Warning: Permanently added '10.128.0.128' (ECDSA) to the list of known hosts. 2019/03/07 15:16:44 fuzzer started 2019/03/07 15:16:49 dialing manager at 10.128.0.26:34047 2019/03/07 15:16:49 syscalls: 1 2019/03/07 15:16:49 code coverage: enabled 2019/03/07 15:16:49 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/03/07 15:16:49 extra coverage: extra coverage is not supported by the kernel 2019/03/07 15:16:49 setuid sandbox: enabled 2019/03/07 15:16:49 namespace sandbox: enabled 2019/03/07 15:16:49 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/07 15:16:49 fault injection: enabled 2019/03/07 15:16:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/07 15:16:49 net packet injection: enabled 2019/03/07 15:16:49 net device setup: enabled 15:19:03 executing program 0: stat(0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0x6, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) syzkaller login: [ 226.141612] IPVS: ftp: loaded support on port[0] = 21 [ 226.275859] chnl_net:caif_netlink_parms(): no params data found [ 226.340025] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.346650] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.354939] device bridge_slave_0 entered promiscuous mode [ 226.364598] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.371057] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.379769] device bridge_slave_1 entered promiscuous mode [ 226.410599] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 226.421812] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 226.453044] team0: Port device team_slave_0 added [ 226.461149] team0: Port device team_slave_1 added [ 226.595157] device hsr_slave_0 entered promiscuous mode [ 226.642306] device hsr_slave_1 entered promiscuous mode [ 226.791482] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.798087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.805241] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.811845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.885066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.904128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.916024] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.926236] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.937220] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 226.955660] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.970842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.979082] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.985599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.003580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.012000] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.018459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.064163] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 227.073929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.090268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.099591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.108463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.117619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.128174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.136047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.167416] 8021q: adding VLAN 0 to HW filter on device batadv0 15:19:05 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) 15:19:05 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) fcntl$setstatus(r0, 0x4, 0x2000) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 15:19:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0xd, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x22ef}, @val, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x44, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0x10150) [ 227.816229] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 227.823010] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 227.941936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.974863] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 228.032474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 15:19:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0xd, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x22ef}, @val, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x44, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0x10150) [ 228.314167] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 228.373000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 15:19:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x272, 0x0, 0x0}) 15:19:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 228.541477] binder: 10183:10184 ioctl c018620c 200000c0 returned -1 15:19:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 228.620063] binder: 10192 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 228.620093] binder: 10192:10193 ioctl c018620c 20000240 returned -22 15:19:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 228.737101] binder: 10200 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 228.737132] binder: 10200:10201 ioctl c018620c 20000240 returned -22 15:19:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 228.815677] binder: 10205 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 228.815706] binder: 10205:10206 ioctl c018620c 20000240 returned -22 15:19:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 228.894424] binder: 10210 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 228.894455] binder: 10210:10211 ioctl c018620c 20000240 returned -22 15:19:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 228.975015] binder: 10215 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 228.975044] binder: 10215:10217 ioctl c018620c 20000240 returned -22 15:19:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 229.066033] binder: 10220 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 229.066063] binder: 10220:10222 ioctl c018620c 20000240 returned -22 15:19:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 229.142934] binder: 10225 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 229.142965] binder: 10225:10227 ioctl c018620c 20000240 returned -22 15:19:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 229.217263] binder: 10229 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 229.217293] binder: 10229:10231 ioctl c018620c 20000240 returned -22 15:19:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 229.329309] binder: 10234 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 229.329344] binder: 10234:10235 ioctl c018620c 20000240 returned -22 15:19:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 229.435335] binder: 10238 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 229.435366] binder: 10238:10239 ioctl c018620c 20000240 returned -22 15:19:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20000, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2d, 'cpu'}, {0x0, 'cpu'}, {0x2f, 'rdma'}]}, 0x10) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000080)) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x4, 0x4) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x100, 0x7, 0x8001, 0xc270, 0x39e, 0x2, 0x3ff, {0x0, @in={{0x2, 0x4e21, @rand_addr=0x4}}, 0x6, 0x0, 0x4, 0x3, 0x80}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r1, 0xffffffffffffb447}, 0x8) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000240)=0x3, 0x4) fanotify_init(0x6, 0x88000) r3 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, r3) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000280)=0x2, 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000003c0)={r0, r0, 0x6, 0xf9, &(0x7f00000002c0)="936d0ffe253f4850a5a69f22f9a28f99fe4d4bbdcee5a4049a270c2f7c4a540460458d557ca671fb859b3a6943876491c3f4229c32a7941135648a8fe9dc22ff68454e47e71685de52c2d7164cf5723a7ca5ca97bc685163e39264e8510ed4d171203920811e20b504eebb3f387d3456fbf8471b8f00f26e4e15aaca5b31d4cadc6ad501d8b4ea32fdcc8164a46136581a0a0d19759aa90e841900071804ae6688b1578f3e8a65017f1da007553d0b35734e70c565b36965eef04c906d87b2e6ec28cf23515a7aa40fd4c6054f6a7f0cb0914bf0725403fd4be36aadb95e08464178363b62b3ee9408e24b0856decef0dc0ffe70d44c0f9085", 0x9, 0x6, 0x6, 0x9, 0x2, 0x2, 0xfff, 'syz0\x00'}) r4 = syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000004c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000500)=0x18) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000540)={r5, 0xc6, "168f490736fb232a4f4fa5d1ce46ac81d9ce46693bd08e07ab7c82fcb4527dafcd66dbb861f69753d00c1f257fcb735fdc477d20f133f1f838faf69cd288e13e47126d21f782fbbbcca63b28e538f75742d62a16efea0af6b2c33e6754f3bd244caa610ecd6fd54cd78bf5dc99aca302d05d01775ff3e283814e9374da27fe51df66af5a3c1d93e1e36d8c4aaaca7e96671a7c01743582fcfe9f5c2224b0f3b599d8fe8c058845fef98d4425b3d74058c0111dff4e6bf08d6c812c6ae6c5a4598426a48cbc7e"}, &(0x7f0000000640)=0xce) prctl$PR_GET_TSC(0x19, &(0x7f0000000680)) vmsplice(r4, &(0x7f00000006c0), 0x0, 0x1) ioctl$BLKRESETZONE(r4, 0x40101283, &(0x7f0000000700)={0x7fffffff, 0x80000000}) r7 = syz_open_dev$vcsa(&(0x7f0000000740)='/dev/vcsa#\x00', 0x3, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000780)={r2, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000007c0)={r6, 0x1}, 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000800)='/dev/audio\x00', 0x1, 0x0) sendfile(r7, r0, &(0x7f0000000840), 0xffffffff) pkey_alloc(0x0, 0x3) flock(r0, 0x1) r8 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f0000000980)={'syz', 0x2}, &(0x7f00000009c0)="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", 0x1000, 0xfffffffffffffffc) request_key(&(0x7f0000000880)='rxrpc_s\x00', &(0x7f00000008c0)={'syz', 0x1}, &(0x7f0000000900)='cpu', r8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000019c0)=0x8, 0x4) r9 = fcntl$getown(r4, 0x9) write$FUSE_LK(r0, &(0x7f0000001a00)={0x28, 0x0, 0x2, {{0x9ad6, 0x1, 0x0, r9}}}, 0x28) 15:19:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:07 executing program 0: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:08 executing program 0: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 229.984066] IPVS: ftp: loaded support on port[0] = 21 15:19:08 executing program 0: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 230.158909] chnl_net:caif_netlink_parms(): no params data found 15:19:08 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 230.242564] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.249074] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.257428] device bridge_slave_0 entered promiscuous mode [ 230.266438] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.273036] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.281069] device bridge_slave_1 entered promiscuous mode [ 230.324065] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 230.335168] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 230.376419] team0: Port device team_slave_0 added [ 230.389091] team0: Port device team_slave_1 added 15:19:08 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:08 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 230.476328] device hsr_slave_0 entered promiscuous mode [ 230.512432] device hsr_slave_1 entered promiscuous mode 15:19:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 230.709059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.745383] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 230.768096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.775761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.789156] 8021q: adding VLAN 0 to HW filter on device team0 15:19:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 230.818172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.826793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.835080] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.841606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.903401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.912436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.920614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.928752] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.935273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.942983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 15:19:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 230.953058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.961943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.998481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.006672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.021322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.033348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.043597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.098852] 8021q: adding VLAN 0 to HW filter on device batadv0 15:19:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000300)={'bridge0\x00\x00\x00\x00\x80\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000000000000000000000020000000000000000000000000000a00000000000000000000000009be9bfdf9a55bb6c985f13451c43b316896ee38e8ce9be862d6209a52397bc1fbcb2a69dad46814d0a1fda0dc3bb4492e63bd1e373cbcf901f0afa12e083df79fe802f096a080b468641cc5d871cf0cf937630de4cccf9f35490c89c5ae0c20b6d2900e282fb6c4273410ab3dffafb1a1861ac24ba9e29406646c054684876c3af665e46b770b6dd260ba7cd601428"]}) 15:19:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x1000, "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"}, &(0x7f0000000080)=0x1008) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r1, 0x7}, 0x8) r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tee(r2, r2, 0x1, 0x1) r3 = socket(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000140)) open(&(0x7f0000000000)='./file0\x00', 0x4001, 0x4) [ 231.436970] binder: 10306:10307 ioctl c018620c 20000240 returned -22 15:19:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 231.639823] binder: 10317:10318 ioctl c018620c 20000240 returned -22 15:19:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 231.817741] binder: 10327:10328 ioctl c018620c 20000240 returned -22 15:19:09 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:09 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 231.917679] cgroup: fork rejected by pids controller in /syz0 [ 231.957695] binder: 10334:10336 ioctl c018620c 20000240 returned -22 15:19:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:10 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 232.117888] binder: 10348:10349 ioctl c018620c 20000240 returned -22 15:19:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 15:19:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 232.317675] binder: 10358:10360 ioctl c018620c 20000240 returned -22 15:19:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 15:19:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 232.494298] binder: 10368:10371 ioctl c018620c 20000240 returned -22 15:19:10 executing program 0 (fault-call:4 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 232.666203] binder: 10379:10385 ioctl c018620c 20000240 returned -22 [ 232.779384] binder: 10389:10390 ioctl c018620c 20000240 returned -22 15:19:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x8010200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x82) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x109002) 15:19:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x9) syslog(0xb, &(0x7f0000000280)=""/4096, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x22800) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x38, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x1000, @mcast1, 0x7f}, @in6={0xa, 0x4e24, 0xfffffffffffeffff, @ipv4={[], [], @rand_addr=0x5}, 0xda}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0x5}, &(0x7f0000001280)=0x8) 15:19:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x80048107, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = msgget$private(0x0, 0x280) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/20) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000080)=""/137) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x400) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000040)={0x1, {}, 0x10000, 0xfff}) 15:19:11 executing program 1: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) 15:19:11 executing program 1: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x0) r2 = getpgrp(0x0) ptrace$setsig(0x4203, r2, 0x3, &(0x7f00000000c0)={0x1f, 0x7}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x800}) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000000)={0x35, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:11 executing program 1: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x10001, 0x400000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='%%)\x00', r1}, 0x10) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:11 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:11 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) 15:19:12 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x5) clone(0x8002, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000080)={0x40, 0x40, &(0x7f0000000280)="74c1569799af2f87e713fa27cf2e4445cc700fcad7c810a77ababaebd7f06bc54f5b9a87ec92afc39938f3bfe8df138ac7aa39a1ec25c16117714a3b5f7cb340c93379974ad9ec4a9faa64ab23efd28b70af8cc580491c31018f92a4c2e5bc36018eb93346b5db92996f97087c5f690856d1521426bb04262dd24d0d978c0cd2f631de6faf8106e12869bacf54efacf5dfcd69b0e362a638c0e18866809177511ea48005a0133d1228f4ae314ac824fdb14301848c19d9fc39df33a97979a074f85c75f9ecaba960fad5a492ea1390671a8d697071331acfd771515f2fe4ad6a843226dfcef260934e37028d4257c913", {0x9, 0x6, 0x31367d5f, 0x0, 0x1, 0x40, 0x3, 0x4}}) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:12 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 234.119618] binder: 10468:10469 ioctl 1 20000180 returned -22 15:19:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x400000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000005c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) readlinkat(r3, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/22, 0x16) r4 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0xe1, "c0e27c95ceed0c6ee0d412a3f2342180cb8b4b8a0f5354cfa04e6c549658e8b52a50caac92f33eb0d0ab1b391a1651d01ef744069b894516eb386f80f8e6442c414f808c217f0e6e9e5384c0a83a935d8206b323aa5484f68d9e1067953048c810ff216bec36897f5f8b240803f4c76ce3238bdb3dca6f664e14416b75b953563434d79a0f517f81e951968dd8e66b1af3040825e6cd3997f523db2329634a8fba532c79578014b5f143614969c50e9d7198cff7524588e2ad7bff41c19066112b9baff10a0b8501f0101abd28ccd78d00a07d00f8d2504d129ce2390c0ae5bdc5"}, &(0x7f0000000100)=0xe9) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000180)={r5, @in={{0x2, 0x4e22, @local}}}, 0x84) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f0000000340)={0x1, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) getresgid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) fchown(r4, r6, r7) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000004c0)) 15:19:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:13 executing program 1: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:13 executing program 1: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:13 executing program 1: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 235.463754] binder: 10602:10603 ioctl c018620c 0 returned -14 15:19:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 235.657906] binder: 10606:10607 ioctl c018620c 0 returned -14 15:19:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 15:19:13 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8004b000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2004284}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x20, &(0x7f0000000340)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e24, @rand_addr=0x7fff}]}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000400)={r3, 0x8, 0x7, 0x0, 0x1, 0xaff}, 0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, r0, 0x0, 0x4, &(0x7f0000000480)='nbd\x00'}, 0x30) write$P9_RGETLOCK(r0, &(0x7f0000000500)={0x32, 0x37, 0x2, {0x1, 0xfffffffffffff801, 0x9, r4, 0x14, 'userGPLkeyringcgroup'}}, 0x32) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000540)={0x6, 0x2, 0x6, 0x4, 0x4, 0xffffffffffffffff}) r6 = accept$inet6(r0, 0x0, &(0x7f0000000580)) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f00000005c0)=0x9, 0x4) perf_event_open$cgroup(&(0x7f0000000600)={0x3, 0x70, 0x10001, 0x0, 0x7, 0x1, 0x0, 0x9, 0x20, 0x1, 0x2, 0x8, 0x7fff, 0x3, 0x5, 0x2, 0x3ff, 0x3, 0x8001, 0x6, 0x6, 0x8, 0x1, 0x100000001, 0x1, 0x6, 0x0, 0x6, 0x1, 0x7, 0x3, 0xe50, 0x7f, 0xfffffffffffffffa, 0xfffffffffffffffd, 0xfff, 0x8, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0xffffffff, 0x6}, 0x8000, 0x7, 0x7, 0x9, 0x1, 0x2, 0x7}, r0, 0x8, 0xffffffffffffff9c, 0x2) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000680)={0x6, 0x0, [{0xfffffffffffffff9, 0x7, 0x0, 0x0, @irqchip={0x3ff, 0x4da7}}, {0xb9a, 0x1, 0x0, 0x0, @sint={0x1, 0x10000}}, {0xfffffffffffffff9, 0x4, 0x0, 0x0, @irqchip={0x5, 0x100}}, {0x16e8, 0x7, 0x0, 0x0, @adapter={0x95, 0x64f8, 0xa4, 0x4, 0xea}}, {0x7, 0x2, 0x0, 0x0, @sint={0x905, 0x1}}, {0xff, 0x7, 0x0, 0x0, @msi={0x942f, 0x8001, 0x3ff}}]}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000800)={r3, 0x20, &(0x7f00000007c0)=[@in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000840)=0x10) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000880)) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f00000008c0)=0x5) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000900)={0x77359400}, 0x10) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000940)={'filter\x00', 0x4}, 0x68) pkey_alloc(0x0, 0x3) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000e00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x6000800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000a00)={0x3a0, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x8c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x69a4}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffff001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}]}, @TIPC_NLA_BEARER={0x104, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @empty, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1f}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}, @TIPC_NLA_LINK={0x94, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf496}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff7fffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3c82}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd023}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0x3a0}}, 0x800) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000ec0)=0x1, 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000f00)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e24, @multicast1}], 0x40) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000f40)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000f80)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000fc0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x7fffffff, 0x0, 0x4, 0x140000}, &(0x7f0000001080)=0x98) [ 235.913836] binder: 10610:10611 ioctl c018620c 0 returned -14 [ 235.962642] device bridge_slave_1 left promiscuous mode [ 235.968546] bridge0: port 2(bridge_slave_1) entered disabled state 15:19:14 executing program 1 (fault-call:3 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 236.004217] device bridge_slave_0 left promiscuous mode [ 236.010053] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.098128] FAULT_INJECTION: forcing a failure. [ 236.098128] name failslab, interval 1, probability 0, space 0, times 1 [ 236.109623] CPU: 0 PID: 10616 Comm: syz-executor.1 Not tainted 5.0.0+ #11 [ 236.116621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.126112] Call Trace: [ 236.128775] dump_stack+0x173/0x1d0 [ 236.132458] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 236.137809] should_fail+0xa19/0xb20 [ 236.141613] __should_failslab+0x278/0x2a0 [ 236.145916] should_failslab+0x29/0x70 [ 236.149876] kmem_cache_alloc_trace+0x125/0xb40 [ 236.154622] ? binder_get_thread+0x406/0xf60 [ 236.159095] binder_get_thread+0x406/0xf60 [ 236.163386] ? binder_poll+0xbd0/0xbd0 [ 236.167336] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 236.172609] ? binder_poll+0xbd0/0xbd0 [ 236.176557] binder_ioctl+0x56d/0x2d20 [ 236.180535] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 236.185985] ? binder_poll+0xbd0/0xbd0 [ 236.189926] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 236.195178] ? binder_poll+0xbd0/0xbd0 [ 236.199128] do_vfs_ioctl+0xebd/0x2bf0 [ 236.203096] ? security_file_ioctl+0x92/0x200 [ 236.207667] __se_sys_ioctl+0x1da/0x270 [ 236.211705] __x64_sys_ioctl+0x4a/0x70 [ 236.215656] do_syscall_64+0xbc/0xf0 [ 236.219444] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 236.224780] RIP: 0033:0x457f29 [ 236.228026] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 236.246977] RSP: 002b:00007f5730af5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.254750] RAX: ffffffffffffffda RBX: 00007f5730af5c90 RCX: 0000000000457f29 [ 236.262072] RDX: 0000000020000240 RSI: 00000000c018620c RDI: 0000000000000003 [ 236.269398] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 236.276733] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5730af66d4 [ 236.284053] R13: 00000000004bf25a R14: 00000000004d0c00 R15: 0000000000000004 [ 236.292115] binder: 10615:10616 ioctl c018620c 20000240 returned -12 [ 236.485278] device hsr_slave_1 left promiscuous mode [ 236.548438] device hsr_slave_0 left promiscuous mode [ 236.597871] team0 (unregistering): Port device team_slave_1 removed [ 236.637275] team0 (unregistering): Port device team_slave_0 removed [ 236.662477] IPVS: ftp: loaded support on port[0] = 21 [ 236.681651] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 236.729121] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 236.846601] bond0 (unregistering): Released all slaves 15:19:14 executing program 1 (fault-call:3 fault-nth:1): r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 236.919803] binder_ioctl_get_node_info_for_ref: 9 callbacks suppressed [ 236.919821] binder: 10621 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 236.919847] binder: 10621:10622 ioctl c018620c 20000240 returned -22 [ 237.130321] chnl_net:caif_netlink_parms(): no params data found [ 237.230485] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.237083] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.245327] device bridge_slave_0 entered promiscuous mode [ 237.255329] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.261884] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.269955] device bridge_slave_1 entered promiscuous mode [ 237.301780] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 237.313248] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 237.344366] team0: Port device team_slave_0 added [ 237.352398] team0: Port device team_slave_1 added [ 237.416347] device hsr_slave_0 entered promiscuous mode [ 237.572768] device hsr_slave_1 entered promiscuous mode [ 237.644754] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.651360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.658444] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.665002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.817056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.834364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.844225] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.853278] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.880567] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.913655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.921872] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.928332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.984668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.992841] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.999305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.009064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.018110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.026709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.042559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.054216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.083035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.093602] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.101661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.493720] IPVS: ftp: loaded support on port[0] = 21 [ 238.643639] chnl_net:caif_netlink_parms(): no params data found [ 238.704166] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.710670] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.719089] device bridge_slave_0 entered promiscuous mode [ 238.728775] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.735350] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.743673] device bridge_slave_1 entered promiscuous mode [ 238.774864] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 238.785980] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 238.817486] team0: Port device team_slave_0 added [ 238.825788] team0: Port device team_slave_1 added [ 238.986289] device hsr_slave_0 entered promiscuous mode [ 239.062301] device hsr_slave_1 entered promiscuous mode [ 239.332856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.355044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.363498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.379329] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.397264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.406103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.414616] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.421068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.474278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 239.484182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.498580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.506946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.515549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.523761] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.530201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.537950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.547293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.556353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.565155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.573766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.582512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.591056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.599495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.608155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.616473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.629428] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.637195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.672580] 8021q: adding VLAN 0 to HW filter on device batadv0 15:19:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2008000000000000, 0x80) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) clone(0x60002000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0xc4e) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) ftruncate(r1, 0x5) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0xa901, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x2}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={r3, 0x401, 0x43c}, 0x8) [ 239.762200] binder: 10635 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 239.762230] binder: 10635:10636 ioctl c018620c 20000240 returned -22 [ 239.785700] binder: 10635 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 239.785729] binder: 10635:10636 ioctl c018620c 20000240 returned -22 15:19:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 239.848625] binder: 10643 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 239.848654] binder: 10643:10644 ioctl c018620c 20000240 returned -22 [ 239.989530] binder: 10653 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 239.989561] binder: 10653:10655 ioctl c018620c 20000240 returned -22 [ 240.017433] IPVS: ftp: loaded support on port[0] = 21 15:19:18 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000458e8c522bfc3d93863ae22ccf38225c9b4d4ef8722c89c2a5055db5bd5faf9ae7a3f38efaf550ceec8a659ba452696f802e639d7876813e40cece3676057df0f176b63436f6adcffa09adb37464"], &(0x7f00000001c0)=0x4) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) write$FUSE_LK(r1, &(0x7f0000000040)={0x28, 0xffffffffffffffda, 0x5, {{0x1acd4e6d, 0x1, 0x3, r2}}}, 0x28) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='security.selinux\x00', &(0x7f00000003c0)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x2) exit_group(0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast1, @in6}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clock_getres(0x6, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000040)={'raw\x00', 0x32, "20e4842419d5ef21c4cca86aa5848c30a32ab0534405635342a0d1093185002e099bff49f133de4cbc087a5e6ccd4865b915"}, &(0x7f00000000c0)=0x56) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 240.146697] binder: 10663 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 240.146726] binder: 10663:10665 ioctl c018620c 20000240 returned -22 15:19:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x8000000021ffffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4000, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000040)={0xa, 0x80, {0x57, 0x8, 0x10000, {0x0, 0x4}, {0x1000, 0x8000}, @cond=[{0x8000, 0x5, 0x5, 0x1000}, {0x200, 0x1000, 0x401, 0x8, 0x95, 0x34b}]}, {0x55, 0xffffffff, 0x1000, {0x2, 0x18}, {0x2, 0xaa60}, @ramp={0x6, 0x8, {0x1, 0x3, 0x5, 0x2}}}}) clone(0xfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 240.192156] cgroup: fork rejected by pids controller in /syz1 [ 240.207529] binder: 10668 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 240.207559] binder: 10668:10672 ioctl c018620c 20000240 returned -22 [ 240.338518] QAT: Invalid ioctl 15:19:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x8000000000010400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$inet(0x2, 0x80807, 0xfcc) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000000)={0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 240.365721] binder: 10679 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 240.365751] binder: 10679:10680 ioctl c018620c 20000240 returned -22 [ 240.386492] QAT: Invalid ioctl [ 240.429403] binder: 10679 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 240.429433] binder: 10679:10680 ioctl c018620c 20000240 returned -22 15:19:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x24b, 0x0, 0x0}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x100, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x4, {0x7, 0x1c, 0x20, 0x4, 0xffffffffffffffd9, 0x2382, 0x2, 0xffffffff}}, 0x50) 15:19:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:18 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$capi20_data(r0, &(0x7f0000000040)={{0x10, 0x4, 0x0, 0x83, 0xe7600000000, 0x9}, 0x47, "7ad64b7e7c8c8c44e61006952262f5be4a4f0da23f21579655160985d74849c10a8f8ffc2807921e5cd6edb6c5804e9004264dec2d902b2a1d06b6d1258749b3ca6bddb73089d4"}, 0x59) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 240.614426] binder: 10691:10692 ioctl c018620c 200000c0 returned -1 [ 240.694728] binder: 10702:10703 ioctl c018620c 20000000 returned -1 15:19:18 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000080)={r1, @in={{0x2, 0x4e24, @empty}}}, 0x84) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}, 0x2000000}, 0x1c) [ 240.824155] binder: 10724 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 240.824184] binder: 10724:10730 ioctl c018620c 20000240 returned -22 15:19:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0xff) sync_file_range(r0, 0x0, 0x3f, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40, 0x0) 15:19:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) clone(0x80000004, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x3) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:19 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2080, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x23}, @empty, 0x1, 0x4, [@loopback, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x20) r1 = socket$inet(0x2b, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20007ffe, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0x1b, 0xdd3, 0x0, 0x100000001, @time={0x77359400}, {0x401, 0x200}, {0xf897, 0x4}, @time=@tick=0xb3f}], 0x30) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) 15:19:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001ff1, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0xbe, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 241.247219] binder: 10831:10832 ioctl c018620c 20000240 returned -22 15:19:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x40, 0x88040) ioctl$VT_RELDISP(r1, 0x5605) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x54, 0x0, 0x0}) [ 241.307491] binder: 10834:10835 ioctl c018620c 20000240 returned -1 15:19:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x40) accept4$packet(r1, 0x0, &(0x7f0000000040), 0x80800) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x296f33c6f29ca738) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x20040, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x800, 0x2000) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff9, &(0x7f0000000040)=0x3}) socket$rds(0x15, 0x5, 0x0) [ 241.448601] binder: 10940:10943 ioctl c018620c 20000000 returned -1 15:19:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xd636eda, 0xff, 0x0, 0x3, 0xd5, 0x3f, 0x1, 0x81, 0xdf, 0x9, 0x0, 0x401, 0x4, 0x0, 0x8, 0x20}}) 15:19:19 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3, 0x101000) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x7, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 241.540768] binder: 10947:10950 ioctl c018620c 20000240 returned -22 [ 241.560342] binder: 10947:10953 ioctl c018620c 20000240 returned -22 15:19:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x40000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000480), 0x4) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20c70000", @ANYRES16=r2, @ANYBLOB="080025bd7000fddbdf25080000000c0009000800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x20000044) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000003c0)={0x0, 0x9, 0x7, 0x40000}) r3 = msgget(0x0, 0x44) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, r1, 0x0, 0xe, &(0x7f0000000080)='/dev/admmidi#\x00'}, 0x30) mq_notify(r1, &(0x7f0000000380)={0x0, 0x1e, 0x1, @tid=r4}) msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000300)=""/83) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000200)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000400)={0x7b, 0x0, [0xfffffffffffff1b0, 0xc7e0, 0x831, 0x7fff]}) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) [ 241.664012] binder: 10958:10960 ioctl c018620c 20000240 returned -22 [ 241.676381] binder: 10959:10963 ioctl c018620c 20000240 returned -22 [ 241.774538] binder: 11005:11026 ioctl c018620c 20000240 returned -22 15:19:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xff, 0x600002) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000040)={{0x2, 0x6, 0x6, 0x3f, 0xff2, 0x401}, 0xd219, 0x1, 0x292, 0x10000, 0xff, "2acabcfb6c924300caed7e0fe43668f679fb3434b21fc52f965a8bd15e5b31a0daf5e7d0160d0f29d50176521fc494c1a2b6329b65d0e9cbb31c1b470f6438583367346d8ca350de44bddc94a2afd75413996a6577d82ac7cbc76204cb523947ac2dd68e3a8493e9e2376b66e2ecb41471810008ea3423ac5a04d3f2dacbdfb4"}) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xd636eda, 0xff, 0x0, 0x3, 0xd5, 0x3f, 0x1, 0x81, 0xdf, 0x9, 0x0, 0x401, 0x4, 0x0, 0x8, 0x20}}) 15:19:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x8000, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000001280)=0x7fffffff) [ 241.936273] binder_ioctl_get_node_info_for_ref: 6 callbacks suppressed [ 241.936290] binder: 11075 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 241.936317] binder: 11075:11077 ioctl c018620c 20000240 returned -22 [ 241.990212] binder: 11079 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 241.990242] binder: 11079:11080 ioctl c018620c 20000240 returned -22 15:19:20 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2080, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x23}, @empty, 0x1, 0x4, [@loopback, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x20) r1 = socket$inet(0x2b, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20007ffe, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0x1b, 0xdd3, 0x0, 0x100000001, @time={0x77359400}, {0x401, 0x200}, {0xf897, 0x4}, @time=@tick=0xb3f}], 0x30) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) 15:19:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000000)={0x240f0d683f6ad6d4, 0x0, 0x0, 0xfffffffffffffedf, 0x0, 0x0}) 15:19:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) write$P9_RWALK(r1, &(0x7f00000000c0)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x2, 0x7}]}}, 0x16) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000280)={0x1, 0x0, 0x2080, {0xf001, 0x1}, [], "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", "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"}) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 242.317936] binder: 11189 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 242.317964] binder: 11189:11195 ioctl c018620c 20000000 returned -22 [ 242.428877] binder: 11189 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 242.428906] binder: 11189:11198 ioctl c018620c 20000000 returned -22 15:19:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x200000007ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000080)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x101000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000280)={0x9, 0xb8d9, 0x578, 0x8, [], [], [], 0x3, 0x7, 0x3, 0x4, "1bf0516d4bdd048e3f9663e4e53183db"}) ioctl$VT_ACTIVATE(r2, 0x5606, 0x8000) [ 242.507932] IPVS: ftp: loaded support on port[0] = 21 15:19:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000040)={{0x2, 0x3}, {0x3ff}, 0x200, 0x0, 0x7fffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 242.640774] binder: 11205 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 242.640804] binder: 11205:11206 ioctl c018620c 20000240 returned -22 [ 242.710722] chnl_net:caif_netlink_parms(): no params data found [ 242.803914] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.810432] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.818776] device bridge_slave_0 entered promiscuous mode [ 242.843737] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.850245] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.858750] device bridge_slave_1 entered promiscuous mode 15:19:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x244a80, 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x8}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={r2, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f00000001c0)=r4) clone(0x2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000400), 0x2) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200182, 0x0) ioctl$EVIOCGNAME(r5, 0x80404506, &(0x7f0000000280)=""/227) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000040)={0x100, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) 15:19:21 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x141800, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000180)=0x78) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x3f) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 242.928673] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 242.967478] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:19:21 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2080, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x23}, @empty, 0x1, 0x4, [@loopback, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x20) r1 = socket$inet(0x2b, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20007ffe, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0x1b, 0xdd3, 0x0, 0x100000001, @time={0x77359400}, {0x401, 0x200}, {0xf897, 0x4}, @time=@tick=0xb3f}], 0x30) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) [ 243.043020] team0: Port device team_slave_0 added [ 243.066092] team0: Port device team_slave_1 added 15:19:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSBRKP(r2, 0x5425, 0x4) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x6) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x7, &(0x7f0000000040)=0x0) r4 = socket$bt_bnep(0x1f, 0x3, 0x4) io_submit(r3, 0x6, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x401, r4, &(0x7f0000000080)="ff54792bcb1b7b2977d019132fbd60f38fe9081f88bf86f134a3eac230efb4b5490ed6c1d3ee3afda55a3eb98b4811b8dfc852d0aa4661be5507ff", 0x3b, 0x5, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0xecb7, r1, &(0x7f0000000180)="5a17d040e71a2d26bfb80b0ff3632bd80f8d33c9b20f73eaf8fd718309fba978bb75fbc3a5b8d365c995b29085fc960ca8ba150931d4bc94bc363524648658455b061f3d8a45354c5bd9b337ba15e6a2cf3d8f62a982bc965ce291617a31f0f749126a07abe7", 0x66, 0x8, 0x0, 0x2, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x2, r2, &(0x7f0000000200)="f85972a685ff5d1bd594100097e9608c49fa52b9041c736fc76fa18f42b1b28ea5149b1f9f10c53129e6a00e9729b4d80b0dea671fc0725008e8b2b3d4c0c3", 0x3f, 0x6, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x3, r2, &(0x7f00000002c0)="336f9748e3ecde4a0ee440daaca6235260f2946b0dfae15ba0a35fedcd8e117e1973c449c4c6cbc8d5ee77684473972e726415a184b1440482adf11cf0ab09829cac8d555eab96b4df6f13c0d98d1670c208ae859fe41973d144e3bea274ac7dea327114620afe1d48783ee63ec4ace27f76a9b3a7e323cccadc9931400a36129acdaae2672bade5875e1bca44fe23bd367fb87629872331aacf146696604dfc61371728d706592f19cb1218b3fb621be621b94f4c6d5a4861ef5f1d8b9488796d0a432e373e61511d0d428d9f9cebe9dc34b1328f241e0cd4cba014ae30280b4607db0839f0db", 0xe7, 0x3, 0x0, 0x0, r2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x40, r0, &(0x7f0000000400), 0x0, 0x1, 0x0, 0x3, r1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000000480)="2735e1af1acf2b0949b7894f32", 0xd, 0x7fffffff, 0x0, 0x2, r1}]) [ 243.148472] binder: 11316 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 243.148510] binder: 11316:11326 ioctl c018620c 20000240 returned -22 [ 243.196825] device hsr_slave_0 entered promiscuous mode [ 243.215998] binder: BINDER_SET_CONTEXT_MGR already set [ 243.221868] binder: 11316:11326 ioctl 40046207 0 returned -16 [ 243.237173] device hsr_slave_1 entered promiscuous mode [ 243.259120] binder: 11320 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 243.259150] binder: 11320:11326 ioctl c018620c 20000240 returned -22 [ 243.278924] binder: 11329 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 243.278954] binder: 11329:11330 ioctl c018620c 20000240 returned -22 15:19:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x202a00) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000040)={0xfffffffffffffff7, 0x3, 'client1\x00', 0xffffffff80000002, "26173925f3833153", "8da58bef00687e23e5bd3351acac4df073f89ef63f5720ade6e79e596ae1ea2c", 0x5, 0x3f}) [ 243.323321] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.329908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.337088] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.343668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.487340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.505711] binder: 11409 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 243.505737] binder: 11409:11417 ioctl c018620c 20000240 returned -22 [ 243.514755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.534475] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.585239] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.613660] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 243.655692] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.707072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.715907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.724134] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.730589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.802233] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.812067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.839775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.848573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.856692] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.863189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.871973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.880944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.889963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.899295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.907957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.916705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.925296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.933536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.942200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.950455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.965241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.973452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.003080] 8021q: adding VLAN 0 to HW filter on device batadv0 15:19:22 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x400, 0x0) 15:19:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x20002000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000880)='/dev/cachefiles\x00', 0x511000, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f00000008c0)={0x2, 0x0, [{}, {}]}) clone(0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000080)={0xf62, 0xb, 0x4, 0x140420, {0x77359400}, {0x4, 0xc, 0x40000000008001, 0x7ffffffb, 0xbd36, 0x3, "a94a3704"}, 0x1, 0x3, @planes=&(0x7f0000000040)={0x9, 0x3, @mem_offset=0x8000, 0x7}, 0x4}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000280)={"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"}) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x2, 0x13, 0x4, 0x0, 0x3d, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_nat_t_port={0x1, 0x0, 0x4e21}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e23, 0x6, @empty, 0x6}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_filter={0x5, 0x1a, @in6=@empty, @in6=@rand_addr="b2d1232fe79a94fe418c119f9031f244", 0x17, 0x4}, @sadb_x_nat_t_port={0x1, 0x0, 0x4e22}, @sadb_x_policy={0x8, 0x12, 0x0, 0x5, 0x0, 0x6e6bb5, 0x14, {0x6, 0x7e, 0x7fffffff, 0x9, 0x0, 0x9, 0x0, @in=@rand_addr=0x3d, @in6=@mcast1}}, @sadb_x_nat_t_type={0x1, 0x14, 0x680}, @sadb_x_sec_ctx={0x1b, 0x18, 0xec, 0x3, 0xd0, "9b81217fcdbce33145804683ef1d64d26d9e56e62034987d7c69bdfd1a530f5f47df37a2feff547ac69188a4ba8503fa7baf68e6f3d5eaf5e6dace6a0795cf0d81ea7ef6baf0a6db1563dc76b3095291a47b147516912731287cc7418792fe4e79b5b3aafa15950135386db75595890f4deded06df5cec45141dfb3d92debc7939024b18cc10cd9b254d5f27a928848b6f541ab964b0b7dd57d442df159cbbf91fbeed438dafa04c06965c37221a92d57e7ffd8935ab07d4a663997b5edb1d3b538716d75687d5e3938e786a86e7ce38"}, @sadb_key={0x5, 0x9, 0xf8, 0x0, "3644e73b353d8a0e775f2a7c41c94c1c4e19f84c8277d47007bdf81ca0db9f"}, @sadb_lifetime={0x4, 0x7, 0x6da, 0x1e4d, 0x8001, 0x80000001}]}, 0x1e8}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000980)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f0000000940)='/dev/vsock\x00'}, 0x30) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000009c0)=r3) exit_group(0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000001c0)={0x2ea, 0x6, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x1f, 0x200) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @remote, 0xfffffffffffffffa}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:22 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2080, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x23}, @empty, 0x1, 0x4, [@loopback, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x20) r1 = socket$inet(0x2b, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20007ffe, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0x1b, 0xdd3, 0x0, 0x100000001, @time={0x77359400}, {0x401, 0x200}, {0xf897, 0x4}, @time=@tick=0xb3f}], 0x30) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) [ 244.096781] binder: 11447 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 244.096811] binder: 11447:11449 ioctl c018620c 20000240 returned -22 [ 244.198034] binder: 11452:11458 ioctl c018620c 20000240 returned -22 15:19:22 executing program 3: unshare(0x600) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 15:19:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:22 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0x0, 0x0}) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000100)="b3", 0x1}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x80000000004) write(r2, &(0x7f0000002c40)="29000000140005b7ff01ff00040860eb0101ff01ffa4f80c3df00fd57f25ffffff0100002a00f3ff09", 0x29) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xfffffffffffffffe, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000080)) 15:19:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) 15:19:22 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0x0, 0x0}) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000100)="b3", 0x1}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x80000000004) write(r2, &(0x7f0000002c40)="29000000140005b7ff01ff00040860eb0101ff01ffa4f80c3df00fd57f25ffffff0100002a00f3ff09", 0x29) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xfffffffffffffffe, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000080)) 15:19:22 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2080, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x23}, @empty, 0x1, 0x4, [@loopback, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x20) r1 = socket$inet(0x2b, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20007ffe, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) 15:19:23 executing program 3: ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x8001) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f00000002c0)="00de", 0x2, r0) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r2}, &(0x7f0000000480)=""/83, 0xfffffffffffffe12, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x9, 0x101000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x7, 0x5, [0x8000, 0x0, 0x6, 0xf24f, 0x0]}, &(0x7f0000000380)=0x12) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000400)={r4, 0xffffffffffff54b4}, &(0x7f0000000600)=0x8) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r1, r2}, &(0x7f0000000500)=""/249, 0xf9, &(0x7f0000000240)={&(0x7f00000000c0)={'crc32-pclmul\x00'}, &(0x7f0000000180)="719ff34344ef8c7dd0811bd5d6d4bc08ac8463e2ecc154fa1fd527e4d43872585b6368642000fea151d8eb2a5e732205e5b759e61903741236f0b5c245d5e6c88215ec2de1eeb2be", 0x48}) 15:19:23 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2080, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x23}, @empty, 0x1, 0x4, [@loopback, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x20) r1 = socket$inet(0x2b, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20007ffe, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) 15:19:23 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x8001, @remote, 0x8}}, 0x6, 0x7459, 0xdc, 0x97, 0xd6e}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x2, 0xce1, 0x3, 0x43f1}, &(0x7f0000000240)=0x98) getrandom(&(0x7f0000000000)=""/6, 0x6, 0x3) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000440)={0xf494, 0x2, 0x5, 0x1000, 0x34c, 0xbf8, 0x7ff, 0x5, r2}, 0x20) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b73ec2347268e034cdb915772fd4522adeb6b7595a981cc92fa3c0791a533635e4130ee7a2b4b210f29fcf328ff935a52a4e6e7fbed72530f5fdd111ef5ae0420278f2c8f5ae2078", @ANYRES16=r3, @ANYBLOB="100026bd7000fedbdf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) write(r0, &(0x7f0000000340)="8efe5c2f26d2707c53350566a628f0c8b2d3c395b45c1b03ebdd393a76b0cc49ec8cad272814db7c26c777179ba96ecd40320e174c2c2d7cfdc0a673645be9907ccc54daa2c55ea3cee5498dfc68e7162f96e16e0c71a19fd90a1af66f7dabe83650ab04d1ef7334eed8300f1ea6a009fcc43dae83a9260aa530623f5ba0a65fd55fe5fa34371894e07862a08fda0034cd2976844befafb44f2c3e198e536c4144884a28eb87519bd427f6e171e55474556039b64b8b3acded46df52b73070b8ed310d1f2a7acc01ee0c08a06e1888aaed5b817d7c9cceb2cd3701fa52dc726296a59d9b19b94524", 0xe8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000480)={r1, 0xffffffffffffffe0}, 0x8) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 15:19:23 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2080, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x23}, @empty, 0x1, 0x4, [@loopback, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x20) r1 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) 15:19:23 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x8001, @remote, 0x8}}, 0x6, 0x7459, 0xdc, 0x97, 0xd6e}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x2, 0xce1, 0x3, 0x43f1}, &(0x7f0000000240)=0x98) getrandom(&(0x7f0000000000)=""/6, 0x6, 0x3) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000440)={0xf494, 0x2, 0x5, 0x1000, 0x34c, 0xbf8, 0x7ff, 0x5, r2}, 0x20) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b73ec2347268e034cdb915772fd4522adeb6b7595a981cc92fa3c0791a533635e4130ee7a2b4b210f29fcf328ff935a52a4e6e7fbed72530f5fdd111ef5ae0420278f2c8f5ae2078", @ANYRES16=r3, @ANYBLOB="100026bd7000fedbdf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) write(r0, &(0x7f0000000340)="8efe5c2f26d2707c53350566a628f0c8b2d3c395b45c1b03ebdd393a76b0cc49ec8cad272814db7c26c777179ba96ecd40320e174c2c2d7cfdc0a673645be9907ccc54daa2c55ea3cee5498dfc68e7162f96e16e0c71a19fd90a1af66f7dabe83650ab04d1ef7334eed8300f1ea6a009fcc43dae83a9260aa530623f5ba0a65fd55fe5fa34371894e07862a08fda0034cd2976844befafb44f2c3e198e536c4144884a28eb87519bd427f6e171e55474556039b64b8b3acded46df52b73070b8ed310d1f2a7acc01ee0c08a06e1888aaed5b817d7c9cceb2cd3701fa52dc726296a59d9b19b94524", 0xe8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000480)={r1, 0xffffffffffffffe0}, 0x8) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 15:19:23 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2080, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x23}, @empty, 0x1, 0x4, [@loopback, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x20) r1 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) 15:19:23 executing program 3: r0 = socket$packet(0x11, 0x808000000002, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000001000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000006000/0x4000)=nil, &(0x7f0000002000/0xe000)=nil, &(0x7f0000000340)="4c4b14c12fbd17aa25b51aa9c2ad7b231b01990fb2e630a6b94e4c2d565e60f27496b9376826fbb55ca4fa438c2542d35ebd27f428078ca0492360ac8eb79b4903698993a574ca6b6a8773b19e2b6b5301825f463b11185af1628a3d2bc47bc9aa49288d48db105917c188107cf5b9c975d82d5d22dfa2c30e353328cb0ed3d413135e37c5acfd415ebf77b7d2fd560281451040", 0x94, r0}, 0x68) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000140)={r0, r0, 0x3, 0x45, &(0x7f00000000c0)="90ccaf3456bed9b377bc24ebb56578b3c6c78473eb25e58439d7998079707fe081fb18c12150ed113c74a3838f5e6d5b368af224d221c42a3785d70cdbfb4b61630bc42371", 0x4, 0x6, 0x1, 0x2, 0x100000001, 0x2, 0x4, 'syz0\x00'}) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000040)) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x140}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000300)={0x5, 0x4, 0x8000, 0x9, 0x9, 0x4, 0x7, 0x9, r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28}, 0x10) [ 246.002263] protocol 88fb is buggy, dev hsr_slave_0 [ 246.007821] protocol 88fb is buggy, dev hsr_slave_1 [ 246.804353] device bridge_slave_1 left promiscuous mode [ 246.810261] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.843893] device bridge_slave_0 left promiscuous mode [ 246.849753] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.074803] device hsr_slave_1 left promiscuous mode [ 247.118166] device hsr_slave_0 left promiscuous mode [ 247.158954] team0 (unregistering): Port device team_slave_1 removed [ 247.197840] team0 (unregistering): Port device team_slave_0 removed [ 247.261931] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 247.321853] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 247.404933] bond0 (unregistering): Released all slaves [ 248.647497] IPVS: ftp: loaded support on port[0] = 21 [ 248.891335] chnl_net:caif_netlink_parms(): no params data found [ 249.012993] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.019505] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.027833] device bridge_slave_0 entered promiscuous mode [ 249.062788] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.069262] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.077626] device bridge_slave_1 entered promiscuous mode [ 249.107880] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 249.119012] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 249.122443] IPVS: ftp: loaded support on port[0] = 21 [ 249.180158] team0: Port device team_slave_0 added [ 249.191329] team0: Port device team_slave_1 added [ 249.306010] device hsr_slave_0 entered promiscuous mode [ 249.382332] device hsr_slave_1 entered promiscuous mode [ 249.576475] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.583017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.589944] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.596587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.705557] chnl_net:caif_netlink_parms(): no params data found [ 249.757720] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.764254] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.772398] device bridge_slave_0 entered promiscuous mode [ 249.789101] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.795674] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.803950] device bridge_slave_1 entered promiscuous mode [ 249.844350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.853362] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.861647] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.876198] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 249.924928] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 249.936150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.943972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.955326] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.973492] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 250.020168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.029007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.037027] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.043491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.050923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.059254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.067222] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.073689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.081097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.108058] team0: Port device team_slave_0 added [ 250.118431] team0: Port device team_slave_1 added [ 250.134114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.143943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.152702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.192170] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.425877] device hsr_slave_0 entered promiscuous mode [ 250.592649] device hsr_slave_1 entered promiscuous mode [ 250.898743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.907634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.916270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.924620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.964905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.973044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.003367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.066409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.149502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.188716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.196605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.209851] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.217000] device bridge_slave_1 left promiscuous mode [ 251.223630] bridge0: port 2(bridge_slave_1) entered disabled state 15:19:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:29 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2080, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x23}, @empty, 0x1, 0x4, [@loopback, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x20) r1 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) [ 251.272115] device bridge_slave_0 left promiscuous mode [ 251.277940] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.382282] binder_ioctl_get_node_info_for_ref: 1 callbacks suppressed [ 251.382299] binder: 11721 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 251.382323] binder: 11721:11722 ioctl c018620c 20000240 returned -22 [ 251.527777] device hsr_slave_1 left promiscuous mode [ 251.629782] device hsr_slave_0 left promiscuous mode [ 251.670107] team0 (unregistering): Port device team_slave_1 removed [ 251.687281] team0 (unregistering): Port device team_slave_0 removed [ 251.700651] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 251.759530] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 251.843457] bond0 (unregistering): Released all slaves [ 252.133186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.141440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.149583] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.156071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.165209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.173941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.182036] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.188484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.197781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.213023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.252363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.261369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.270262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.278793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.287339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.299734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.307848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.316124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.378572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.390119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.398562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.407154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.543973] 8021q: adding VLAN 0 to HW filter on device batadv0 15:19:30 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x6) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000080)) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x18e, 0x0, 0x0}) 15:19:30 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x202, &(0x7f0000000080)=0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) close(r0) close(r2) epoll_create1(0x7fffe) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000140)={0xad00, 0x8, 0x1}) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000b40)={0x0, 0xfb, 0x1015, 0x4, 0x1, "141500c60556d08592572c443a9cfaa6", "9ed3db518b8639b172a5e6554234a5a56ed55e924804f351e9a450be9ab9937f07e347a02221f6755710a8ab41603e02ef44ed77cb3ea60e9860d9e43c8c6757e088bb02ff930b67b77d49647abf9e7c97f01aeda7b8e6c6a636928322d2e90781b437f817e1381592b08c7e03c4a5d708c04db0af3c3db5e7e8667e0fc2dc540f5f84443ca70c49538f3942e6570edf1df763e55f23446540b256637280ba6d509e22148083a1ef58d463de7c9172a3f0208d20463aef31cb58d8af3f88f8c64b3f41f210d8b20661999b8fc7e8272e15f72eeb5ad0d74a6087e8f06ec62f02b9ba83ede853d428301605e7d003eb56cf207ca6bc184d1a0033f65b019ac267e962974327258f347aee97301d750e32b0e52d0ca5e329f64ee9fbe9c6172c2445a4761385beb398c971d9531810fa83bb313e7dfbc6b6c30a9e4699c91b1afdfa177fe38353decd38c8eefffe2d96f1f47fb1f2673d2c8b5823085f0be2ed4380049950ae69a854723a82dd98e302a71e2cd9ec12c0a4e591b6cb8d1813768b07ae7a9cfcdd939c15da5cfd38472a0250c5bc283e8033318c27eef76ada7f156bbe4187450cb1fb008ab6c0ec05262e38bb09a9873121cc5bacd6e63ec3cd83bc4b12f0aa8465b3ac940322d8cdd1d4d6a457037b2155a7c02b0e73bc250b06d1d906641e839ce61e349afb4fa68bdb00fb194265a026d27f33984af810e848bf7db8de3db45f85f4b0d1bfc9536011dd34d4d954e914132f92a3e9b377b53e0bbacf6244d55dced9ff4a7739cd7e94f25c430f7201dba4da1c7e94b0b6feba9ec548ed069faef18f9367d352de301bc4006d506916ab0a127365e9a652a435c5cfd03c78a1ef9e303e794b94b0875b19de96e154a1bb92f9c2f81d972b63098a66ccfc0d0936fbf53a620ded561665cff42545daa3ec2cfcefbf99899f9f0b8b0bc7bbbc49e8eaafd68b68b60956170586abe8402cd25732930ed992d50ca7e26fb3218bc047b37ce72ad9aae39ad54409fbc12ce8394d9b121312e4b421e0345be893aa886aa837fa6df4cbca0429fe35be658763e8dd9875970c7c0914db7a220f99c6068f7ea6e21115dc6ab4d9694d9dff182ce52adecd601147c119ab511f27e4b206f075acca216ad1dba6ca353aa529331b20be55c1f0b83d68d0384f764a2c6247290bbbdf044f979c0ccdda1b6b050654baaf2486ef696d1545197e5c449476f84a25f9aaa3835fb584541af3dc7520a1973d872c283f62c0d5cd008ff21ba0083a8404d216102d91ae1e3bc8e4c8c2c4cc41993cd32b280854107d4fd8a999b97124f4ebeebdc62091938a3cfd2ff9e9d5400eb735974ba34cd71b9fd65952e8814491b571a6bc957c2bd3bc5cc6e22fa5d869487443ed216ea283bea5f89fbf844f28f8104b5a0fb771a5f0832614ddbaf6d025f1d8ce4ae070e73fbc0471395fe9684f358411a2374c9783cb96cae7d3ea2b7dc84fd9a9ee70247b3d48837edf91bfe1f038de1895f050a822a30507aeb0a0bb3edd90dde177a33b9ec4add0013ff2f0bd3f5ec943d03368b9afcd8919a83e5329fc6080e4cc4b93faa8b965d9ae5ff645b8bdce27234e5235987e8a0c7ab79c9457fa14f3900fe956214b7e70703dd2a3610de155c829439f651c7bac14a18366c7c72c4b4de383b6ea6770b55cd40110260958241911ea9f42bf44c4839759d595106a5557635a7975d0e887057f8703ca48d3ff65b6b2812bfa0d7a7a078ad208d21f9e0791a0b86ad0182a9b12cc55629903873e97a904809b8beb813ee8919aebf91b427c6dac4070fcc869cd5c8da7e12562e6f69228fc304490917c7628c85a1e4a1abc4ba55656129a50d155567332747e337a203c6a31bccc7ba4d3f4d5ecfff9ca4b383ccd2b70b0e6ab0eaf09a89406e0ac61a1262796ad9ab48afd394972a5bdf343017fb55c08c08b50690667155a4d19e99212d59f90b87cbf078d7ad77a78427636e79f6f00b945d9076532a1de29cab513893c6b3cc6312d8ae1cadd19a43e747002ac468767f3a5d2fe63d3f926694e89bc3f2220dae3c46b7d3b4f72a275557f153b0a6abd2e3bdc344a95bf704b40d09a1768260f32a7c6658b1da0fff5a8ce213334927f4d1e9a009a813ed9d075697b2e9d59c4d8e6f77e6bee14048e6f529d390cb0e06d2da558ba7d8ca57f7a9da529463dd62102f3d94b2efc7e85cdec7ae5b1892246ed1de55dd7491ed718118785fcea049946994494a11602f12019dc2ab50bf573b41e4ee4a4719fbacf5f51abe567800b9ce77e548805ed206966135f867f15eaea0f0edc81bf3c41bed9cc668947333d549f42af55857fc857311691b4304f996cf8e6a610c7ca2165193cef4e20a17483b69743141982646979c1593eaa2eb6ef6de9aa0dae4d0cf7233d8bc5efc6bb1da1337f47a044ba63f7432219d07fd0287d284c6272c0f4abeefea04784225ac292d7483d25cf59a1611b1888d864e1d609d347e0e6ca43950deb9de0493302b4e6612ce5cf215d8660d1ece4f92ec5e80c01d68f0726ef2eb212e2fd90483942c2b5c310d4f000f9ef6d8eb14cbc5d24cd3bac4a94b33006f8e7885f2c91ac19f6f005fcdedabe8f83e2a0b098fcd1efa932481be0adabf6a0b46716374add054f0a47ffe6ee0d660fd04d734e34dd9944c8a3b66efc8048669657f018fc8c13b3692d269b7c87e61530de01da198994c7d2b62e89009f05c162d25e30d4228d41e4e6a0da12035d3245ad9f34cbaf238c5e2c49f4c5e4068fa15707d95fb9b328b65c50cba1900e76d99a93857a1624230848d995b92d4c76cde2b2d14d3fd8b6f7ffc6dbb4372b938e6da001c9fb6228c5782767ef846d2a9e87544e0a926cb7d3b16085243eb397b93124473cd8d5b24935260c3970e643a0f30cbeddf33166475049317d7b6e44ed1c4dbbbf8316760c4b83802030d09307d6b5c17e64248a58594c498a5cfe272c1c1ade7ab0471a907243d5ae50280bb17ffa7470e3c86d14205d206e1dfd93d9c117f6a477825d0a87d4a56568aa0c39168b4a7037d0728ff7a035f3c96dc24b48e1125feaa9f8104076457295996e9b2dc906735f22d85c74cd307a20b8e1eb18de53a48941db2688573f94e263aedd2a1520406797a2e1e63237142f4a19ef27d61cc449c8c205371b8c0c606adbdd62e1c7c2ceb666d35ece585d105f62078112026ab937be5d07c791fc1a506882dc8d41754cb2fa6bd991a9cc58fe2e84dd318304f9ff5562e160ad921c62f1237f20eb03597a083291d66ac69c682965b9c38c8f06705ab2aac20a2628696de435a06f168116eebe4a7052dac191ecac8fae19a2546df8d1393f178c1f69eac50c654de12f96a9477642653235b1f9f79579283a58efca44a328830f9ccf1076d7526030e73938211a5cc4a55e58179aea6247a794040c1ed98b5365f9c2544bab7572bf79e09afe0d1f510302187b0e4cc5c5d76209542178547adc70c06d4901502830a9d94b23266f464cfbf134fc517949fddaab604598542eb75d95e171df40d3a8d7fc32ef2cd39814f3769ab9df3cfa505695891d01e7cef862d2c23565b2e725f8fa1ca4fde1da955a4d9515221158f099d91126b4ce578ed2e89f858bb6913db822b6b2b2ac023ea1933b8bb7049a02277d83510b268f981312350b188a11cb67bc685a7985774151bbf7da8436696b78a9db66e6b160d747ec2f7300ddb9ab0f0c41aa32be645640b7231bea54a126b6e2dfdf6d837bd5197851ec0354561c6bbf371a8dd5a5fe7ee0bc2cc49311e3465d4683a49b7cf576f260ee50abe1abcc1f5d666b2315af6421ee70658af0220693710c42e2cda22c0dcafb08c036a9a0cf1d757e98c398da049a2f61f8f5a0b207e3d3f7cbd5aef6082b4a879be981ce4c3b57e5cd48f72420e02a52f2a0bd52d00d736671462dae6111c882e5b05a722ff2fdea3262eeb144bddb14b8567166d321a5fc3c76bcf8092bc02a4252c0883bbbf759ebe287d8ecd7c75ca87bdb067b28eecd3fb962a87c709d6c7ec768b88e50e11f6484a0f8761ab71e1af5ca0225196f210a829292b93dd468c5acb61d7215b5f88f7db8d575700ca584e2b3ab656f230ae05180b831daa33cd557fba1be1471b5d84a173d43de0bb090e35c8cc572e2dd97fbcd68ebc5f2cc34a993fa351c91f3f6753d86629eef9c694e3619c4f096a583b035194ee7fbd6b36b1fb8b0dbe84fa715025325045f7531fb8e986a13c19e01a86067ea7b7281c128dcdaeb29fd30bb7133070ea315adcf437e86da6b15e3383341b9796b8c9fc5b1199eedcf1a92b7754846296f5d8d48bd1363c7506a52640ed3af1e8ebf2b3ce8004ab2f64714428972ae2c067c3974402c6ce881534c87a33f1cba5db7082f5153d8386a54c26653add842354fda67ce1efe42ab52c9ee5ce672baac7f69063fedc51eca1651fb9fdddf27cf5fe6c0b645902e99c983501e50a075fafcc337c19bd5621722d00c1ef213f3bc92a8d6d77f7824101f9744715d29734ff695c15b4a19f41feb6854d84c895fc64928369f213dd69b024353cdbc2ab6d69fcd56155e435b6e23540ad9f0ec3d6ad15077d92101988f486bca7c2f7ba51208b4cb4d664ed084a1964300274124163f0593a56f3a206ecd98acb1e72667fcf3c18e7b109de340d739f9e89863a8e9d01690e7b8ad0ffa11fd5f5aa1561025781ec3f15de2813dce0316fde8d7494ef0b720dd9b082e86ee13e9f17f7ad9778e1823f60e79a73f6620957fc85ffde4afa9a8eca424e5abd1c60894010fea0ab8358bc2414ef14095852bdd0d2b3095c038c077a6c1e6c3c653c8b898e70ae8faa238813e814b26f2b566d7f63c783d56a53f12c716fe50e561896fc66e849129106f3f900dc9062f831be569d4432a6d118b8c5e70336441f6eae76b06c6342e0ed4edbd93528b9492c10ca3319bc37c23b009c1c3b27e7903a58a9122c7e0a6a7a8737be015094421b5e1ba7259b0c2989728da2cc0b26238911168130616e373af269fa456b262c30dea374ac457995d10c595d48e79e65ae92e01e64aa3c08381afa06888f749b81362adc75b709aa919528ac8f642dbd0ac7664d353bcd0b1e0fcb786312bb6aa841df88e1def245d5ca17ce9e5bc229f53d63941cb8a84745bc18a91f3003d883b51da2b7e479801f39e25089e5c92fa93fe8c2cb9f0c1fd21c1c259b72ed808dc3a66c4ed87216fe264ed26029e737a58a6f4b1992f4586f692ea008152124bb5374709a4d46c90df8e3ed2b81bcf1edf02572480c394745078517d3a49b63c96c8c693d6261aefc51a7eec2d1b0ee4b011ad192c9786b3e54bdf24dad44e8522989d84de59887d7e27eb9ff034a18992130b2dc14f4684f4e142ce4cab1ab711de9ac8d9503f1a13d063764059f5b691ca15ee206324ef736e08f143b1cef033da1a3e511bf4375da3b039f8d163133542dd52d9642466f780a05b4c98d81fd0d3b889e992c163574f36d7f5fec4635b6c43608a10b0b3d96c3f5f29bcf51c87eb3ae12b9ba0145c146f9a8b05fe9de2dda7eb51f7665cf35181a7456d5fa9f77cd6d67aa9a7e1dabcc9f0e0a541c1f95cb5403c7b9f4465f0dd956669bf08f92106f19649d8ed729ab6d0ac52191bdfb74632145c09f75220dc2f124ea0fbfbed2d87ba41fb55ebf7393841009d7ef52eafd17bd1c85370049bc9131fd175bba74d2556833cc5c5ad61dd75bf35d8f4e90621150869f8bc0f35b4a620b8bd6efce7"}, 0x1015, 0x1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{r3, r4/1000+30000}, {0x77359400}}) 15:19:30 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x1906a0a4055a49fc) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000040)=""/176) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4004}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x208, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x4000040) r2 = getpgid(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f00000002c0)={0x2, r2}) kcmp(r2, r2, 0x0, r0, r0) socket$nl_generic(0x10, 0x3, 0x10) r3 = inotify_init1(0x800) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x2354, &(0x7f0000000300)=""/82) munlockall() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x2500c0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000003c0)={0x6565, 0x5, 0x3, "7f77ed3a392efdbaf709797897aefb1a4ecbea1fa9873c0036d3fa03ab091974", 0x31777d5f}) pause() setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000400)={0x5, [0x7, 0x6, 0x8, 0x6, 0x8000]}, 0xe) write$P9_RAUTH(r0, &(0x7f0000000440)={0x14, 0x67, 0x2, {0x2, 0x0, 0x3}}, 0x14) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000480)={0x1, "ef6e41a5ba477dd70f9aa88cd68ceb96ab1dea6f706e4bf04387071567495420", 0x2, 0x1}) fchdir(r4) r5 = getpid() write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000740)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), r6, 0x2}}, 0x18) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000780)={{0x3e, @broadcast, 0x4e21, 0x4, 'lc\x00', 0x8, 0x7, 0x1e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 0x3, 0xf5f, 0x6}}, 0x44) fcntl$setown(r3, 0x8, r5) prctl$PR_SET_NAME(0xf, &(0x7f0000000800)='--eth0\x00') ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000008c0)={0x0, 0x73, &(0x7f0000000840)="14b5979dd0d17da49fc92c1c3a7759e62d54d207d263b8076c6c66b6f9aa6f0ae7d8a225c908d704b7de113e24946f93ebefc5adb359b84a2db820fb09fd45a8fef8fec93e43eb948eddedfe0e5e19fcd7e2af8b0d463810b2926bd2f705ad3f5727750788bba9edc1aa7e9683e37eb425e973"}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000900)={0x28, 0x2, 0x0, {0x2, 0x4, 0x100000001}}, 0x28) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000940)={0x0, @ctrl={0x0, 0x0, @value64}}) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000a00)={0x0, 0x0, 0x3, 0x0, [], [{0x0, 0x101, 0x4, 0x800, 0x1000, 0x252}, {0x802000000000, 0x401, 0x2, 0x7bc, 0x30db, 0x2}], [[], [], []]}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000b80)={0x9, 0x1, 0x2, 0x5, 0x8, 0x1, 0xdc11}) 15:19:30 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2080, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x23}, @empty, 0x1, 0x4, [@loopback, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x20) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20007ffe, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) 15:19:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_FP_MODE(0x2d, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x181800) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000080)={0x3, 0x3, @stop_pts=0xc19}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) 15:19:30 executing program 5: r0 = add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="6dbb88e2ae4b94efcb381f0918e995e7f822ea6a93444cf85460", 0x1a, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$reject(0x13, r0, 0x5, 0x4955, r1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x105000, 0x0) setxattr$security_smack_entry(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64\x00', &(0x7f0000000200)='\x00', 0x1, 0x1) getgroups(0xa, &(0x7f0000000240)=[0xee00, 0xee01, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x0, 0xee01, 0xee00, 0x0]) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) getresgid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) setgroups(0x4, &(0x7f00000004c0)=[r3, r5, r6, r7]) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000500)={0x6, 0xf1}) keyctl$reject(0x13, r0, 0x1ff, 0xe2a, r1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000540)={0x7fffffff, 0x7fff, 0x9, 0x4fda, 0x4, 0x3}) keyctl$get_keyring_id(0x0, r1, 0xffff) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000580)=0x1, 0x4) rmdir(&(0x7f00000005c0)='./file0\x00') ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000600)=""/89) keyctl$get_keyring_id(0x0, r0, 0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x4, 0x5, 0x2, 0x0, 0xd, 0x6, 0x4, 0x1ff, 0x1, 0x6, 0x5, 0x9}) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000006c0)="885733c759ac3398fc84a98fb4652266010b64a4fae74107c07a1d8d547689ecf08f2aebcecb327784a6e1b4fba947f15498f34a9d3b69bd66b9aebb13e304adcd0698") write$binfmt_script(r2, &(0x7f0000000740)={'#! ', './file0', [{0x20, 'user#'}, {0x20, 'security.SMACK64\x00'}, {0x20, '-{Oposix_acl_accessproc(:!securityvmnet0vboxnet0'}, {0x20, '.$,)'}], 0xa, "10aa3ed6eabf3f4dc390bddb273e21cd360bacf5861e9cb1353a72c7e50e5d63aa96da6a65cda9c041aec31cf43619418c6bce9fa885bff03d3e95777f"}, 0x96) sendmsg$nl_netfilter(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x8, 0x9, 0x400, 0x8, 0x25dfdbfe, {0x7, 0x0, 0x5}, [@typed={0x8, 0x7, @uid=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40005) r8 = syz_open_dev$usb(&(0x7f0000000900)='/dev/bus/usb/00#/00#\x00', 0xf6, 0x101000) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000940)=0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000980)={0x3, 0x2, {0xffffffffffffffff, 0x3, 0x4, 0x2, 0x1}}) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000000a00)={0x1000, "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"}) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001a40)={0x3, 0x97, "2e13f8562dabb9d62e995536b7adb8fbb9e4605ff320769b937355e8807eb1c3ad4501d4cbfa982f6942d97be2b71ea4fd5e449c0cb4ee383ddad75e063cc3a432532f2914c7d484abfb0a16f03adb71e2730c5c8cc871ff59f7410e22511413733ae54322f13296c38b6cf80b237f5d09949a92561e09aa31a12801317a4ebf07fd8bc61a9f23337479d089455ebe2a14839285281f03"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000001b00)={0x20, 0x0, 'client0\x00', 0x1, "15fa328d06cadc07", "5f6c6678c8465c567a3f5d196a48ba2abc51317f67a1c0124b6546d13809c175", 0x7cf1aa87, 0x1f}) ioctl$sock_SIOCDELDLCI(r8, 0x8981, &(0x7f0000001bc0)={'ip_vti0\x00', 0x10}) keyctl$instantiate_iov(0x14, r0, &(0x7f0000002200)=[{&(0x7f0000001c00)="fbbd9211d958ba36573a15a9abc83869f8b61c96ea76ef408f23114fb3d8bdf851e2c271272ae1e54d2f6667b1e33038ffc9684b367ce2bb253e0f88efe32b9dd38a95296385e4b1738a95920cfe14", 0x4f}, {&(0x7f0000001c80)="e771ae77e42c5bd07c96faa78d8f8706c3d71636bc7320a7960072fdbf6c14e9312f8dddd6da247d79e3d65c526e29f6a4a11c7bd5a02ca6eb3825e96ffbbeb4f74ea3aeee7f5f0b8eb3bd7d9be696077f", 0x51}, {&(0x7f0000001d00)="12288db44c787803fd37fa88fb35cd6af52214522655ef6b5194d3591040962bd15e69ccecbe8fb907107cbdf237ff6e65f1e177361e22468826bbd6496fead4b4a78a15716e6129a3e46098ce08dff43b6cf7e7822dca27a498e7fdb389a593e21257de852f675eb50cae1dfe50d1e14e1d794f3a001edf0bad495674d3ca716a67977c6382228bdb278e3601c3921d33198c1ba12908dc2640264a9249cb1a1bb10155f37c91b3b27e498445a10cf80a6c48a29d8ee83aaacd162cea3ca766259c2715b4ddf5eec8032a1b7a18c097b56d37ceec98", 0xd6}, {&(0x7f0000001e00)="579c7d2c0aab6f95f57f21dcbe80e21141a766d17b0022b899455ffa1a613ab1437f6ab0016493e8caf0427e9b0f49460de5efffc1e7e627263c00ef31bc9af42fcdbd13672dd88d757f1de7c1e746895a3e04fb3842c8a51f1e70ca7784a9582a44f037c2c145cd241cf5fbc8a34a658cfe6d54be216af3ac0342a881f406339ba9b9db1fc0d269e8450ce2b5bad1f1809f18c730e812f95bda9e3bdba9a6bccf77f6d7290d2312cd851b104c4b8326dce55217e93be371d636ca239fe0dc2b04cb29633e5e95241c81aafa992bf4f0dd15affcc81b227fee3a56c09982e502ad3cdc961ff9c72f62a75e4c485720a4a28433c3d4b296", 0xf7}, {&(0x7f0000001f00)="386467b5b3e719e6ec8da143a17c029c9d369d7b0576f62005c863878e2bbb338faacba1ac80e5cb3c903501e4d32c23dbf20719767baf9467db5f7949bf449a6cd879429cd8ce14a9c715f7a35a48ced201612e7b070918ffeda04503b3b2f2f801bd1e3ab4b351e3a617b41868d2c609a9f060f3a416de3c3fdb71afc42d2faba8b8463f31fc937e461894349280614fbb2085f13d2d23a4eea88ab5f47d3b6c61d1200c65c5dab0595d5bb9706328c75cca95b0b7388c6a2ed7977214f345", 0xc0}, {&(0x7f0000001fc0)="92d4aae2b22ec201bdf08afbeca73884c984c18b9d9a3142339a021b0404d7c5c1d08cd7dbc938a15cfe34d6cdc08528f838", 0x32}, {&(0x7f0000002000)="3a2c670048e5a9b2e25e6a2862ceedf9f8078d461cfe3d3124ba87f391da7550e7b01fbf77bb081d3ec73f79a1459c40b34f947ea33f2d10260c3b7e532bca6a11dd9d2e0c511ccec069db41c34492dc7fa382c59fe6e7594f49cd670a9f02ea8ec187acad109117ba6ad69e26d2a48745099910daf933d4ceb6829f307b5b1a235ea63a6cb1ad31c0240a2b123724808f3ea36f5a79b46fae46b7028d4d16ec923f2effbc5ace81508177bb7a200aea360c1c81182a739b222d4918aa67a4cad5e99b2601d98ed3f23fe1", 0xcb}, {&(0x7f0000002100)="fc29c32def1d659631e84084dd7df860a94f07ede46cb19c8e3e95292d8afc1f6a4478baf1159c834728e6b99296b3502cf0a2fa21b356590f75089c2fceb4076aa7a3633a8a13166ac4c22eaaee4f3eb44010e24371b7f3340855c39b631e96a69fb4260fb5e3933cb318d8f2346a7f5b4b3d7c6ab6fd927a83d1c08e21810167a60031d7645e6ef97a1a09c1fce666c8c59f5355196c55a71fbdb7ff804e2486ef7730052929b0ad2f4e58e6db151df3a94fa891273c962cc27e99582e1f154798aa58608b0e98d48924c73d81a6c1cc8b5cefb7ed2f9f1421", 0xda}], 0x8, r0) [ 252.629499] binder: 11729 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 252.629529] binder: 11729:11730 ioctl c018620c 20000240 returned -22 [ 252.640087] binder: 11732 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 252.640114] binder: 11732:11733 ioctl c018620c 20000240 returned -22 15:19:30 executing program 1: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x80000) recvfrom$inet6(r0, &(0x7f0000000080)=""/116, 0x74, 0x10100, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @empty, 0x1}, 0x1c) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x100007ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)=@v2={0x2000000, [{0x8, 0x100000001}, {0x400}]}, 0x14, 0x3) exit_group(0x40004) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 252.735484] binder: 11743 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 252.735515] binder: 11743:11744 ioctl c018620c 20000240 returned -22 15:19:30 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2080, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x23}, @empty, 0x1, 0x4, [@loopback, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x20) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20007ffe, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) 15:19:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x50100, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000040)={0x3, [0x17, 0x10000, 0x101]}) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 252.934996] binder: 11749 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 252.935025] binder: 11749:11752 ioctl c018620c 20000240 returned -22 15:19:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) 15:19:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x121000) 15:19:31 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2080, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x23}, @empty, 0x1, 0x4, [@loopback, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x20) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20007ffe, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) [ 253.176182] binder: 11768 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 253.176206] binder: 11768:11769 ioctl c018620c 20000240 returned -22 15:19:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x7b3) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockname(r1, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000040)={{0x1, @name="4d9b924aa74bc0c87ad516afb64a67e09ac470d2017ff76b01562cdbafbe234e"}, 0x8, 0x1, 0x200}) [ 253.281717] binder: 11771 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 253.281747] binder: 11771:11773 ioctl c018620c 20000240 returned -22 15:19:31 executing program 3: r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80020000005e510befccd7", 0x2e}], 0x1}, 0x0) [ 253.490971] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 253.499067] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 253.540999] binder: 11785 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 253.541029] binder: 11785:11786 ioctl c018620c 20000240 returned -22 [ 253.722023] IPVS: ftp: loaded support on port[0] = 21 [ 253.887715] chnl_net:caif_netlink_parms(): no params data found [ 253.953989] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.960550] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.968994] device bridge_slave_0 entered promiscuous mode [ 253.994588] IPVS: ftp: loaded support on port[0] = 21 [ 254.008577] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.015225] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.023520] device bridge_slave_1 entered promiscuous mode [ 254.053457] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 254.064748] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 254.099013] team0: Port device team_slave_0 added [ 254.107252] team0: Port device team_slave_1 added [ 254.185097] device hsr_slave_0 entered promiscuous mode [ 254.232219] device hsr_slave_1 entered promiscuous mode [ 254.400632] chnl_net:caif_netlink_parms(): no params data found [ 254.472067] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.478545] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.486763] device bridge_slave_0 entered promiscuous mode [ 254.498671] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.505308] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.513604] device bridge_slave_1 entered promiscuous mode [ 254.544134] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 254.555504] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 254.569726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.599541] team0: Port device team_slave_0 added [ 254.615690] team0: Port device team_slave_1 added [ 254.632184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.639533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.660494] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.726544] device hsr_slave_0 entered promiscuous mode [ 254.772423] device hsr_slave_1 entered promiscuous mode [ 254.830864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.839490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.848045] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.854540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.874133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.882659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.890994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.899013] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.905519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.916044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.935412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.950922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.961690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.975038] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.982967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.991301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.020113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 255.028576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.045588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 255.053897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.072435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 255.100343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.120583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.134855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.146639] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.162440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.170443] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.176875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.186442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.205728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.214310] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.220760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.282822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.291956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.300425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.316467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.327764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 255.336909] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.344718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.377458] 8021q: adding VLAN 0 to HW filter on device batadv0 15:19:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") sendto$unix(r1, 0x0, 0x0, 0x20003ffc, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_buf(r1, 0x6, 0x0, 0x0, 0x0) 15:19:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x55, 0x101000) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000040)={0x1b19, 0x6}) clone(0x12000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000740)={0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}]}) exit_group(0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000001c0)=""/62, &(0x7f0000000200)=0x3e) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000100)=r0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1000, 0x80000) r3 = gettid() mq_notify(r2, &(0x7f00000000c0)={0x0, 0x15, 0x7, @tid=r3}) 15:19:34 executing program 2: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2080, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20007ffe, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) 15:19:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x1) clone(0x4000001, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x401) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f00000000c0)={0xfd, 0x0, 0x6, 0x4, 0x200}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000180)={r2, &(0x7f0000000140)=""/47}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000001c0)={'bridge0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000000)={0xfffffffffffffec1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000200)=0xffff) 15:19:34 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xc080) 15:19:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=[{}, {}, {0x3}]}, 0x108) [ 256.233715] binder: 11809 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 256.233744] binder: 11809:11810 ioctl c018620c 20000240 returned -22 [ 256.258400] kernel msg: ebtables bug: please report to author: entries_size too small 15:19:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = msgget(0x3, 0x1c4) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/130) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:34 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20007ffe, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) 15:19:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffc00, 0x2000) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x40000) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x4, 0x401, 0x5, 0x4000, r2}) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:34 executing program 5: fstatfs(0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x2, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x7, 0x0, 0x8001, 0x0, 0x0, 0x9, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x100, 0xffffffff, 0x2f6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad29, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@ipv4={[], [], @rand_addr=0x1}, 0x43}) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000480)=@vsock, 0x80, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x2, &(0x7f0000000800)=""/83, 0x53, 0x3ff}, 0x102) socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x50, 0x0, 0x102, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8cb}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) ioctl$TCSBRK(r2, 0x5409, 0x0) [ 256.570554] binder: 11834 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 256.570584] binder: 11834:11836 ioctl c018620c 20000240 returned -22 15:19:34 executing program 2: r0 = socket$inet(0x2b, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20007ffe, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) 15:19:34 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='fusectl\x00', 0x0, 0x0) [ 256.660325] binder: 11837 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 256.660352] binder: 11837:11842 ioctl c018620c 20000240 returned -22 [ 256.702182] binder: 11834 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 256.702212] binder: 11834:11850 ioctl c018620c 20000240 returned -22 [ 256.740615] binder: 11837 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 256.740660] binder: 11837:11858 ioctl c018620c 20000240 returned -22 15:19:34 executing program 4: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) getresgid(0x0, 0x0, &(0x7f0000000180)) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)={0x2c, 0x4, 0x0, {0x0, 0x0, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) io_setup(0x0, &(0x7f0000000280)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 15:19:34 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa0be800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={r1, &(0x7f0000000280)=""/217}) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffffffffd35, 0x0, 0x0}) 15:19:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r1, 0x0, 0xb, &(0x7f0000000080)='/dev/vsock\x00', 0xffffffffffffffff}, 0x30) setpriority(0x1, r2, 0x2) 15:19:34 executing program 2: r0 = socket$inet(0x2b, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20007ffe, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) 15:19:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061124000000000009500000000000000"], 0x0, 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 256.988326] Unknown ioctl 25649 15:19:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x82000, 0x0) r2 = getpgid(0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={r2, r3, r4}, 0xc) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x480401, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000180)={r6, @in={{0x2, 0x4e20, @multicast1}}, 0x5b5, 0x9, 0x8, 0x4, 0x5}, 0x98) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000040)={0x4, 0xeb5c, [{0x9, 0x0, 0x339}, {0x7, 0x0, 0x1}, {0x10000}, {0x9, 0x0, 0x2}]}) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x800) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1}) clone(0x2000500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:35 executing program 2: r0 = socket$inet(0x2b, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20007ffe, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) 15:19:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6103) truncate(&(0x7f0000000600)='./bus\x00', 0x10000) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 257.264477] binder: 11889 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 257.264514] binder: 11889:11894 ioctl c018620c 20000240 returned -22 15:19:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x100000001) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) read(r0, &(0x7f0000000200)=""/225, 0xe1) shutdown(r0, 0x0) 15:19:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) [ 257.542662] binder: 11909 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 257.542694] binder: 11909:11910 ioctl c018620c 20000240 returned -22 15:19:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffded, 0x0, 0x0, 0xfe12, 0x0, 0x0}) 15:19:35 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20007ffe, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) 15:19:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:35 executing program 1: prctl$PR_GET_SECCOMP(0x15) r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setlease(r0, 0x400, 0x0) [ 257.752178] binder: 11928 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 257.752204] binder: 11928:11929 ioctl c018620c 20000240 returned -22 15:19:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffded, 0x0, 0x0, 0xfe12, 0x0, 0x0}) 15:19:35 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20007ffe, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) [ 257.798062] binder: 11933:11934 ioctl c0306201 20000080 returned -14 [ 257.808389] binder: 11935:11936 ioctl c0306201 20000080 returned -14 15:19:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3e17, 0x101200) getsockname$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) 15:19:35 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz0', "9ff35a3d8ebad3258090bace0b0d87cd05811fd68dba280f6d453d31e1ac08e1566bcd3a9109e270f8d5"}, 0x2e) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000040)) [ 257.994738] binder: 11945:11949 ioctl c0306201 20000080 returned -14 [ 258.146549] binder: 11958 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 258.146578] binder: 11958:11959 ioctl c018620c 20000240 returned -22 15:19:36 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000040), 0x12d0780e) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x66000) 15:19:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffded, 0x0, 0x0, 0xfe12, 0x0, 0x0}) 15:19:36 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20007ffe, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) 15:19:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x8020000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x1e9, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f00000000c0)) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000080)={0x0, 0x5, 0x9, &(0x7f0000000040)=0x100}) 15:19:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, 0x0) 15:19:36 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="bd801f66f9141620b574eed12bcf3a36af409f35c47e93b68cd4916b3bb6ffc4e85c97ab3ccb6f9be4c349ab7770e1e29022d02b24e2b9d9cab0e5ef3c788da9a01a977d176e897817b04c866a888f1b", 0x50}], 0x1, &(0x7f0000000180)="2353dcc07d7704630e0ce191193e50159d7bae8142b7589861f237437cfddd8e7656288427cde944b763af81f65720e4795e14cefe8fc60439e4ad16f9be9ab146d61f", 0x43, 0x40080}, 0x800) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x204000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 258.365067] binder: 11973 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 258.365092] binder: 11973:11974 ioctl c018620c 20000240 returned -22 [ 258.373799] binder: 11976:11984 ioctl c0306201 20000080 returned -14 15:19:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffded, 0x0, 0x0, 0xfe12, 0x0, 0x0}) 15:19:36 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffecd, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) flistxattr(r0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) [ 258.433353] binder: 11973 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 258.433382] binder: 11973:11974 ioctl c018620c 20000240 returned -22 15:19:36 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) 15:19:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0xfffffffffffffeef, 0x0, 0x0}) 15:19:36 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) 15:19:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffded, 0x0, 0x0, 0xfe12, 0x0, 0x0}) [ 258.613299] binder: 12001:12002 ioctl c0306201 20000080 returned -14 [ 258.772518] binder: 12008:12012 ioctl c0306201 20000080 returned -14 [ 258.783465] binder: 12011:12013 ioctl c018620c 20000240 returned -22 15:19:37 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) getresgid(&(0x7f0000000080), 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)={0x2c, 0x4, 0x0, {0x0, 0x0, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) vmsplice(r0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000200)=""/86) io_setup(0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 15:19:37 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/35, 0x23}, {&(0x7f00000000c0)=""/113, 0x71}], 0x2}, 0x2) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:37 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uhid\x00', 0x802, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000100), 0xc) 15:19:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x20020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3ff, 0x22000) 15:19:37 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) 15:19:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffded, 0x0, 0x0, 0xfe12, 0x0, 0x0}) 15:19:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x800) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x10001, @mcast2, 0x80000000}}, 0x9, 0x1ff}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r2, &(0x7f0000000200)=0x4) exit_group(0x0) recvmsg(r1, &(0x7f0000001ac0)={&(0x7f00000014c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001540)=""/208, 0xd0}, {&(0x7f0000001640)=""/190, 0xbe}, {&(0x7f0000001700)=""/219, 0xdb}, {&(0x7f0000001800)=""/201, 0xc9}, {&(0x7f0000001900)=""/206, 0xce}], 0x5, &(0x7f0000001a80)=""/21, 0x15}, 0x40002000) r4 = getpgid(0xffffffffffffffff) pipe(&(0x7f0000002c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000002cc0)=[0x0, 0x3]) r6 = geteuid() sendmsg$nl_generic(r3, &(0x7f0000002c40)={&(0x7f0000001b00), 0xc, &(0x7f0000002c00)={&(0x7f0000002d00)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="c7f94a6d78ad088d77702d0b9fe90c1bf12f3472ec843a0c3353e90428ac6782383a29110d4df228db7fc4beb389ab3883358fb694ebb8689433c4825f940f823ebe5e2b84b94942a8ba88b07b6a13e3d2e570c908007600", @ANYRES32=r6, @ANYBLOB="140071002f6465762f62696e6465722300000000"], 0x10c0}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001300)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001400)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x12, 0x6, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@exit, @generic={0xffffffff, 0x2c64818c, 0x8, 0x2, 0x7}, @generic={0x9, 0xfffffffffffffffc, 0x3, 0x8d1b, 0xfffffffffffffffc}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000300)=""/4096, 0x41100, 0x1, [], r7, 0x5}, 0x48) [ 259.297673] binder: 12022:12024 ioctl c018620c 20000240 returned -22 [ 259.326946] binder: 12028:12032 ioctl c0306201 20000080 returned -14 15:19:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:19:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffded, 0x0, 0x0, 0xfe12, 0x0, 0x0}) 15:19:37 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) mq_notify(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a3, 0x400000000000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) 15:19:37 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20007ffe, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'syzkaller1\x00'}, 0x18) [ 259.559384] ================================================================== [ 259.566832] BUG: KMSAN: uninit-value in bpf_convert_filter+0x2a33/0x5c50 [ 259.573695] CPU: 1 PID: 12041 Comm: syz-executor.3 Not tainted 5.0.0+ #11 [ 259.580637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.590002] Call Trace: [ 259.592614] dump_stack+0x173/0x1d0 [ 259.595238] binder: 12044:12049 ioctl c018620c 20000240 returned -22 [ 259.596271] kmsan_report+0x12e/0x2a0 [ 259.596295] __msan_warning+0x82/0xf0 [ 259.596325] bpf_convert_filter+0x2a33/0x5c50 [ 259.614981] bpf_prepare_filter+0x15e4/0x1c90 [ 259.619513] __get_filter+0x4f8/0x730 [ 259.623338] sk_attach_filter+0x72/0x2e0 [ 259.627427] sock_setsockopt+0x396f/0x4bb0 [ 259.631710] __sys_setsockopt+0x336/0x540 [ 259.635881] __se_sys_setsockopt+0xdd/0x100 [ 259.640227] __x64_sys_setsockopt+0x62/0x80 [ 259.644565] do_syscall_64+0xbc/0xf0 [ 259.648291] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 259.653484] RIP: 0033:0x457f29 [ 259.656683] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 259.675594] RSP: 002b:00007f007ae6dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 259.683333] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457f29 [ 259.690618] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005 [ 259.697920] RBP: 000000000073bfa0 R08: 0000000000000010 R09: 0000000000000000 [ 259.705209] R10: 000000002002eff0 R11: 0000000000000246 R12: 00007f007ae6e6d4 [ 259.712500] R13: 00000000004c594f R14: 00000000004d9b88 R15: 00000000ffffffff [ 259.719793] [ 259.721420] Uninit was created at: [ 259.724950] No stack [ 259.727350] ================================================================== [ 259.734709] Disabling lock debugging due to kernel taint [ 259.740169] Kernel panic - not syncing: panic_on_warn set ... [ 259.743337] binder: 12075:12090 ioctl c0306201 20000080 returned -14 [ 259.746061] CPU: 1 PID: 12041 Comm: syz-executor.3 Tainted: G B 5.0.0+ #11 [ 259.746070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.746076] Call Trace: [ 259.746104] dump_stack+0x173/0x1d0 [ 259.746130] panic+0x3d1/0xb01 [ 259.779691] kmsan_report+0x293/0x2a0 [ 259.783516] __msan_warning+0x82/0xf0 [ 259.787833] bpf_convert_filter+0x2a33/0x5c50 [ 259.792432] bpf_prepare_filter+0x15e4/0x1c90 [ 259.796957] __get_filter+0x4f8/0x730 [ 259.800787] sk_attach_filter+0x72/0x2e0 [ 259.804870] sock_setsockopt+0x396f/0x4bb0 15:19:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000240)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='/dev/binder#\x00', 0xfffffffffffffffa) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)='+\\^&-)GPL\\-.\x00') keyctl$instantiate(0xc, r1, 0x0, 0x0, 0xfffffffffffffffb) [ 259.809167] __sys_setsockopt+0x336/0x540 [ 259.813340] __se_sys_setsockopt+0xdd/0x100 [ 259.817692] __x64_sys_setsockopt+0x62/0x80 [ 259.822030] do_syscall_64+0xbc/0xf0 [ 259.825759] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 259.830953] RIP: 0033:0x457f29 [ 259.834153] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 259.853565] RSP: 002b:00007f007ae6dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 259.861287] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457f29 [ 259.870655] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005 [ 259.877932] RBP: 000000000073bfa0 R08: 0000000000000010 R09: 0000000000000000 [ 259.885214] R10: 000000002002eff0 R11: 0000000000000246 R12: 00007f007ae6e6d4 [ 259.893014] R13: 00000000004c594f R14: 00000000004d9b88 R15: 00000000ffffffff [ 259.901227] Kernel Offset: disabled [ 259.904851] Rebooting in 86400 seconds..