133/0x750 [ 663.066080] filemap_fault+0x921/0x19a0 [ 663.070072] ? filemap_fault+0x921/0x19a0 [ 663.074240] ? radix_tree_next_chunk+0x43e/0x9a0 [ 663.079019] ? __lock_is_held+0xb6/0x140 [ 663.083107] ? __lock_page_or_retry+0x8d0/0x8d0 [ 663.087796] ? lock_acquire+0x16f/0x430 [ 663.091780] ? ext4_filemap_fault+0x7b/0xb0 [ 663.096122] ext4_filemap_fault+0x83/0xb0 [ 663.100287] __do_fault+0x109/0x390 [ 663.103925] __handle_mm_fault+0x2465/0x3470 [ 663.108355] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 663.113130] ? find_held_lock+0x35/0x130 [ 663.117206] ? handle_mm_fault+0x1b6/0x7c0 [ 663.121471] handle_mm_fault+0x293/0x7c0 [ 663.125552] __get_user_pages+0x465/0x1250 [ 663.129812] ? follow_page_mask+0x1550/0x1550 [ 663.134343] ? get_page_from_freelist+0x1231/0x2370 [ 663.139384] get_user_pages_remote+0x1bf/0x3a0 [ 663.143989] __access_remote_vm+0x1cc/0x430 [ 663.148346] ? generic_access_phys+0x180/0x180 [ 663.152945] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 663.159639] access_remote_vm+0x36/0x50 [ 663.163644] mem_rw.isra.0+0x1ce/0x2e0 [ 663.167554] ? security_file_permission+0x8f/0x1f0 [ 663.172516] mem_read+0x52/0x70 [ 663.175808] do_iter_read+0x3e7/0x5b0 [ 663.179623] vfs_readv+0xd3/0x130 [ 663.183110] ? compat_rw_copy_check_uvector+0x310/0x310 [ 663.188499] ? __fget+0x237/0x370 [ 663.191967] ? __fget_light+0x172/0x1f0 [ 663.195956] do_preadv+0x15d/0x200 [ 663.199505] ? do_readv+0x220/0x220 [ 663.203148] ? SyS_writev+0x30/0x30 [ 663.206793] SyS_preadv+0x31/0x40 [ 663.210268] do_syscall_64+0x1eb/0x630 [ 663.214171] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 663.219072] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 663.224273] RIP: 0033:0x458c29 [ 663.227466] RSP: 002b:00007f3b78932c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 03:33:35 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x1008, 0x2) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x57d, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x800, 0x0) 03:33:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000040)) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) [ 663.235218] RAX: ffffffffffffffda RBX: 00007f3b78932c90 RCX: 0000000000458c29 [ 663.242501] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000008 [ 663.249782] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 663.257063] R10: 0000000020001000 R11: 0000000000000246 R12: 00007f3b789336d4 [ 663.264379] R13: 00000000004c5969 R14: 00000000004d9cc8 R15: 0000000000000009 [ 663.271681] CPU: 0 PID: 19686 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 663.278730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 663.288106] Call Trace: [ 663.290717] dump_stack+0x138/0x19c [ 663.294376] should_fail.cold+0x10f/0x159 [ 663.298535] ? __might_sleep+0x93/0xb0 [ 663.302443] __alloc_pages_nodemask+0x1d6/0x7a0 [ 663.307129] ? __alloc_pages_slowpath+0x2930/0x2930 [ 663.312171] ? __do_page_cache_readahead+0x28e/0x970 [ 663.317297] alloc_pages_current+0xec/0x1e0 [ 663.321689] __page_cache_alloc+0x248/0x3e0 [ 663.326035] __do_page_cache_readahead+0x2d9/0x970 [ 663.331013] ? read_cache_pages+0x600/0x600 [ 663.335364] ? find_get_entry+0x23c/0x520 [ 663.339532] ? pagecache_get_page+0x133/0x750 [ 663.344044] filemap_fault+0x921/0x19a0 [ 663.348026] ? filemap_fault+0x921/0x19a0 [ 663.352186] ? radix_tree_next_chunk+0x43e/0x9a0 [ 663.356959] ? __lock_is_held+0xb6/0x140 [ 663.361046] ? __lock_page_or_retry+0x8d0/0x8d0 [ 663.365751] ? lock_acquire+0x16f/0x430 [ 663.369759] ? ext4_filemap_fault+0x7b/0xb0 [ 663.374119] ext4_filemap_fault+0x83/0xb0 [ 663.378294] __do_fault+0x109/0x390 [ 663.381958] __handle_mm_fault+0x2465/0x3470 [ 663.386423] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 663.391199] ? find_held_lock+0x35/0x130 [ 663.395273] ? handle_mm_fault+0x1b6/0x7c0 [ 663.399538] handle_mm_fault+0x293/0x7c0 [ 663.403614] __get_user_pages+0x465/0x1250 [ 663.407869] ? follow_page_mask+0x1550/0x1550 [ 663.412389] ? get_page_from_freelist+0x1231/0x2370 [ 663.417432] get_user_pages_remote+0x1bf/0x3a0 [ 663.422040] __access_remote_vm+0x1cc/0x430 [ 663.426399] ? generic_access_phys+0x180/0x180 [ 663.430560] binder: undelivered death notification, 0000000000000000 03:33:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) [ 663.430995] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 663.444185] access_remote_vm+0x36/0x50 [ 663.448182] mem_rw.isra.0+0x1ce/0x2e0 [ 663.452082] ? security_file_permission+0x8f/0x1f0 [ 663.457008] mem_read+0x52/0x70 [ 663.460278] do_iter_read+0x3e7/0x5b0 [ 663.464089] vfs_readv+0xd3/0x130 [ 663.467554] ? compat_rw_copy_check_uvector+0x310/0x310 [ 663.472924] ? __fget+0x237/0x370 [ 663.476397] ? __fget_light+0x172/0x1f0 [ 663.480374] do_preadv+0x15d/0x200 [ 663.483905] ? do_readv+0x220/0x220 [ 663.487527] ? SyS_writev+0x30/0x30 [ 663.491148] SyS_preadv+0x31/0x40 [ 663.494595] do_syscall_64+0x1eb/0x630 [ 663.498478] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 663.503341] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 663.508534] RIP: 0033:0x458c29 [ 663.511744] RSP: 002b:00007f8698ff1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 663.519445] RAX: ffffffffffffffda RBX: 00007f8698ff1c90 RCX: 0000000000458c29 [ 663.526710] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000007 [ 663.533972] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 03:33:35 executing program 0 (fault-call:11 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 663.541233] R10: 0000000020001000 R11: 0000000000000246 R12: 00007f8698ff26d4 [ 663.548516] R13: 00000000004c5969 R14: 00000000004d9cc8 R15: 0000000000000008 03:33:35 executing program 5 (fault-call:9 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) socket$isdn_base(0x22, 0x3, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) connect$vsock_dgram(r2, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) sendfile(r1, r4, 0x0, 0x8000fffffffa) [ 663.668091] binder: 19693:19697 ioctl c0306201 0 returned -14 03:33:36 executing program 1: socket$netlink(0x10, 0x3, 0x0) [ 663.691590] audit: type=1804 audit(2000000016.040:309): pid=19699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir112652976/syzkaller.3FQow7/445/bus" dev="sda1" ino=17013 res=1 [ 663.732863] FAULT_INJECTION: forcing a failure. [ 663.732863] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 663.753546] FAULT_INJECTION: forcing a failure. [ 663.753546] name failslab, interval 1, probability 0, space 0, times 0 [ 663.756521] binder: 19693:19703 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 663.765455] CPU: 0 PID: 19704 Comm: syz-executor.0 Not tainted 4.14.112 #2 [ 663.779855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 663.789223] Call Trace: [ 663.793297] dump_stack+0x138/0x19c [ 663.796949] should_fail.cold+0x10f/0x159 [ 663.801121] ? __es_tree_search.isra.0+0x15f/0x1c0 [ 663.806073] should_failslab+0xdb/0x130 [ 663.810068] kmem_cache_alloc+0x47/0x780 [ 663.814153] ? ext4_es_can_be_merged+0x16e/0x230 [ 663.818941] __es_insert_extent+0x26c/0xe60 [ 663.823393] ext4_es_insert_extent+0x1f0/0x590 [ 663.827992] ? ext4_da_get_block_prep+0x757/0x1120 [ 663.832943] ? ext4_es_find_delayed_extent_range+0x970/0x970 [ 663.838761] ? lock_downgrade+0x6e0/0x6e0 [ 663.842927] ext4_da_get_block_prep+0x77f/0x1120 [ 663.847704] ? ext4_inode_attach_jinode.part.0+0x150/0x150 [ 663.853368] ? create_empty_buffers+0x2cf/0x480 [ 663.858066] ? create_page_buffers+0xd3/0x1c0 [ 663.862611] __block_write_begin_int+0x399/0x1100 [ 663.867485] ? ext4_inode_attach_jinode.part.0+0x150/0x150 [ 663.873133] ? __breadahead+0xd0/0xd0 [ 663.876945] ? __might_sleep+0x93/0xb0 [ 663.880843] ? ext4_inode_attach_jinode.part.0+0x150/0x150 [ 663.886496] block_page_mkwrite+0x1df/0x2c0 [ 663.890837] ext4_page_mkwrite+0xafb/0xfd0 [ 663.895103] ? ext4_change_inode_journal_flag+0x3b0/0x3b0 [ 663.900660] ? lock_downgrade+0x6e0/0x6e0 [ 663.904822] do_page_mkwrite+0xde/0x2f0 [ 663.908812] do_wp_page+0x7d2/0x12b0 [ 663.912539] ? finish_mkwrite_fault+0x620/0x620 [ 663.917224] __handle_mm_fault+0x1d4f/0x3470 [ 663.921654] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 663.926439] ? find_held_lock+0x35/0x130 [ 663.930512] ? handle_mm_fault+0x1b6/0x7c0 [ 663.934780] handle_mm_fault+0x293/0x7c0 [ 663.938856] __do_page_fault+0x4c1/0xb80 [ 663.942931] ? vmalloc_fault+0xe60/0xe60 [ 663.947008] do_page_fault+0x71/0x515 [ 663.950827] page_fault+0x25/0x50 [ 663.954288] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 663.960171] RSP: 0018:ffff8880a9b67b48 EFLAGS: 00010206 [ 663.965543] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 00000000000000c0 [ 663.972820] RDX: 0000000000001000 RSI: ffff88808fc4ef40 RDI: 0000000020001000 [ 663.980121] RBP: ffff8880a9b67b78 R08: ffffed1011f89e00 R09: 0000000000000000 [ 663.987401] R10: ffffed1011f89dff R11: ffff88808fc4efff R12: 00000000200000c0 [ 663.994686] R13: ffff88808fc4e000 R14: 00007ffffffff000 R15: 00000000200010c0 [ 664.002014] ? _copy_to_user+0xb1/0xd0 [ 664.005935] mem_rw.isra.0+0x1f9/0x2e0 [ 664.009844] ? security_file_permission+0x8f/0x1f0 [ 664.014789] mem_read+0x52/0x70 [ 664.018080] do_iter_read+0x3e7/0x5b0 [ 664.021899] vfs_readv+0xd3/0x130 [ 664.025375] ? compat_rw_copy_check_uvector+0x310/0x310 [ 664.030766] ? __fget+0x237/0x370 [ 664.034232] ? __fget_light+0x172/0x1f0 [ 664.038220] do_preadv+0x15d/0x200 [ 664.041788] ? do_readv+0x220/0x220 [ 664.045429] ? SyS_writev+0x30/0x30 [ 664.049065] SyS_preadv+0x31/0x40 [ 664.052525] do_syscall_64+0x1eb/0x630 [ 664.056414] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 664.061273] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 664.066467] RIP: 0033:0x458c29 [ 664.069687] RSP: 002b:00007f3b78911c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 664.077408] RAX: ffffffffffffffda RBX: 00007f3b78911c90 RCX: 0000000000458c29 [ 664.084687] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000008 [ 664.091966] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 664.099244] R10: 0000000020001000 R11: 0000000000000246 R12: 00007f3b789126d4 [ 664.106530] R13: 00000000004c5969 R14: 00000000004d9cc8 R15: 0000000000000009 [ 664.113837] CPU: 1 PID: 19701 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 664.120885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.130243] Call Trace: [ 664.130265] dump_stack+0x138/0x19c [ 664.130283] should_fail.cold+0x10f/0x159 [ 664.130293] ? __might_sleep+0x93/0xb0 [ 664.130307] __alloc_pages_nodemask+0x1d6/0x7a0 [ 664.130319] ? __alloc_pages_slowpath+0x2930/0x2930 [ 664.130345] ? __do_page_cache_readahead+0x28e/0x970 [ 664.130360] alloc_pages_current+0xec/0x1e0 [ 664.130374] __page_cache_alloc+0x248/0x3e0 [ 664.130387] __do_page_cache_readahead+0x2d9/0x970 [ 664.130402] ? read_cache_pages+0x600/0x600 [ 664.130410] ? find_get_entry+0x23c/0x520 [ 664.130424] ? pagecache_get_page+0x133/0x750 [ 664.130435] filemap_fault+0x921/0x19a0 [ 664.130442] ? filemap_fault+0x921/0x19a0 [ 664.130450] ? radix_tree_next_chunk+0x43e/0x9a0 [ 664.130463] ? __lock_is_held+0xb6/0x140 [ 664.130475] ? __lock_page_or_retry+0x8d0/0x8d0 [ 664.148107] audit: type=1804 audit(2000000016.050:310): pid=19701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/647/bus" dev="sda1" ino=17015 res=1 [ 664.149570] ? lock_acquire+0x16f/0x430 [ 664.149583] ? ext4_filemap_fault+0x7b/0xb0 [ 664.149604] ext4_filemap_fault+0x83/0xb0 [ 664.149619] __do_fault+0x109/0x390 [ 664.250823] __handle_mm_fault+0x2465/0x3470 [ 664.255253] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 664.260018] ? find_held_lock+0x35/0x130 [ 664.264096] ? handle_mm_fault+0x1b6/0x7c0 [ 664.268364] handle_mm_fault+0x293/0x7c0 [ 664.272444] __get_user_pages+0x465/0x1250 [ 664.276707] ? follow_page_mask+0x1550/0x1550 [ 664.281213] ? get_page_from_freelist+0x1231/0x2370 [ 664.286253] get_user_pages_remote+0x1bf/0x3a0 [ 664.290858] __access_remote_vm+0x1cc/0x430 [ 664.295199] ? generic_access_phys+0x180/0x180 [ 664.299797] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 664.306486] access_remote_vm+0x36/0x50 [ 664.310468] mem_rw.isra.0+0x1ce/0x2e0 [ 664.314368] ? security_file_permission+0x8f/0x1f0 [ 664.319338] mem_read+0x52/0x70 [ 664.322627] do_iter_read+0x3e7/0x5b0 [ 664.326442] vfs_readv+0xd3/0x130 [ 664.329900] ? compat_rw_copy_check_uvector+0x310/0x310 [ 664.335308] ? __fget+0x237/0x370 [ 664.338782] ? __fget_light+0x172/0x1f0 [ 664.342761] do_preadv+0x15d/0x200 [ 664.346305] ? do_readv+0x220/0x220 [ 664.349940] ? SyS_writev+0x30/0x30 [ 664.353592] SyS_preadv+0x31/0x40 [ 664.357051] do_syscall_64+0x1eb/0x630 [ 664.360939] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 664.365799] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 664.371014] RIP: 0033:0x458c29 [ 664.374198] RSP: 002b:00007f8698ff1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 664.381925] RAX: ffffffffffffffda RBX: 00007f8698ff1c90 RCX: 0000000000458c29 [ 664.389205] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000007 [ 664.396487] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 664.403762] R10: 0000000020001000 R11: 0000000000000246 R12: 00007f8698ff26d4 [ 664.411035] R13: 00000000004c5969 R14: 00000000004d9cc8 R15: 0000000000000008 03:33:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c1207849bd070") r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x402, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0xff, @ipv4={[], [], @multicast2}, 0x200}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x515e}, @in6={0xa, 0x4e22, 0x1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0x568}, @in={0x2, 0x4e22, @multicast2}], 0x84) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="66b9a30b000066b85f97f09566ba9fc4ce040f300f09660fdb4c08440f20c0663501000000440f22c066b9800000c00f326635008000000f30baf80c66b8af6bad8666efbafc0cec0fc7ae0030ddcff0832e3200000fc71c", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0x213b, 0x7f, 0x200000000000000, 0x7, 0x6e9f, 0x5}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x10000, 0x119001}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 664.440447] binder: undelivered death notification, 0000000000000000 03:33:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000140)=0xff, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f00000000c0)={r5, 0x8}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000100)={0x7, r4}) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000040)=@ethtool_cmd={0x25}}) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3f, 0x40) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000140)=""/27) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f00000000c0)={[0x100002, 0x0, 0x0, 0x1d005], 0x18b, 0x1, 0xc0c}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) [ 664.509823] binder: 19709:19712 ioctl c0306201 0 returned -14 03:33:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000380)='system_u:object_r:removable_device_t:s0\x00', 0x28, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000a470ced91b2d8b591f923f4e789949bbc84770395d7d53a337053b317ca9198616c178c7fff4cc5d619dac8881d4a9592b968382b2e7ffa48318cfe6891ebf863060dc582b6d4c9c947d44de3a67ccb8f8b234501e42a5dae73096bedcc5f703b161849cb42750a2f36f27d2e7fe852c839cbc8bc2273ef4c8aadbb1842f815280c9324e49917685ae3ddda8e6ce7e937921c129a0da3f6a63219cd118f5d15c401647c3d9d5ba9d5333a3a1fe5293b2a09e4d3288df3f92b9457e1897d6f9960b6b1be5a8c24954232f1cf194", @ANYRES16=r3, @ANYRESHEX=0x0], 0x3}, 0x1, 0x0, 0x0, 0x44000}, 0x13) close(r1) close(r2) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$selinux_access(r4, &(0x7f00000000c0)={'system_u:object_r:tmp_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x9}, 0x47) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) [ 664.599698] binder: 19709:19717 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:37 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x20000) listen(0xffffffffffffffff, 0x9) dup3(r0, 0xffffffffffffffff, 0x0) 03:33:37 executing program 4: r0 = socket(0x10000000010, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000300)={0x0, 0x80000, r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000340)={r4, 0x80000, r3}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f00000001c0)={0x7, 0xffffffffffffffff, 0x7}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setfsgid(r5) close(r3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/230, &(0x7f0000000140)=0xe6) r6 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000480)={r6, 0x55, 0x352}, &(0x7f00000004c0)={'enc=', 'pkcs1', ' hash=', {'sm3\x00'}}, &(0x7f0000000540)="535da40aa8b2c8a19714fcce2dc93cb736bfecef8d49b34f6b6d7a944ca9040af99130a1c0373b52c2488778585e7dfca55a24f8338b08ce2886e5611e8ccf19e3882a626b70d1ace61cf49d19ff734d7644ca025b763b9eb37c2c618e16ed3302699412db32794fcbd0e6577ea1bf8bd8303fab5234edb5fcb125b8dc0eb2c6b745f65740d0f84f300a21272c74ba384633e9e1b50db34712a6caa6534719d3bcefcab3", &(0x7f0000000600)=""/192) socket(0x8, 0x0, 0x5) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000003c0)={0x1f}, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000380)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r7, 0xc0385720, &(0x7f0000000200)={0x1, {}, 0x400, 0x1}) 03:33:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8001) r3 = gettid() ptrace$setopts(0x4200, r3, 0x2, 0x15) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8000fffffffe) r6 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1, 0x0) 03:33:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061100400000000009500000000000000472b3fec0b1636ff197e7f2a8f73b7c1133489ceac48c19e291ff1d76f0d940f27d5921944f103bbb4b55321875a2fa3c75b680004b1391b3fbe28f683b2e17337035c3a118382829db100f68ab0e59665f45b78aa1dbd87955ebe307d5b0007518269621773c232544e8ea2be1f31"], &(0x7f0000000000)='GPL\x00'}, 0x48) [ 664.787293] device bridge_slave_1 left promiscuous mode [ 664.817205] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.864764] device bridge_slave_0 left promiscuous mode [ 664.877271] audit: type=1804 audit(2000000017.230:311): pid=19736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir112652976/syzkaller.3FQow7/446/bus" dev="sda1" ino=17013 res=1 [ 664.913544] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.985538] device hsr_slave_1 left promiscuous mode [ 664.996523] device hsr_slave_0 left promiscuous mode [ 665.013875] team0 (unregistering): Port device team_slave_1 removed [ 665.031617] team0 (unregistering): Port device team_slave_0 removed [ 665.047072] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 665.065704] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 665.127768] bond0 (unregistering): Released all slaves 03:33:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x2000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000080)={'bridge_slave_0\x00', @ifru_data=&(0x7f0000000040)="a8d987d89502c5117e026e7be93d3ef255a7ea1f495b3325457744fc72b64883"}}) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r2) ioctl$NBD_CLEAR_QUE(r1, 0xab05) close(r3) pipe(&(0x7f0000000240)) splice(r0, 0x0, r3, 0x0, 0xc0, 0x0) 03:33:37 executing program 1: r0 = socket(0xa, 0x802, 0x0) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000080)=0x5, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) recvfrom$ax25(r0, &(0x7f00000000c0)=""/218, 0xda, 0x40, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x6, 0x1, 0x0, 0x6, 0x40, 0x4, 0x5}, 0x0) [ 665.211092] audit: type=1804 audit(2000000017.570:312): pid=19736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir112652976/syzkaller.3FQow7/446/bus" dev="sda1" ino=17013 res=1 03:33:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000001c0)=0x4) fremovexattr(r0, &(0x7f0000000200)=@random={'btrfs.', '/selinux/avc/cache_threshold\x00'}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r2 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r2, 0x4) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8000fffffffe) r6 = openat$cgroup_ro(r2, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) epoll_create1(0x80000) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) [ 665.306575] binder: undelivered death notification, 0000000000000000 [ 665.414179] audit: type=1804 audit(2000000017.570:313): pid=19732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir112652976/syzkaller.3FQow7/446/bus" dev="sda1" ino=17013 res=1 [ 665.468365] binder: 19752:19762 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 665.509437] audit: type=1804 audit(2000000017.650:314): pid=19744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/648/bus" dev="sda1" ino=16957 res=1 [ 665.542215] audit: type=1804 audit(2000000017.690:315): pid=19749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/648/bus" dev="sda1" ino=16957 res=1 [ 665.574151] audit: type=1804 audit(2000000017.700:316): pid=19744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/648/bus" dev="sda1" ino=16957 res=1 [ 666.171442] binder: undelivered death notification, 0000000000000000 [ 666.649710] IPVS: ftp: loaded support on port[0] = 21 [ 666.729309] chnl_net:caif_netlink_parms(): no params data found [ 666.767173] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.773821] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.781256] device bridge_slave_0 entered promiscuous mode [ 666.787786] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.794571] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.801954] device bridge_slave_1 entered promiscuous mode [ 666.818204] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 666.827352] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 666.846040] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 666.853478] team0: Port device team_slave_0 added [ 666.858904] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 666.866217] team0: Port device team_slave_1 added [ 666.871899] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 666.879197] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 666.897986] device hsr_slave_0 entered promiscuous mode [ 666.903880] device hsr_slave_1 entered promiscuous mode [ 666.909706] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 666.916761] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 666.929402] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.935872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.942594] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.948988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.978476] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 666.985071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.993233] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 667.002966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 667.012105] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.018749] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.028477] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 667.034680] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.044398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 667.052094] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.058478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.067692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 667.075616] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.082036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.097955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 667.105751] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 667.115176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 667.126888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 667.136758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 667.147451] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 667.153707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 667.167455] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 667.177788] 8021q: adding VLAN 0 to HW filter on device batadv0 03:33:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x3) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x8000, 0x7fff, 0x3, 0x1e, 0x7ff}) lseek(r0, 0x0, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) 03:33:39 executing program 1: r0 = userfaultfd(0x0) r1 = epoll_create1(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 03:33:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000040)={0x5}, 0x1) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, {0x2, 0x2, 0xfffffffffffffff7, 0x401, 0x3, 0x2b57}}, 0x8) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) close(r0) vmsplice(r0, &(0x7f0000000640)=[{&(0x7f0000000040)="ae60459dd67678199fd19e6c915f292e561119c6315218e0c0f81ecde8dc4ec2c7d5a602f9ffc8679eac65893dbd454f3dd836af442295698bd6e8f7fc06d74bdb21768afb25d8a9c66d077d21831ed9b3e971c69e56b11a183c132e42f3ebdc94c3bc4d9b52d3e039bf442ce7fe5a34512b016765bff9647fc9705b5c27e0a064ae3bb2b0877ed270329211c38f29094e353834273836dd2ebaafb0e39cdc5d8cddc812c8928dbef0cbf0c6b5be97d7aed7946d9e3cf260c4357d8e425ccf9ef417dd2e734021506a54a9e47eee44b48f14be17331e3d54777e3eece848b8", 0xdf}, {&(0x7f0000000140)="28744698fa6d727197f70d8eb7c7d83a39058a4d8a1b28e0af96ab02827f64be455f34d83c05825c2e067933d1c290bcc8e7a8f8665ac33ceab2aec783197254b5079b1e7adb01acd42c9fe98663cd214624d316eb6c1177055ee10ee28e1faae4d1e7b73742c875a40dffaee330492291f88fff0047972789bd8d3ef85cb7ebe106b111bd962f5af6f865960caeba5cd668adf3077ebaf1bd5b09f8ab34fc430ba6bbc264040d319111f27123aecd2eeaf3e870736d5fbae5e17d3109be56f739432db868d79d66f502722c2454b6ea5ac4b823b686f27cd3beef3ca3f9f63aa7ae51276755cc3506", 0xe9}, {&(0x7f0000000280)="516cb7f38a2aa4b70a24abe1904798fb1aa643a502f2199db25030a9f88db7b92f10b179a8b44c77d8a5c0a75e4cf3beb36fa3e6ecffbccf44e25cf8d9fec6b624aaacd9797da667c21eba8f0f751920fe7816d7d59ca398c31a86c1fc32", 0x5e}, {&(0x7f0000000300)="26d7cf92af32f5c561dd99da56215b104fec6229772d690c26ff1abae50cc8b0863a85de5b0c77bf9a6f3a61a30e678d92918ec0686e0718a01936931b1db66c4f6ed1b21358c9f27e8e4d27dfd5b359d383605ecf68755ba52a1f7afa184f47e80d33f250c8502cf0daf6288e17cabcffd044b9e518c11a3ada673706659b0bbca7c7bed799dfd38113b09537f55e08b8", 0x91}, {&(0x7f00000003c0)="f6178c04f04536a9bbbd4971f424f8a20c6d4b8ce61e3c90635156feb51af2a53ab123897b563df353d6c10469db7bda292a507ae10adf", 0x37}, {&(0x7f0000000400)="9317bbed798c7146d936c871b06d140a8b96614737538b3caf300817da871b5a965418c18908ecbdc7b7", 0x2a}, {&(0x7f0000000440)="748d645dd48d8cd4ee09bae1ec3b98c4aee57b9a1569100043d9472c6338d27490e8e4d822e8892568b4c5b7853507aeb065e88f4814457fe41234497c41f69e41dbd7e02a1e4f59766861d562dbdd03e841e2a0d0dfa323d94d31d3a4f32b637ac7c8", 0x63}, {&(0x7f00000004c0)="f5ca8532e653e16c1d307e5c08fbdd6693f205da07ff93f4657e04273cfbfb0521613c49e41908", 0x27}, {&(0x7f0000000500)="24c4455ef8c3a889ce6fe9577503db0aa9face010cc215eedbe4ea1e0abee10292b2b3697e6d38309e5dcfd14f9a17af4e83d47504cce405e68eaa2590e9353b1f7085df805b6114bf08e29227184700e2cc074ee7cda5483e4595fd602845456f5d51", 0x63}, {&(0x7f0000000580)="9ceee5a5b2a304fd3e1d03fd7aac020c0c4bb4ada4c8ec630e03aa0c887f0417338fc708a66d311ce59052659eaaabc6e3b9b590501fd223df31c184a69748c6cf762424830999e12ee1ad771c0c39f4edbffd8a7af66837d106145afbd55840f524f61a0024efe89dd936ca2373c7a8af36d20b42f734828c05b99c23d9ab028a1f42b29bf37ae187d7168b", 0x8c}], 0xa, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000780)=""/219, &(0x7f0000000880)=0xdb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)={0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) accept4$llc(r3, &(0x7f0000000700)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000740)=0x10, 0x800) 03:33:39 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8000, 0x40000) syz_open_pts(r0, 0x2400) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000100)={0xc2ff, 0x2}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r2, 0xf6, 0x3}, 0x8) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/117, 0x75}], 0x1) 03:33:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r0, 0x20) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000000) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x8b, "a02a8166aefbc12990403e664e9174d4119debfe4fc55f6b506c42840c909c27221feb58e7b5133bc9dc38d72b0f07ff40dd3f55d199eea55fee002ca6c2a2a9843ffb53f03e892239ce81555379611cffb28666d02d4342a1015781ce8de8df930db8f158204e3cfc3f6c7cf8b6669840702bfc6a86e844d34d46cc103df98ffd230161d4b412b0bbb6fd"}, &(0x7f0000000100)=0xaf) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) close(r1) pipe(&(0x7f0000000240)) splice(r0, 0x0, r1, 0x0, 0xc0, 0x0) [ 667.278733] audit: type=1804 audit(2000000019.630:317): pid=19785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir112652976/syzkaller.3FQow7/448/bus" dev="sda1" ino=17026 res=1 03:33:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x81fe) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 667.370320] binder: 19784:19799 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:39 executing program 1: clone(0x100041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x1, 0x8a00) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000180)={0xdf, 0x6, 0x10001, 0x5308, 0x2, 0x23, 0xd, "bbc6a96eec5333a74752aac7f2a71c4d53c802f7", "6bccafafc1f5659e1f70fec7aafa939e581f0ea4"}) tgkill(r1, r1, 0x38) r2 = dup3(0xffffffffffffffff, r0, 0x80003) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000000)=ANY=[@ANYBLOB="b5000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002ff565c317e8000100"/185]) 03:33:39 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe}) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8001, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550d, &(0x7f0000000040)) 03:33:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x4, 0x0) ioctl$TCXONC(r2, 0x540a, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8010, r1, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r3, 0xff}, &(0x7f0000000100)=0x8) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0xc0, 0x0) 03:33:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) socket$unix(0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000001c0)=0x78) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x5, [0x10001, 0x1, 0x7, 0x6, 0x8000]}, &(0x7f0000000080)=0xe) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3ff, 0x4100) close(r1) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) [ 667.531736] vhci_hcd: default hub control req: 1909 v0000 i0000 l0 [ 667.711066] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 03:33:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x1, 0x4) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x2a) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:40 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='devpts\x00vh\xd2p!s\n@ha.\xc1\x88\x05\x89\x1d\b\xb3Xd\x92Y\x1b\x8c\xc0\xd0\xf4\x952\x8c!JC\xd1]Ul\xa2\x80\x19\x88 \xd4b\x0f\x87\x89P\xb4M\xf7]w\xa9\xb6\xc3}\x16\f\x87ueg$\xd9,\x8c\x9b\xbb*\xfe\x95\xb8\xa1\x9aVA\xb73w\xdf/\xa9\xc5\x8e\xe1\xef\xc5\x8d\x168\xba\"\x83\x8b\xe2\xf7*\xfa\xd20a\x94\xc7yiF\a\v\x14\xd2\xc1z\x94\x9d\x9d\a*\xab\xea\xd9Ee\xac\xa28p\xa2\xa1\x9a;\xb4o\xa0\xf1\xd7&[2\xf2\x82\xbc\xc2tu\xfb\xf5\xb1Y\xd6\xa9\x1b\xbec\xdeA\x8d\x94W)\x93,\xac\x02\x86\xd1\r\x00\xefZ\xf3Y\x84\xdbF\xf2u\xa1\x8b_\x9fe\xfe[q\xb1\\\xcen\bC \x81', 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f00000000c0)={0x0, 0x3, @raw_data=[0x29bb, 0x4, 0x0, 0x0, 0x7, 0x70ba, 0x46, 0x7fffffff, 0x101, 0x8, 0x81, 0x7, 0x4, 0x1, 0x1a7]}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20, &(0x7f0000000440)={[{@mode={'mode', 0x3d, 0xffffffff}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@uid_eq={'uid', 0x3d, r1}}, {@smackfsdef={'smackfsdef', 0x3d, 'self'}}]}) close(r0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) 03:33:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)={0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000040)=""/83) 03:33:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000280)={'nat\x00', 0x0, 0x4, 0xb7, [], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f00000001c0)=""/183}, &(0x7f0000000080)=0x78) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 668.079202] binder: undelivered death notification, 0000000000000000 03:33:40 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$describe(0x6, r0, &(0x7f0000000140)=""/103, 0x67) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000018008109e00f80ecdb4cb92e0a60032c000cd30ee8bd6efb120009000b0014a00200000006000500fec0", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 668.124798] kauditd_printk_skb: 5 callbacks suppressed [ 668.124807] audit: type=1804 audit(2000000020.480:323): pid=19848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir112652976/syzkaller.3FQow7/451/bus" dev="sda1" ino=17033 res=1 [ 668.206932] audit: type=1804 audit(2000000020.500:324): pid=19851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir112652976/syzkaller.3FQow7/451/bus" dev="sda1" ino=17033 res=1 [ 668.221163] IPv6: Can't replace route, no match found [ 668.244881] binder: 19850:19859 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89b0, &(0x7f0000000000)={'sit0\x00', @ifru_map}) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8, 0xc0000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x4, 0x3}, 0x10) 03:33:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:40 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$describe(0x6, r0, &(0x7f0000000140)=""/103, 0x67) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000018008109e00f80ecdb4cb92e0a60032c000cd30ee8bd6efb120009000b0014a00200000006000500fec0", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 03:33:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000240)) socket$inet_sctp(0x2, 0x5, 0x84) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x52, 0x7fbc140d, 0x8, {0x7, 0x5}, {0x14c, 0x457}, @ramp={0x8, 0x4, {0x7, 0x80000001, 0x40, 0x7}}}) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 668.259654] audit: type=1804 audit(2000000020.530:325): pid=19853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/652/bus" dev="sda1" ino=17048 res=1 [ 668.361263] IPv6: Can't replace route, no match found [ 668.373621] audit: type=1804 audit(2000000020.600:326): pid=19853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/652/bus" dev="sda1" ino=17048 res=1 03:33:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000140)={0x3, 0x9, 0x6, 0x0, 0x3, 0x9, 0x7, 0xfffffffffffffff8, 0x0}, &(0x7f00000002c0)=0x20) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r2, 0x8, 0xed, 0x3}, 0x10) eventfd2(0xfffffffffffffff8, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L-', 0xcdc}, 0x28, 0x955c5dcabb074477) prctl$PR_GET_DUMPABLE(0x3) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000280)=0x9, 0x4) recvfrom$x25(r3, &(0x7f00000000c0)=""/15, 0xf, 0x121, &(0x7f0000000100)={0x9, @remote={[], 0x3}}, 0x12) [ 668.416814] audit: type=1804 audit(2000000020.730:327): pid=19874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir112652976/syzkaller.3FQow7/452/bus" dev="sda1" ino=17053 res=1 [ 668.494401] audit: type=1804 audit(2000000020.740:328): pid=19876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/653/bus" dev="sda1" ino=17054 res=1 [ 668.532522] audit: type=1804 audit(2000000020.780:329): pid=19876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/653/bus" dev="sda1" ino=17054 res=1 [ 668.560822] audit: type=1804 audit(2000000020.790:330): pid=19878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir112652976/syzkaller.3FQow7/452/bus" dev="sda1" ino=17053 res=1 03:33:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000000)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, &(0x7f00000000c0)) add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) socket$inet6(0xa, 0x2000000802, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340), &(0x7f00000003c0)=0xc) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000002c0)={0x0, &(0x7f0000000640)}) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) 03:33:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000280)={0x0, 0x9f95, 0x0, 0x3, 0x12, 0x5f94, 0x6, 0x20, 0x7ff, 0xff}) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f00000003c0)) r5 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) r6 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8000fffffffe) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000440)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) lsetxattr$security_capability(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000380)=@v3={0x3000000, [{0x40, 0x6}, {0x7ff, 0x9}], r7}, 0x18, 0x3) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1a) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000001c0)="6dad89c5405b13f3210a7b46dde24fa1ff2de1a8fe06bc76ddc0455da190972c5e131b4c0701d050e25a9398a86ce2a9ddf694b8559161fffb0e6773c24c47c49c3e2ba863dfe4bf86f9c204f3f23ff13f14fb372c8d4802e05cf50fb50964ce6548d36c2141e9220cf2ce09964e0d84be3472d5504648ff4e5a3d3fcfc4cc5b76b2a081b09fff9787e8bc8a5bd2ead4f10535c17ddbbf27f5ae", 0x9a) openat$cgroup_ro(r2, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x20001000) 03:33:41 executing program 2: ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000040)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000000)={r0, 0x7ffff, 0xffffffffffffffff}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TCXONC(r2, 0x540a, 0xffff) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={0x0, 0x40}, &(0x7f0000000280)=0x10c) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r4, 0xfffffffffffffffc}, &(0x7f0000000300)=0x8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r6, 0x4018ae51, &(0x7f0000000200)={0x1, 0x0, 0x5}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000100)={'e\x00', @ifru_data=&(0x7f0000000140)="494676e9e8dd53b53fc6aafa722ea761eb42a16fa7cc0046bf0660555d88fcba"}) 03:33:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x4895}, 0x28, 0x1) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 668.973194] binder: undelivered death notification, 0000000000000000 03:33:41 executing program 2: open(&(0x7f0000000000)='./file1\x00', 0xc080, 0x103) r0 = open(&(0x7f0000ba0000)='./file0\x00', 0x2800, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x5) [ 669.015402] Unknown ioctl 21510 03:33:41 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x618) [ 669.038742] audit: type=1804 audit(2000000021.390:331): pid=19899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir768488014/syzkaller.oGLSIe/654/bus" dev="sda1" ino=17063 res=1 03:33:41 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xa000000000000, 0x400000) ioctl$FIGETBSZ(r0, 0x40044160, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x800, {0xfffffffffffffff8, 0xffff, 0x5, 0x7d24b44, 0xce, 0xff}, 0x9, 0xfa}, 0xe) recvfrom$inet6(r0, &(0x7f0000000000)=""/52, 0x34, 0x40000000, &(0x7f00000000c0)={0xa, 0x4e22, 0x100000001, @loopback, 0x4}, 0x1c) [ 669.092677] audit: type=1804 audit(2000000021.430:332): pid=19892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir112652976/syzkaller.3FQow7/453/bus" dev="sda1" ino=17062 res=1 03:33:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x11a) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 669.137662] binder: 19890:19910 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:41 executing program 4: timer_create(0x4, &(0x7f0000000040)={0x0, 0x40, 0x3}, &(0x7f0000000080)=0x0) timer_delete(r0) r1 = socket(0x10, 0x3, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r2) close(r3) pipe(&(0x7f0000000240)) splice(r1, 0x0, r3, 0x0, 0xc0, 0x0) 03:33:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000040)={0x1, "ad19a2e54c0730400bf4168c066409cc28c883bb879504d04daf7b150fd315b7", 0x810, 0x1d713ba8, 0x7fffffff, 0x1, 0x3}) sendfile(r1, r3, 0x0, 0x8000fffffffe) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000001c0)={0x80000000}) bind$x25(r2, &(0x7f0000000200)={0x9, @remote={[], 0x2}}, 0x12) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) msgget$private(0x0, 0x2) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:41 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x82\x18B\b\x00\x00\x00\x00\x00\x00\x00\xe0\xc5\xd6\xcbOq\xe2\xfb\xb2\x97\x02\x1d.\f\x1c\xcd\x04\xca\x9b!\x9b\xf3\xf1\x93\x14', 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sendfile(r0, r1, 0x0, 0x497b) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r1, &(0x7f0000000080)=[{&(0x7f0000001700)=""/4096, 0x1388}], 0x1) 03:33:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='x'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 03:33:42 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc0386106, &(0x7f0000000840)={0x0, 0x0, 0x0, 0xe00}) ioctl$RTC_AIE_OFF(r1, 0x7002) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 03:33:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) getsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x8000, 0xfffffffffffffffd, 0x44d, 0x6, 0x3, 0x3e, 0x40, 0x259, 0x38, 0x10a, 0x6, 0x5, 0x20, 0x2, 0x1, 0x1, 0xff}, [{0x7, 0x1, 0x2, 0x8, 0x1f, 0x20, 0x1, 0x800}, {0x60000000, 0x7, 0x7, 0xb5, 0x8, 0x5, 0x3, 0x20cb3e4e}], "ba7ce8ddbf28f64d57cbb85650004420edcba8f745f0d52c7800f937ccd27a5fb54eb7ad3a906be8a04e17c7b0856009f22ff2852eaec8f590", [[], [], [], []]}, 0x4b1) accept4$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) pipe(&(0x7f0000000240)) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) 03:33:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000680)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xe8) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./bus\x00', 0x9, 0x4, &(0x7f0000000500)=[{&(0x7f00000001c0)="748fec65c67da7a6196bed525a809e4009090f30599ea9f9f7783e5c04c18fd0154e3fbb83393a6ec70b043420f44d52d065c5c8f36deb6323ccd4c39849b8bcb4874196727d0344f4629681bfaa054780872c4157734dc3af0f78717e2c7b25e9729ba882b533d06671fb435c5155df11", 0x71, 0x5}, {&(0x7f0000000240)="5f46e5d144556a7a6ff2fdf8df7ea4379bdcc5baea28617a997ed11b5f852d9905f366c736ac5a71e5c8fbd4a70a30683fb868d34b3b063604d9b4a11581a9f4727945d7fadf887c7b372af9d4f5226ec675b0853d564b6cc4106807f54288258643dd73c829120df63c2690dbbf3baf07474cc00611338991fb5750d9b7843f7609428ae657c54af829e1edf5beed449fcd8f4dfafdb58cb0888a239254c6a9877661fd0764e56ca551dd7c519a87cb05ea4747f253ce138e49c1140cca823abc22484404e5c1a9c982064779926c", 0xcf}, {&(0x7f0000000340)="348caebabc03134d3d2a39a2146b99678ddbe92d27ca782cb6ac243f3ce6209526e4d737779263109a9afa15495699279a909b2da0e3a5f54cb3c2a376c99ebb7edec84b8fa8b2741a838411c96923c556c960528d14e0bc93072269f41c9449c9208e346a3ef983c598", 0x6a, 0x4}, {&(0x7f0000000440)="ba089a929be3cea29e4105047d6e3578d816605fee41c0bd73619846a5c511f9117dabf1432738a2edf82274a554eebdddf6b63382de061d2507a0ccc18e081ec930455a4cdaf2a8bc968e8ed3e3c7664feb2cbd7afc70635879dd2d0249c5c29814107fc6ef41fe49429d9df978e8fc0e78e9259ae7b1bf75852d49eb98d307d4d726cde7374b457d15d34554c28941ac5f0d14e550feab404f", 0x9a, 0x2}], 0x201000, &(0x7f0000000780)={[{@show_sys_files_yes='show_sys_files=yes'}, {@case_sensitive_yes='case_sensitive=yes'}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@fsname={'fsname', 0x3d, 'mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80'}}, {@fsname={'fsname'}}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8000fffffffe) r6 = openat$cgroup_ro(r2, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:42 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x80000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000580)) 03:33:42 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x28002, 0x40) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 669.816300] binder: undelivered death notification, 0000000000000000 03:33:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000040)='\x00\b\xea\r\x9b') r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) r5 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8000fffffffe) r6 = openat$cgroup_ro(r2, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) [ 669.882668] input: syz1 as /devices/virtual/input/input54 03:33:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x02\b\xea\r\x98') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./bus\x00', 0x670, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="0ec5fa4fdb97f044d9a643356edc797fa289f7e05d482336531f6281c45c8f5e37a87d8b355f4fe749635ce0a6837a16ac88c2f0eda5fc7cde5130b144bd1acca27b6cee997532d3f12f9ac8da3c3a10f7a5984038453036443d1051a189a57170cb802cbd0e787dd565ba2839c45685c6fd5f6aba05", 0x76, 0xffffffffffffe40c}], 0x8, &(0x7f0000000280)={[{@shortname_lower='shortname=lower'}], [{@smackfshat={'smackfshat', 0x3d, 'mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80'}}]}) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0xfffffc7e}], 0x1, 0x20001000) creat(&(0x7f0000000380)='./bus\x00', 0x100) ioctl$VT_ACTIVATE(r0, 0x5606, 0x81) [ 669.928186] input: syz1 as /devices/virtual/input/input55 [ 669.954042] binder: 19951:19961 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:33:42 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1018}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x1, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 03:33:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a20a3699a123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x4) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000001c0)={0x80000000}) r4 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x100a}}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r5 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8000fffffffe) r6 = openat$cgroup_ro(r1, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) 03:33:42 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='limits\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 670.005684] FAT-fs (loop5): Unrecognized mount option "smackfshat=mem" or missing value [ 670.081414] FAT-fs (loop5): Unrecognized mount option "smackfshat=mem" or missing value 03:33:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\b\xea\r\x9b') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x101022, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0xf000, 0x100000, 0x18, 0xf2fc, 0x101, 0x1, 0x19f3e4c1, 0x7, 0x6, 0x9, 0x38, 0x7a}, {0xf005, 0x5000, 0xf, 0x5, 0x0, 0x731, 0x5, 0x4, 0x0, 0x1f, 0x7, 0xd9}, {0xf000, 0xf000, 0xb, 0x7ff, 0xfffffffffffffe01, 0x81, 0x87, 0x5, 0x8, 0x7, 0xff, 0x1444000}, {0x2000, 0x4000, 0x13, 0xe3, 0x91c, 0x80000000, 0xff, 0x81, 0xfffffffffffff680, 0x8, 0x80000001, 0x1ff}, {0x2002, 0x2000, 0x8, 0x7e, 0x100000000, 0x7, 0x1ad, 0x3806, 0x5, 0x3, 0xfffffffffffffffe, 0x10000}, {0x4, 0xf001, 0xe, 0x0, 0x3, 0x81, 0x116, 0x10000, 0x429, 0x2, 0x6e, 0x3}, {0x1, 0x0, 0x0, 0x2d9a, 0xffffffffffffffd8, 0x8000, 0xfff, 0x939, 0x401, 0x6, 0x1c6e, 0x99}, {0x5000, 0x4, 0x3, 0x8, 0x1, 0x8, 0x9, 0x7f, 0x7, 0x3, 0x5, 0x80000000000}, {0x1f003, 0x10000}, {0xf004}, 0x5, 0x0, 0x3000, 0x80, 0xb, 0x400, 0x100000, [0x2b52f645, 0x1, 0x91f4, 0xbd]}) [ 670.339342] ------------[ cut here ]------------ [ 670.344424] WARNING: CPU: 0 PID: 19983 at fs/direct-io.c:293 dio_complete+0x671/0x800 [ 670.352404] Kernel panic - not syncing: panic_on_warn set ... [ 670.352404] [ 670.355269] kobject: 'loop1' (ffff8880a49a2920): kobject_uevent_env [ 670.359775] CPU: 0 PID: 19983 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 670.359807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 670.359812] Call Trace: [ 670.359830] dump_stack+0x138/0x19c [ 670.359847] panic+0x1f2/0x438 [ 670.366516] kobject: 'loop1' (ffff8880a49a2920): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 670.373287] ? add_taint.cold+0x16/0x16 [ 670.373303] ? dio_complete+0x671/0x800 [ 670.373312] ? __warn.cold+0x14/0x34 [ 670.373326] ? dio_complete+0x671/0x800 [ 670.373334] __warn.cold+0x2f/0x34 [ 670.373352] ? ist_end_non_atomic+0x10/0x10 [ 670.373362] ? dio_complete+0x671/0x800 [ 670.373375] report_bug+0x216/0x254 [ 670.373389] do_error_trap+0x1bb/0x310 [ 670.436708] ? math_error+0x360/0x360 [ 670.440500] ? pagecache_isize_extended+0x250/0x250 [ 670.445535] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 670.450394] do_invalid_op+0x1b/0x20 [ 670.454140] invalid_op+0x1b/0x40 [ 670.457580] RIP: 0010:dio_complete+0x671/0x800 [ 670.462142] RSP: 0018:ffff88805ddbf1b8 EFLAGS: 00010216 [ 670.467510] RAX: 0000000000040000 RBX: 0000000000008200 RCX: ffffc9000c862000 [ 670.474766] RDX: 00000000000056b9 RSI: ffffffff819a9291 RDI: ffff888088ec87bc [ 670.482021] RBP: ffff88805ddbf200 R08: 1ffff11011af8200 R09: ffff88806254ec08 [ 670.489274] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a943fa80 [ 670.496527] R13: 0000000000008200 R14: ffff888088ec89b8 R15: 0000000000000000 [ 670.503792] ? dio_complete+0x671/0x800 [ 670.507775] ? dio_complete+0x671/0x800 [ 670.511745] ? trace_hardirqs_on_caller+0x400/0x590 [ 670.516795] ? write_end_fn+0xa0/0xa0 [ 670.520583] do_blockdev_direct_IO+0x530e/0x7fc0 [ 670.525333] ? try_to_free_buffers+0x181/0x2a0 [ 670.529919] ? sb_init_dio_done_wq+0x80/0x80 [ 670.534337] ? __lock_is_held+0xb6/0x140 [ 670.538438] ? ext4_dio_get_block_unwritten_async+0x1c0/0x1c0 [ 670.546185] ? __lock_is_held+0xb6/0x140 [ 670.550269] ? ext4_dio_get_block_unwritten_async+0x1c0/0x1c0 [ 670.556151] __blockdev_direct_IO+0xa1/0xd0 [ 670.560473] ? write_end_fn+0xa0/0xa0 [ 670.564260] ext4_direct_IO+0x70d/0x1890 [ 670.568329] ? ext4_dio_get_block_unwritten_async+0x1c0/0x1c0 [ 670.574226] generic_file_direct_write+0x1ec/0x430 [ 670.579143] __generic_file_write_iter+0x2bc/0x5b0 [ 670.584074] ext4_file_write_iter+0x2c0/0xfd0 [ 670.588583] ? ext4_file_mmap+0x2c0/0x2c0 [ 670.592734] ? __might_sleep+0x93/0xb0 [ 670.596608] do_iter_readv_writev+0x41e/0x680 [ 670.601097] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 670.605863] ? rw_verify_area+0xea/0x2b0 [ 670.609922] do_iter_write+0x154/0x550 [ 670.613801] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 670.619238] ? __kmalloc+0x379/0x7a0 [ 670.622936] vfs_iter_write+0x77/0xb0 [ 670.626722] iter_file_splice_write+0x578/0xae0 [ 670.631401] ? touch_atime+0xce/0x250 [ 670.635202] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 670.640328] ? rw_verify_area+0xea/0x2b0 [ 670.644397] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 670.649501] direct_splice_actor+0x126/0x1a0 [ 670.653932] splice_direct_to_actor+0x2a1/0x7b0 [ 670.658614] ? generic_pipe_buf_nosteal+0x10/0x10 [ 670.663467] ? do_splice_to+0x170/0x170 [ 670.667451] ? rw_verify_area+0xea/0x2b0 [ 670.671777] do_splice_direct+0x18d/0x230 [ 670.675929] ? splice_direct_to_actor+0x7b0/0x7b0 [ 670.678695] kobject: 'loop2' (ffff8880a49dc9a0): kobject_uevent_env [ 670.680779] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 670.680790] ? __sb_start_write+0x153/0x2f0 [ 670.680803] do_sendfile+0x4db/0xbd0 [ 670.689275] binder: undelivered death notification, 0000000000000000 [ 670.691958] ? do_compat_pwritev64+0x140/0x140 [ 670.691969] ? put_timespec64+0xb4/0x100 [ 670.691979] ? nsecs_to_jiffies+0x30/0x30 [ 670.691995] SyS_sendfile64+0x102/0x110 [ 670.706875] kobject: 'loop2' (ffff8880a49dc9a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 670.711351] ? SyS_sendfile+0x130/0x130 [ 670.711363] ? do_syscall_64+0x53/0x630 [ 670.711375] ? SyS_sendfile+0x130/0x130 [ 670.711388] do_syscall_64+0x1eb/0x630 [ 670.711400] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 670.753834] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 670.759012] RIP: 0033:0x458c29 [ 670.762185] RSP: 002b:00007f8698ff1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 670.769896] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458c29 [ 670.777182] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 670.784467] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 670.791730] R10: 00008000fffffffe R11: 0000000000000246 R12: 00007f8698ff26d4 [ 670.799015] R13: 00000000004c5e10 R14: 00000000004da5c8 R15: 00000000ffffffff [ 670.807229] Kernel Offset: disabled [ 670.810983] Rebooting in 86400 seconds..