ST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:23 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) 17:03:23 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r3 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r4, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) getpeername$packet(r0, &(0x7f0000001940)={0x11, 0x0, 0x0}, &(0x7f0000001980)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0xf, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7f}, [@ldst={0x3, 0x0, 0x0, 0x9, 0x8, 0xffffffffffffffe0, 0x1}, @jmp={0x5, 0x1, 0x9, 0x8, 0x3, 0x100, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x2, 0x1, 0xc, 0x1000, 0x2}]}, &(0x7f0000001880)='GPL\x00', 0x0, 0x4a, &(0x7f00000018c0)=""/74, 0x40f00, 0xc, '\x00', r6, 0x25, r0, 0x8, &(0x7f00000019c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001a40)=[r0, 0x1, r0, r0, r0], &(0x7f0000001a80)=[{0x1, 0x4, 0x10, 0x3}, {0x3, 0x3, 0x10, 0x8}, {0x2, 0x3, 0x3, 0x8}, {0x2, 0x1, 0x0, 0x7}, {0x3, 0x5, 0x7, 0x3}, {0x1, 0x1, 0xc, 0x4}], 0x10, 0x6}, 0x90) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001bc0)=0x8, 0x4) accept4$llc(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10, 0x0) accept4$llc(r2, 0x0, &(0x7f0000001c80), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001d00)={0x7, &(0x7f0000001cc0)=[{0x5, 0x80, 0x81, 0x4}, {0x5, 0x6, 0xf7, 0x87}, {0xffff, 0x7f, 0x4, 0xdf4}, {0x0, 0x1, 0x4, 0x940}, {0x6, 0x3, 0x7, 0x2}, {0x8, 0x3, 0x1f, 0x3}, {0x1, 0x8f, 0x9, 0xffff}]}) 17:03:23 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000900)=0x1) [ 514.756218][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 514.756232][ T28] audit: type=1326 audit(1699290203.104:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31126 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f92e7cae9 code=0x0 17:03:23 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) 17:03:23 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) [ 514.870403][ T28] audit: type=1326 audit(1699290203.224:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31135 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe152c7cae9 code=0x0 17:03:23 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:23 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) [ 514.934588][ T28] audit: type=1326 audit(1699290203.284:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31135 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe152c7cae9 code=0x0 17:03:23 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:23 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:23 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r3 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r4, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) getpeername$packet(r0, &(0x7f0000001940)={0x11, 0x0, 0x0}, &(0x7f0000001980)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0xf, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7f}, [@ldst={0x3, 0x0, 0x0, 0x9, 0x8, 0xffffffffffffffe0, 0x1}, @jmp={0x5, 0x1, 0x9, 0x8, 0x3, 0x100, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x2, 0x1, 0xc, 0x1000, 0x2}]}, &(0x7f0000001880)='GPL\x00', 0x0, 0x4a, &(0x7f00000018c0)=""/74, 0x40f00, 0xc, '\x00', r6, 0x25, r0, 0x8, &(0x7f00000019c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001a40)=[r0, 0x1, r0, r0, r0], &(0x7f0000001a80)=[{0x1, 0x4, 0x10, 0x3}, {0x3, 0x3, 0x10, 0x8}, {0x2, 0x3, 0x3, 0x8}, {0x2, 0x1, 0x0, 0x7}, {0x3, 0x5, 0x7, 0x3}, {0x1, 0x1, 0xc, 0x4}], 0x10, 0x6}, 0x90) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001bc0)=0x8, 0x4) accept4$llc(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10, 0x0) accept4$llc(r2, 0x0, &(0x7f0000001c80), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001d00)={0x7, &(0x7f0000001cc0)=[{0x5, 0x80, 0x81, 0x4}, {0x5, 0x6, 0xf7, 0x87}, {0xffff, 0x7f, 0x4, 0xdf4}, {0x0, 0x1, 0x4, 0x940}, {0x6, 0x3, 0x7, 0x2}, {0x8, 0x3, 0x1f, 0x3}, {0x1, 0x8f, 0x9, 0xffff}]}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000001d40)={0xc}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001d80)={0x11, 0x0, 0x0}, &(0x7f0000001dc0)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x48) bind$vsock_stream(r3, &(0x7f0000001e80)={0x28, 0x0, 0xffffffff, @host}, 0x10) accept4$vsock_stream(r0, &(0x7f0000001ec0)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x0) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001f00), 0x20000, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000001f40)=0x3) 17:03:23 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:23 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:23 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) getpeername$packet(r0, &(0x7f0000001940)={0x11, 0x0, 0x0}, &(0x7f0000001980)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0xf, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7f}, [@ldst={0x3, 0x0, 0x0, 0x9, 0x8, 0xffffffffffffffe0, 0x1}, @jmp={0x5, 0x1, 0x9, 0x8, 0x3, 0x100, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x2, 0x1, 0xc, 0x1000, 0x2}]}, &(0x7f0000001880)='GPL\x00', 0x0, 0x4a, &(0x7f00000018c0)=""/74, 0x40f00, 0xc, '\x00', r5, 0x25, r0, 0x8, &(0x7f00000019c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001a40)=[r0, 0x1, r0, r0, r0], &(0x7f0000001a80)=[{0x1, 0x4, 0x10, 0x3}, {0x3, 0x3, 0x10, 0x8}, {0x2, 0x3, 0x3, 0x8}, {0x2, 0x1, 0x0, 0x7}, {0x3, 0x5, 0x7, 0x3}, {0x1, 0x1, 0xc, 0x4}], 0x10, 0x6}, 0x90) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001bc0)=0x8, 0x4) accept4$llc(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10, 0x0) [ 515.658677][ T28] audit: type=1326 audit(1699290204.004:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31154 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee9467cae9 code=0x0 17:03:24 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) 17:03:24 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:24 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:24 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) [ 515.692870][ T28] audit: type=1326 audit(1699290204.044:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31157 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f92e7cae9 code=0x0 [ 515.737758][ T28] audit: type=1326 audit(1699290204.074:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31154 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee9467cae9 code=0x0 17:03:24 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:24 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) 17:03:24 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:24 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:24 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r3 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r4, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) getpeername$packet(r0, &(0x7f0000001940)={0x11, 0x0, 0x0}, &(0x7f0000001980)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0xf, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7f}, [@ldst={0x3, 0x0, 0x0, 0x9, 0x8, 0xffffffffffffffe0, 0x1}, @jmp={0x5, 0x1, 0x9, 0x8, 0x3, 0x100, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x2, 0x1, 0xc, 0x1000, 0x2}]}, &(0x7f0000001880)='GPL\x00', 0x0, 0x4a, &(0x7f00000018c0)=""/74, 0x40f00, 0xc, '\x00', r6, 0x25, r0, 0x8, &(0x7f00000019c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001a40)=[r0, 0x1, r0, r0, r0], &(0x7f0000001a80)=[{0x1, 0x4, 0x10, 0x3}, {0x3, 0x3, 0x10, 0x8}, {0x2, 0x3, 0x3, 0x8}, {0x2, 0x1, 0x0, 0x7}, {0x3, 0x5, 0x7, 0x3}, {0x1, 0x1, 0xc, 0x4}], 0x10, 0x6}, 0x90) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001bc0)=0x8, 0x4) accept4$llc(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10, 0x0) accept4$llc(r2, 0x0, &(0x7f0000001c80), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001d00)={0x7, &(0x7f0000001cc0)=[{0x5, 0x80, 0x81, 0x4}, {0x5, 0x6, 0xf7, 0x87}, {0xffff, 0x7f, 0x4, 0xdf4}, {0x0, 0x1, 0x4, 0x940}, {0x6, 0x3, 0x7, 0x2}, {0x8, 0x3, 0x1f, 0x3}, {0x1, 0x8f, 0x9, 0xffff}]}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000001d40)={0xc}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001d80)={0x11, 0x0, 0x0}, &(0x7f0000001dc0)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x48) bind$vsock_stream(r3, &(0x7f0000001e80)={0x28, 0x0, 0xffffffff, @host}, 0x10) accept4$vsock_stream(r0, &(0x7f0000001ec0)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001f00), 0x20000, 0x0) 17:03:24 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) getpeername$packet(r0, &(0x7f0000001940)={0x11, 0x0, 0x0}, &(0x7f0000001980)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0xf, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7f}, [@ldst={0x3, 0x0, 0x0, 0x9, 0x8, 0xffffffffffffffe0, 0x1}, @jmp={0x5, 0x1, 0x9, 0x8, 0x3, 0x100, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x2, 0x1, 0xc, 0x1000, 0x2}]}, &(0x7f0000001880)='GPL\x00', 0x0, 0x4a, &(0x7f00000018c0)=""/74, 0x40f00, 0xc, '\x00', r5, 0x25, r0, 0x8, &(0x7f00000019c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001a40)=[r0, 0x1, r0, r0, r0], &(0x7f0000001a80)=[{0x1, 0x4, 0x10, 0x3}, {0x3, 0x3, 0x10, 0x8}, {0x2, 0x3, 0x3, 0x8}, {0x2, 0x1, 0x0, 0x7}, {0x3, 0x5, 0x7, 0x3}, {0x1, 0x1, 0xc, 0x4}], 0x10, 0x6}, 0x90) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001bc0)=0x8, 0x4) 17:03:24 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:24 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) 17:03:24 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:24 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000900)=0x1) [ 516.489748][ T28] audit: type=1326 audit(1699290204.844:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31179 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee9467cae9 code=0x0 [ 516.557337][ T28] audit: type=1326 audit(1699290204.904:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31179 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee9467cae9 code=0x0 17:03:24 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:24 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:25 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:25 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) [ 516.644065][ T28] audit: type=1326 audit(1699290204.984:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31188 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f92e7cae9 code=0x0 17:03:25 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:25 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) socket$rxrpc(0x21, 0x2, 0x2) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:25 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r3 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r4, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) getpeername$packet(r0, &(0x7f0000001940)={0x11, 0x0, 0x0}, &(0x7f0000001980)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0xf, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7f}, [@ldst={0x3, 0x0, 0x0, 0x9, 0x8, 0xffffffffffffffe0, 0x1}, @jmp={0x5, 0x1, 0x9, 0x8, 0x3, 0x100, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x2, 0x1, 0xc, 0x1000, 0x2}]}, &(0x7f0000001880)='GPL\x00', 0x0, 0x4a, &(0x7f00000018c0)=""/74, 0x40f00, 0xc, '\x00', r6, 0x25, r0, 0x8, &(0x7f00000019c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001a40)=[r0, 0x1, r0, r0, r0], &(0x7f0000001a80)=[{0x1, 0x4, 0x10, 0x3}, {0x3, 0x3, 0x10, 0x8}, {0x2, 0x3, 0x3, 0x8}, {0x2, 0x1, 0x0, 0x7}, {0x3, 0x5, 0x7, 0x3}, {0x1, 0x1, 0xc, 0x4}], 0x10, 0x6}, 0x90) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001bc0)=0x8, 0x4) accept4$llc(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10, 0x0) accept4$llc(r2, 0x0, &(0x7f0000001c80), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001d00)={0x7, &(0x7f0000001cc0)=[{0x5, 0x80, 0x81, 0x4}, {0x5, 0x6, 0xf7, 0x87}, {0xffff, 0x7f, 0x4, 0xdf4}, {0x0, 0x1, 0x4, 0x940}, {0x6, 0x3, 0x7, 0x2}, {0x8, 0x3, 0x1f, 0x3}, {0x1, 0x8f, 0x9, 0xffff}]}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000001d40)={0xc}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001d80)={0x11, 0x0, 0x0}, &(0x7f0000001dc0)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x48) bind$vsock_stream(r3, &(0x7f0000001e80)={0x28, 0x0, 0xffffffff, @host}, 0x10) accept4$vsock_stream(r0, &(0x7f0000001ec0)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x0) [ 517.355569][ T28] audit: type=1326 audit(1699290205.704:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31206 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee9467cae9 code=0x0 17:03:25 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) socket$rxrpc(0x21, 0x2, 0x2) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:25 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) socket$rxrpc(0x21, 0x2, 0x2) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:25 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:25 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:25 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) getpeername$packet(r0, &(0x7f0000001940)={0x11, 0x0, 0x0}, &(0x7f0000001980)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0xf, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7f}, [@ldst={0x3, 0x0, 0x0, 0x9, 0x8, 0xffffffffffffffe0, 0x1}, @jmp={0x5, 0x1, 0x9, 0x8, 0x3, 0x100, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x2, 0x1, 0xc, 0x1000, 0x2}]}, &(0x7f0000001880)='GPL\x00', 0x0, 0x4a, &(0x7f00000018c0)=""/74, 0x40f00, 0xc, '\x00', r5, 0x25, r0, 0x8, &(0x7f00000019c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001a40)=[r0, 0x1, r0, r0, r0], &(0x7f0000001a80)=[{0x1, 0x4, 0x10, 0x3}, {0x3, 0x3, 0x10, 0x8}, {0x2, 0x3, 0x3, 0x8}, {0x2, 0x1, 0x0, 0x7}, {0x3, 0x5, 0x7, 0x3}, {0x1, 0x1, 0xc, 0x4}], 0x10, 0x6}, 0x90) 17:03:25 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:25 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:25 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:25 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:25 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:25 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:26 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r3 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r4, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) getpeername$packet(r0, &(0x7f0000001940)={0x11, 0x0, 0x0}, &(0x7f0000001980)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0xf, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7f}, [@ldst={0x3, 0x0, 0x0, 0x9, 0x8, 0xffffffffffffffe0, 0x1}, @jmp={0x5, 0x1, 0x9, 0x8, 0x3, 0x100, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x2, 0x1, 0xc, 0x1000, 0x2}]}, &(0x7f0000001880)='GPL\x00', 0x0, 0x4a, &(0x7f00000018c0)=""/74, 0x40f00, 0xc, '\x00', r6, 0x25, r0, 0x8, &(0x7f00000019c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001a40)=[r0, 0x1, r0, r0, r0], &(0x7f0000001a80)=[{0x1, 0x4, 0x10, 0x3}, {0x3, 0x3, 0x10, 0x8}, {0x2, 0x3, 0x3, 0x8}, {0x2, 0x1, 0x0, 0x7}, {0x3, 0x5, 0x7, 0x3}, {0x1, 0x1, 0xc, 0x4}], 0x10, 0x6}, 0x90) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001bc0)=0x8, 0x4) accept4$llc(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10, 0x0) accept4$llc(r2, 0x0, &(0x7f0000001c80), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001d00)={0x7, &(0x7f0000001cc0)=[{0x5, 0x80, 0x81, 0x4}, {0x5, 0x6, 0xf7, 0x87}, {0xffff, 0x7f, 0x4, 0xdf4}, {0x0, 0x1, 0x4, 0x940}, {0x6, 0x3, 0x7, 0x2}, {0x8, 0x3, 0x1f, 0x3}, {0x1, 0x8f, 0x9, 0xffff}]}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000001d40)={0xc}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001d80)={0x11, 0x0, 0x0}, &(0x7f0000001dc0)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x48) bind$vsock_stream(r3, &(0x7f0000001e80)={0x28, 0x0, 0xffffffff, @host}, 0x10) 17:03:26 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:26 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:26 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:26 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) getpeername$packet(r0, &(0x7f0000001940), &(0x7f0000001980)=0x14) 17:03:26 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:26 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:26 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:26 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:26 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:26 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:26 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:27 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:27 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:27 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) socket$rxrpc(0x21, 0x2, 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:27 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:27 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) 17:03:27 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r3 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r4, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) getpeername$packet(r0, &(0x7f0000001940)={0x11, 0x0, 0x0}, &(0x7f0000001980)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0xf, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7f}, [@ldst={0x3, 0x0, 0x0, 0x9, 0x8, 0xffffffffffffffe0, 0x1}, @jmp={0x5, 0x1, 0x9, 0x8, 0x3, 0x100, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x2, 0x1, 0xc, 0x1000, 0x2}]}, &(0x7f0000001880)='GPL\x00', 0x0, 0x4a, &(0x7f00000018c0)=""/74, 0x40f00, 0xc, '\x00', r6, 0x25, r0, 0x8, &(0x7f00000019c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001a40)=[r0, 0x1, r0, r0, r0], &(0x7f0000001a80)=[{0x1, 0x4, 0x10, 0x3}, {0x3, 0x3, 0x10, 0x8}, {0x2, 0x3, 0x3, 0x8}, {0x2, 0x1, 0x0, 0x7}, {0x3, 0x5, 0x7, 0x3}, {0x1, 0x1, 0xc, 0x4}], 0x10, 0x6}, 0x90) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001bc0)=0x8, 0x4) accept4$llc(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10, 0x0) accept4$llc(r2, 0x0, &(0x7f0000001c80), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001d00)={0x7, &(0x7f0000001cc0)=[{0x5, 0x80, 0x81, 0x4}, {0x5, 0x6, 0xf7, 0x87}, {0xffff, 0x7f, 0x4, 0xdf4}, {0x0, 0x1, 0x4, 0x940}, {0x6, 0x3, 0x7, 0x2}, {0x8, 0x3, 0x1f, 0x3}, {0x1, 0x8f, 0x9, 0xffff}]}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000001d40)={0xc}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001d80)={0x11, 0x0, 0x0}, &(0x7f0000001dc0)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x48) 17:03:27 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:27 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:27 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:27 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:27 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:27 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:27 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:27 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:27 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:27 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:28 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:28 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) 17:03:28 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r3 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r4, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) getpeername$packet(r0, &(0x7f0000001940)={0x11, 0x0, 0x0}, &(0x7f0000001980)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0xf, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7f}, [@ldst={0x3, 0x0, 0x0, 0x9, 0x8, 0xffffffffffffffe0, 0x1}, @jmp={0x5, 0x1, 0x9, 0x8, 0x3, 0x100, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x2, 0x1, 0xc, 0x1000, 0x2}]}, &(0x7f0000001880)='GPL\x00', 0x0, 0x4a, &(0x7f00000018c0)=""/74, 0x40f00, 0xc, '\x00', r6, 0x25, r0, 0x8, &(0x7f00000019c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001a40)=[r0, 0x1, r0, r0, r0], &(0x7f0000001a80)=[{0x1, 0x4, 0x10, 0x3}, {0x3, 0x3, 0x10, 0x8}, {0x2, 0x3, 0x3, 0x8}, {0x2, 0x1, 0x0, 0x7}, {0x3, 0x5, 0x7, 0x3}, {0x1, 0x1, 0xc, 0x4}], 0x10, 0x6}, 0x90) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001bc0)=0x8, 0x4) accept4$llc(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10, 0x0) accept4$llc(r2, 0x0, &(0x7f0000001c80), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001d00)={0x7, &(0x7f0000001cc0)=[{0x5, 0x80, 0x81, 0x4}, {0x5, 0x6, 0xf7, 0x87}, {0xffff, 0x7f, 0x4, 0xdf4}, {0x0, 0x1, 0x4, 0x940}, {0x6, 0x3, 0x7, 0x2}, {0x8, 0x3, 0x1f, 0x3}, {0x1, 0x8f, 0x9, 0xffff}]}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000001d40)={0xc}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) 17:03:28 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:28 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:28 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:28 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:28 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) [ 520.263411][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 520.263425][ T28] audit: type=1326 audit(1699290208.614:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31296 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee9467cae9 code=0x0 17:03:28 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:28 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 520.343323][ T28] audit: type=1326 audit(1699290208.654:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31302 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f92e7cae9 code=0x0 17:03:28 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000840), 0x4) [ 520.387451][ T28] audit: type=1326 audit(1699290208.684:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31296 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee9467cae9 code=0x0 17:03:28 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:28 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:29 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 17:03:29 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:29 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:29 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:29 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:29 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r3 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r4, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) getpeername$packet(r0, &(0x7f0000001940)={0x11, 0x0, 0x0}, &(0x7f0000001980)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0xf, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7f}, [@ldst={0x3, 0x0, 0x0, 0x9, 0x8, 0xffffffffffffffe0, 0x1}, @jmp={0x5, 0x1, 0x9, 0x8, 0x3, 0x100, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x2, 0x1, 0xc, 0x1000, 0x2}]}, &(0x7f0000001880)='GPL\x00', 0x0, 0x4a, &(0x7f00000018c0)=""/74, 0x40f00, 0xc, '\x00', r6, 0x25, r0, 0x8, &(0x7f00000019c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001a40)=[r0, 0x1, r0, r0, r0], &(0x7f0000001a80)=[{0x1, 0x4, 0x10, 0x3}, {0x3, 0x3, 0x10, 0x8}, {0x2, 0x3, 0x3, 0x8}, {0x2, 0x1, 0x0, 0x7}, {0x3, 0x5, 0x7, 0x3}, {0x1, 0x1, 0xc, 0x4}], 0x10, 0x6}, 0x90) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001bc0)=0x8, 0x4) accept4$llc(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10, 0x0) accept4$llc(r2, 0x0, &(0x7f0000001c80), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001d00)={0x7, &(0x7f0000001cc0)=[{0x5, 0x80, 0x81, 0x4}, {0x5, 0x6, 0xf7, 0x87}, {0xffff, 0x7f, 0x4, 0xdf4}, {0x0, 0x1, 0x4, 0x940}, {0x6, 0x3, 0x7, 0x2}, {0x8, 0x3, 0x1f, 0x3}, {0x1, 0x8f, 0x9, 0xffff}]}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000001d40)={0xc}) 17:03:29 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:29 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) pidfd_getfd(r1, r0, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) [ 521.198354][ T28] audit: type=1326 audit(1699290209.544:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31325 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee9467cae9 code=0x0 17:03:29 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:29 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:29 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:29 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) [ 521.295105][ T28] audit: type=1326 audit(1699290209.594:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31325 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee9467cae9 code=0x0 [ 521.354318][ T28] audit: type=1326 audit(1699290209.604:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31333 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f92e7cae9 code=0x0 17:03:30 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) 17:03:30 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:30 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) pidfd_getfd(r1, r0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:30 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:30 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:30 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r3 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r4, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) getpeername$packet(r0, &(0x7f0000001940)={0x11, 0x0, 0x0}, &(0x7f0000001980)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0xf, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7f}, [@ldst={0x3, 0x0, 0x0, 0x9, 0x8, 0xffffffffffffffe0, 0x1}, @jmp={0x5, 0x1, 0x9, 0x8, 0x3, 0x100, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x2, 0x1, 0xc, 0x1000, 0x2}]}, &(0x7f0000001880)='GPL\x00', 0x0, 0x4a, &(0x7f00000018c0)=""/74, 0x40f00, 0xc, '\x00', r6, 0x25, r0, 0x8, &(0x7f00000019c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001a40)=[r0, 0x1, r0, r0, r0], &(0x7f0000001a80)=[{0x1, 0x4, 0x10, 0x3}, {0x3, 0x3, 0x10, 0x8}, {0x2, 0x3, 0x3, 0x8}, {0x2, 0x1, 0x0, 0x7}, {0x3, 0x5, 0x7, 0x3}, {0x1, 0x1, 0xc, 0x4}], 0x10, 0x6}, 0x90) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001bc0)=0x8, 0x4) accept4$llc(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10, 0x0) accept4$llc(r2, 0x0, &(0x7f0000001c80), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001d00)={0x7, &(0x7f0000001cc0)=[{0x5, 0x80, 0x81, 0x4}, {0x5, 0x6, 0xf7, 0x87}, {0xffff, 0x7f, 0x4, 0xdf4}, {0x0, 0x1, 0x4, 0x940}, {0x6, 0x3, 0x7, 0x2}, {0x8, 0x3, 0x1f, 0x3}, {0x1, 0x8f, 0x9, 0xffff}]}) 17:03:30 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:30 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:30 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) pidfd_getfd(r1, r0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:30 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) [ 522.149886][ T28] audit: type=1326 audit(1699290210.504:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31357 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee9467cae9 code=0x0 17:03:30 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:30 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000840), 0x4) [ 522.224705][ T28] audit: type=1326 audit(1699290210.554:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31357 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee9467cae9 code=0x0 [ 522.285447][ T28] audit: type=1326 audit(1699290210.584:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31361 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f92e7cae9 code=0x0 17:03:31 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) 17:03:31 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:31 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:31 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:31 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:31 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r3 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r4, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) getpeername$packet(r0, &(0x7f0000001940)={0x11, 0x0, 0x0}, &(0x7f0000001980)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0xf, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7f}, [@ldst={0x3, 0x0, 0x0, 0x9, 0x8, 0xffffffffffffffe0, 0x1}, @jmp={0x5, 0x1, 0x9, 0x8, 0x3, 0x100, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x2, 0x1, 0xc, 0x1000, 0x2}]}, &(0x7f0000001880)='GPL\x00', 0x0, 0x4a, &(0x7f00000018c0)=""/74, 0x40f00, 0xc, '\x00', r6, 0x25, r0, 0x8, &(0x7f00000019c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001a40)=[r0, 0x1, r0, r0, r0], &(0x7f0000001a80)=[{0x1, 0x4, 0x10, 0x3}, {0x3, 0x3, 0x10, 0x8}, {0x2, 0x3, 0x3, 0x8}, {0x2, 0x1, 0x0, 0x7}, {0x3, 0x5, 0x7, 0x3}, {0x1, 0x1, 0xc, 0x4}], 0x10, 0x6}, 0x90) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001bc0)=0x8, 0x4) accept4$llc(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10, 0x0) accept4$llc(r2, 0x0, &(0x7f0000001c80), 0x0) 17:03:31 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:31 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) pidfd_getfd(r1, r0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:31 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) 17:03:31 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) [ 523.099983][ T28] audit: type=1326 audit(1699290211.454:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31377 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee9467cae9 code=0x0 17:03:31 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:31 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:31 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) 17:03:31 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:31 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:31 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:31 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:32 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:32 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:32 executing program 5: openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:32 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) 17:03:32 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:32 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) getpeername$packet(r0, &(0x7f0000001940)={0x11, 0x0, 0x0}, &(0x7f0000001980)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0xf, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7f}, [@ldst={0x3, 0x0, 0x0, 0x9, 0x8, 0xffffffffffffffe0, 0x1}, @jmp={0x5, 0x1, 0x9, 0x8, 0x3, 0x100, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x2, 0x1, 0xc, 0x1000, 0x2}]}, &(0x7f0000001880)='GPL\x00', 0x0, 0x4a, &(0x7f00000018c0)=""/74, 0x40f00, 0xc, '\x00', r5, 0x25, r0, 0x8, &(0x7f00000019c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001a40)=[r0, 0x1, r0, r0, r0], &(0x7f0000001a80)=[{0x1, 0x4, 0x10, 0x3}, {0x3, 0x3, 0x10, 0x8}, {0x2, 0x3, 0x3, 0x8}, {0x2, 0x1, 0x0, 0x7}, {0x3, 0x5, 0x7, 0x3}, {0x1, 0x1, 0xc, 0x4}], 0x10, 0x6}, 0x90) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001bc0)=0x8, 0x4) accept4$llc(r0, &(0x7f0000001c00), &(0x7f0000001c40)=0x10, 0x0) 17:03:32 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:32 executing program 5: openat$smackfs_ipv6host(0xffffffffffffff9c, 0x0, 0x2, 0x0) 17:03:32 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:32 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) 17:03:32 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:32 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:32 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:32 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:32 executing program 5: openat$smackfs_ipv6host(0xffffffffffffff9c, 0x0, 0x2, 0x0) 17:03:32 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) 17:03:32 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:33 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:33 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) getpeername$packet(r0, &(0x7f0000001940)={0x11, 0x0, 0x0}, &(0x7f0000001980)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0xf, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7f}, [@ldst={0x3, 0x0, 0x0, 0x9, 0x8, 0xffffffffffffffe0, 0x1}, @jmp={0x5, 0x1, 0x9, 0x8, 0x3, 0x100, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x2, 0x1, 0xc, 0x1000, 0x2}]}, &(0x7f0000001880)='GPL\x00', 0x0, 0x4a, &(0x7f00000018c0)=""/74, 0x40f00, 0xc, '\x00', r5, 0x25, r0, 0x8, &(0x7f00000019c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001a40)=[r0, 0x1, r0, r0, r0], &(0x7f0000001a80)=[{0x1, 0x4, 0x10, 0x3}, {0x3, 0x3, 0x10, 0x8}, {0x2, 0x3, 0x3, 0x8}, {0x2, 0x1, 0x0, 0x7}, {0x3, 0x5, 0x7, 0x3}, {0x1, 0x1, 0xc, 0x4}], 0x10, 0x6}, 0x90) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001bc0)=0x8, 0x4) 17:03:33 executing program 5: openat$smackfs_ipv6host(0xffffffffffffff9c, 0x0, 0x2, 0x0) 17:03:33 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:33 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:33 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) 17:03:33 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:33 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:33 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) 17:03:33 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 17:03:33 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:33 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:33 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:34 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) getpeername$packet(r0, &(0x7f0000001940)={0x11, 0x0, 0x0}, &(0x7f0000001980)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0xf, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7f}, [@ldst={0x3, 0x0, 0x0, 0x9, 0x8, 0xffffffffffffffe0, 0x1}, @jmp={0x5, 0x1, 0x9, 0x8, 0x3, 0x100, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x2, 0x1, 0xc, 0x1000, 0x2}]}, &(0x7f0000001880)='GPL\x00', 0x0, 0x4a, &(0x7f00000018c0)=""/74, 0x40f00, 0xc, '\x00', r5, 0x25, r0, 0x8, &(0x7f00000019c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001a40)=[r0, 0x1, r0, r0, r0], &(0x7f0000001a80)=[{0x1, 0x4, 0x10, 0x3}, {0x3, 0x3, 0x10, 0x8}, {0x2, 0x3, 0x3, 0x8}, {0x2, 0x1, 0x0, 0x7}, {0x3, 0x5, 0x7, 0x3}, {0x1, 0x1, 0xc, 0x4}], 0x10, 0x6}, 0x90) 17:03:34 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:34 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 17:03:34 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:34 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:34 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:34 executing program 3: openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:34 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:34 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 17:03:34 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) [ 525.906362][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 525.906377][ T28] audit: type=1326 audit(1699290214.254:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31480 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee9467cae9 code=0x0 17:03:34 executing program 3: openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:34 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) 17:03:35 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 17:03:35 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:35 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:35 executing program 3: openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:35 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) getpeername$packet(r0, &(0x7f0000001940), &(0x7f0000001980)=0x14) 17:03:35 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) 17:03:35 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) 17:03:35 executing program 2: accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 17:03:35 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:35 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:35 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) [ 526.837241][ T28] audit: type=1326 audit(1699290215.164:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31508 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee9467cae9 code=0x0 17:03:35 executing program 2: accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 17:03:35 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:35 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 17:03:36 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) 17:03:36 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:36 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:36 executing program 2: accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 17:03:36 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 17:03:36 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) 17:03:36 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) 17:03:36 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x800, 0x0) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 17:03:36 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) [ 527.720698][ T28] audit: type=1326 audit(1699290216.074:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31534 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f726307cae9 code=0x0 17:03:36 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:36 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x800, 0x0) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 17:03:36 executing program 4: setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 17:03:36 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) [ 527.805154][ T28] audit: type=1326 audit(1699290216.144:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31537 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee9467cae9 code=0x0 17:03:36 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x800, 0x0) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 17:03:36 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:36 executing program 5: openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:36 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:36 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) 17:03:36 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 17:03:36 executing program 4: setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 17:03:36 executing program 5: openat$smackfs_ipv6host(0xffffffffffffff9c, 0x0, 0x2, 0x0) 17:03:36 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:36 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:37 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 17:03:37 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:37 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:37 executing program 4: setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 17:03:37 executing program 5: openat$smackfs_ipv6host(0xffffffffffffff9c, 0x0, 0x2, 0x0) 17:03:37 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) [ 528.761463][ T28] audit: type=1326 audit(1699290217.104:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31573 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee9467cae9 code=0x0 17:03:37 executing program 5: openat$smackfs_ipv6host(0xffffffffffffff9c, 0x0, 0x2, 0x0) 17:03:37 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) 17:03:37 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 17:03:37 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) 17:03:37 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) pidfd_getfd(r1, r0, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:37 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 17:03:38 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) 17:03:38 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x80000) 17:03:38 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) 17:03:38 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) [ 529.686130][ T28] audit: type=1326 audit(1699290218.034:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31595 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee9467cae9 code=0x0 17:03:38 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 17:03:38 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:38 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) [ 529.783551][ T28] audit: type=1326 audit(1699290218.124:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31602 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcde47cae9 code=0x0 17:03:38 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:38 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) 17:03:38 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) 17:03:38 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) 17:03:38 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 17:03:38 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) socket$rxrpc(0x21, 0x2, 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:38 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:38 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) pidfd_getfd(r1, r0, 0x0) 17:03:38 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=0x4) [ 530.546790][ T28] audit: type=1326 audit(1699290218.894:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31619 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f92e7cae9 code=0x0 17:03:39 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) [ 530.612807][ T28] audit: type=1326 audit(1699290218.964:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31624 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee9467cae9 code=0x0 17:03:39 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:39 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:39 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) [ 530.680366][ T28] audit: type=1326 audit(1699290219.034:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31627 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39a247cae9 code=0x0 17:03:39 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) 17:03:39 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:39 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) 17:03:39 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:39 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) 17:03:39 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:39 executing program 3: openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:39 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000016c0)=0x80000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001740)={0x5, &(0x7f0000001700)=[{0x6, 0x1, 0xb3, 0x8}, {0x5, 0x9a, 0x2}, {0x380, 0x3, 0x60, 0x7ff}, {0x3ff, 0x5, 0x1, 0x800}, {0x4d66, 0x4, 0xff}]}) 17:03:39 executing program 3: openat$smackfs_ipv6host(0xffffffffffffff9c, 0x0, 0x2, 0x0) 17:03:39 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:39 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) 17:03:39 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:39 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) ioctl$I2C_TIMEOUT(r0, 0x702, 0x7ff) 17:03:39 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) 17:03:40 executing program 3: openat$smackfs_ipv6host(0xffffffffffffff9c, 0x0, 0x2, 0x0) 17:03:40 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:40 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:40 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) socket$netlink(0x10, 0x3, 0xf) [ 531.642173][ T28] audit: type=1326 audit(1699290219.984:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31660 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39a247cae9 code=0x0 17:03:40 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) 17:03:40 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:40 executing program 3: openat$smackfs_ipv6host(0xffffffffffffff9c, 0x0, 0x2, 0x0) 17:03:40 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:40 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) 17:03:40 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0xf472}, 0x8) 17:03:40 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) socket$rxrpc(0x21, 0x2, 0x2) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:40 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) socket$rxrpc(0x21, 0x2, 0x2) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:40 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:40 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:40 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x3, 0x1, 0xb, 0x2, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x4, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000011c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x0, 0xc}, {0x0, 0x1, 0xa, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0xa, 0x5}, {0x5, 0x3, 0x9, 0x9}, {0x5, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0xc}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r3, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) 17:03:40 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:40 executing program 1: openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 17:03:41 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) 17:03:41 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) 17:03:41 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000100)=0x62d9, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) 17:03:41 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:41 executing program 1: openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 17:03:41 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) socket$rxrpc(0x21, 0x2, 0x2) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:41 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) 17:03:41 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) 17:03:41 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) 17:03:41 executing program 1: openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 17:03:41 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) 17:03:41 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:41 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) 17:03:41 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) 17:03:41 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) socket$rxrpc(0x21, 0x2, 0x2) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:41 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x0, 0x0) 17:03:41 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) 17:03:41 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:41 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) socket$rxrpc(0x21, 0x2, 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:41 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:41 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:41 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) inotify_rm_watch(r0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) 17:03:41 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:41 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:41 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) socket$rxrpc(0x21, 0x2, 0x2) 17:03:41 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:41 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) 17:03:41 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:41 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:41 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) 17:03:41 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) 17:03:41 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:41 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) 17:03:41 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:41 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:41 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:41 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) 17:03:41 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 17:03:42 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:42 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) 17:03:42 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) 17:03:42 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:42 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 17:03:42 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:42 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) 17:03:42 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:42 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 17:03:42 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) 17:03:42 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) 17:03:42 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:42 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) 17:03:42 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:42 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) 17:03:42 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:42 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 17:03:42 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:42 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) 17:03:42 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) 17:03:42 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:42 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:42 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) 17:03:42 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) socket$rxrpc(0x21, 0x2, 0x2) 17:03:42 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:42 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) 17:03:42 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:42 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) 17:03:42 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) 17:03:42 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:42 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) 17:03:42 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:42 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:42 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) socket$rxrpc(0x21, 0x2, 0x2) 17:03:42 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) 17:03:42 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) 17:03:42 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:42 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:42 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) 17:03:42 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) 17:03:42 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:43 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:43 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) 17:03:43 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:43 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) 17:03:43 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:43 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) pidfd_getfd(r1, r0, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:43 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) 17:03:43 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) 17:03:43 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) 17:03:43 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:43 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:43 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:43 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) 17:03:43 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) 17:03:43 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) 17:03:43 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:43 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:43 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) socket$rxrpc(0x21, 0x2, 0x2) 17:03:43 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:43 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) socket$rxrpc(0x21, 0x2, 0x2) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:43 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) 17:03:43 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) 17:03:43 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) 17:03:43 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:43 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:43 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) 17:03:43 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:43 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:43 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:43 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) 17:03:43 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:43 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) 17:03:43 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:43 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) 17:03:43 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:43 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:43 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) 17:03:43 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) 17:03:43 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) 17:03:43 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:44 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:44 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:44 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:44 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:44 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:44 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:44 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) 17:03:44 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:44 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:44 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) 17:03:44 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:44 executing program 3: socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:44 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:44 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:44 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) pidfd_getfd(r1, r0, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:44 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) 17:03:44 executing program 3: socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:44 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:44 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:44 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:44 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:44 executing program 3: socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:44 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) 17:03:44 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) 17:03:44 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:44 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:44 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:44 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:44 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) pidfd_getfd(r1, r0, 0x0) 17:03:44 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:44 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:44 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:44 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:44 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) 17:03:44 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:44 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:44 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:44 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:44 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:44 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x0, 0x3, 0x6, &(0x7f00000002c0)) 17:03:44 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:44 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) 17:03:44 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:45 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:45 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:45 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) 17:03:45 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) 17:03:45 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) pidfd_getfd(r1, r0, 0x0) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:45 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x0, 0x3, 0x6, &(0x7f00000002c0)) 17:03:45 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) 17:03:45 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:45 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:45 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:45 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:45 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) pidfd_getfd(r1, r0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:45 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) 17:03:45 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:45 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) socket$rxrpc(0x21, 0x2, 0x2) 17:03:45 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:45 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x0, 0x3, 0x6, &(0x7f00000002c0)) 17:03:45 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) 17:03:45 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:45 executing program 5: socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:45 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) 17:03:45 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:45 executing program 5: socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:45 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:45 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:45 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) 17:03:45 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:45 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) 17:03:45 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x6, &(0x7f00000002c0)) 17:03:45 executing program 5: socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:45 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) 17:03:45 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:45 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:45 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) 17:03:45 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) 17:03:45 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:45 executing program 2: openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 17:03:45 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:45 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:45 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) 17:03:45 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, 0x0) 17:03:46 executing program 2: openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 17:03:46 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:46 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:46 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, 0x0) 17:03:46 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) 17:03:46 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:46 executing program 2: openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 17:03:46 executing program 1: connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:46 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:46 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, 0x0) 17:03:46 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:46 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:46 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x0, 0x0) 17:03:46 executing program 4: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:46 executing program 1: connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 17:03:46 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:46 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x0, 0x3, 0x6, &(0x7f00000002c0)) 17:03:46 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:46 executing program 4: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:46 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:46 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, 0x0) 17:03:46 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:46 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:46 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:46 executing program 4: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:46 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, 0x0) 17:03:46 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:46 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) 17:03:46 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x0, 0x3, 0x6, &(0x7f00000002c0)) 17:03:46 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, 0x0) 17:03:46 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:46 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:46 executing program 3: socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:46 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) 17:03:46 executing program 1: socketpair(0x6, 0x0, 0x0, 0x0) 17:03:46 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x0, 0x3, 0x6, &(0x7f00000002c0)) 17:03:46 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:46 executing program 3: socketpair(0x0, 0x3, 0x6, &(0x7f00000002c0)) 17:03:46 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000740)) 17:03:46 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:46 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) 17:03:46 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:46 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000740)) 17:03:47 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x6, &(0x7f00000002c0)) 17:03:47 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x0, 0x3, 0x6, &(0x7f00000002c0)) 17:03:47 executing program 3: socketpair(0x0, 0x0, 0x6, &(0x7f00000002c0)) 17:03:47 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:47 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) 17:03:47 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000740)) 17:03:47 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000740)) 17:03:47 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x0, &(0x7f0000000740)) 17:03:47 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000740)) 17:03:47 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, 0x0) 17:03:47 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:47 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x0, 0x3, 0x6, &(0x7f00000002c0)) 17:03:47 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) 17:03:47 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x0, &(0x7f0000000740)) 17:03:47 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000740)) 17:03:47 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, 0x0) 17:03:47 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x0, &(0x7f0000000740)) 17:03:47 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) pidfd_getfd(r1, r0, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:47 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x0, &(0x7f0000000740)) 17:03:47 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x0, 0x3, 0x6, &(0x7f00000002c0)) 17:03:47 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, 0x0) 17:03:47 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x4, 0x0) 17:03:47 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:47 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x0, &(0x7f0000000740)) 17:03:47 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) 17:03:47 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:47 executing program 5: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x0, &(0x7f0000000740)) 17:03:47 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000740)) 17:03:47 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x0, &(0x7f0000000740)) 17:03:47 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) 17:03:47 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:47 executing program 1: socketpair(0x0, 0x3, 0x6, &(0x7f00000002c0)) 17:03:47 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000740)) 17:03:47 executing program 5: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x0, &(0x7f0000000740)) 17:03:47 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) 17:03:47 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:47 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x4, 0x0) 17:03:48 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) 17:03:48 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000740)) 17:03:48 executing program 5: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x0, &(0x7f0000000740)) 17:03:48 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x0, 0x3, 0x6, &(0x7f00000002c0)) 17:03:48 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:48 executing program 5: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740)) 17:03:48 executing program 1: socketpair(0x0, 0x0, 0x6, &(0x7f00000002c0)) 17:03:48 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) 17:03:48 executing program 5: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740)) 17:03:48 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:48 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740)) 17:03:48 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) 17:03:48 executing program 5: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740)) 17:03:48 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:48 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) 17:03:48 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x0, 0x3, 0x6, &(0x7f00000002c0)) 17:03:48 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0) 17:03:48 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:48 executing program 5: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x0) 17:03:48 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:48 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) 17:03:48 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:48 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) 17:03:48 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:48 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x0, 0x3, 0x6, &(0x7f00000002c0)) 17:03:48 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:48 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:48 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:48 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) 17:03:48 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) 17:03:48 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) 17:03:48 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:48 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:48 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:48 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) 17:03:48 executing program 4: socketpair(0x0, 0x3, 0x6, &(0x7f00000002c0)) 17:03:48 executing program 1: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00', 0x0}) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', r8, 0x4000, r1}, 0x18) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000d80)={'\x00', 0xfb, 0x0, 0x3}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xf, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x522, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x1f000000, 0x14, &(0x7f0000000f00)=""/20, 0x41100, 0x62, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000f40)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)=[r3, r1, r4, r1, r1, r3, r1, r3, r3], &(0x7f0000000fc0)=[{0x2, 0x3, 0xd, 0x6}, {0x3, 0x3, 0x1, 0x3}, {0x5, 0x1, 0x6, 0xb}, {0x3, 0x3, 0x9, 0x3}, {0x5, 0x2, 0x7, 0xc}, {0x0, 0x4, 0x4, 0x3}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x7d49}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001100)=@o_path={&(0x7f0000000e00)='./file0\x00', r9, 0x4000, r8}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@getchain={0x3c, 0x66, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x10, 0xfff2}, {0xd, 0xffe0}, {0xf, 0xc}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0xce}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = pidfd_getfd(r4, r9, 0x0) ioctl$PPPIOCGDEBUG(r10, 0x80047441, &(0x7f0000001240)) syz_open_dev$I2C(&(0x7f0000001280), 0x9, 0x8000) 17:03:48 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) pidfd_getfd(r1, r0, 0x0) 17:03:48 executing program 0: socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:49 executing program 2: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00', 0x0}) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', r8, 0x4000, r1}, 0x18) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000d80)={'\x00', 0xfb, 0x0, 0x3}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xf, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x522, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x1f000000, 0x14, &(0x7f0000000f00)=""/20, 0x41100, 0x62, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000f40)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)=[r3, r1, r4, r1, r1, r3, r1, r3, r3], &(0x7f0000000fc0)=[{0x2, 0x3, 0xd, 0x6}, {0x3, 0x3, 0x1, 0x3}, {0x5, 0x1, 0x6, 0xb}, {0x3, 0x3, 0x9, 0x3}, {0x5, 0x2, 0x7, 0xc}, {0x0, 0x4, 0x4, 0x3}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x7d49}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001100)=@o_path={&(0x7f0000000e00)='./file0\x00', r9, 0x4000, r8}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@getchain={0x3c, 0x66, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x10, 0xfff2}, {0xd, 0xffe0}, {0xf, 0xc}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0xce}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = pidfd_getfd(r4, r9, 0x0) ioctl$PPPIOCGDEBUG(r10, 0x80047441, &(0x7f0000001240)) syz_open_dev$I2C(&(0x7f0000001280), 0x9, 0x8000) 17:03:49 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) 17:03:49 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:49 executing program 0: socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:49 executing program 4: socketpair(0x0, 0x0, 0x6, &(0x7f00000002c0)) 17:03:49 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000900)=0x1) 17:03:49 executing program 1: socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:49 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) 17:03:49 executing program 0: socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:49 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) 17:03:49 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) 17:03:49 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) 17:03:49 executing program 2: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00', 0x0}) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', r8, 0x4000, r1}, 0x18) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000d80)={'\x00', 0xfb, 0x0, 0x3}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xf, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x522, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x1f000000, 0x14, &(0x7f0000000f00)=""/20, 0x41100, 0x62, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000f40)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)=[r3, r1, r4, r1, r1, r3, r1, r3, r3], &(0x7f0000000fc0)=[{0x2, 0x3, 0xd, 0x6}, {0x3, 0x3, 0x1, 0x3}, {0x5, 0x1, 0x6, 0xb}, {0x3, 0x3, 0x9, 0x3}, {0x5, 0x2, 0x7, 0xc}, {0x0, 0x4, 0x4, 0x3}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x7d49}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001100)=@o_path={&(0x7f0000000e00)='./file0\x00', r9, 0x4000, r8}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@getchain={0x3c, 0x66, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x10, 0xfff2}, {0xd, 0xffe0}, {0xf, 0xc}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0xce}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = pidfd_getfd(r4, r9, 0x0) ioctl$PPPIOCGDEBUG(r10, 0x80047441, &(0x7f0000001240)) r11 = syz_open_dev$I2C(&(0x7f0000001280), 0x9, 0x8000) ioctl$I2C_SMBUS(r11, 0x720, &(0x7f0000001300)={0x1, 0x7, 0x3, &(0x7f00000012c0)={0xa, "787a28c1a072f73e2d0a0a2c0cb752563fee91416392930d604fb04eda788b0849"}}) 17:03:49 executing program 1: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00', 0x0}) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', r8, 0x4000, r1}, 0x18) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000d80)={'\x00', 0xfb, 0x0, 0x3}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xf, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x522, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x1f000000, 0x14, &(0x7f0000000f00)=""/20, 0x41100, 0x62, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000f40)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)=[r3, r1, r4, r1, r1, r3, r1, r3, r3], &(0x7f0000000fc0)=[{0x2, 0x3, 0xd, 0x6}, {0x3, 0x3, 0x1, 0x3}, {0x5, 0x1, 0x6, 0xb}, {0x3, 0x3, 0x9, 0x3}, {0x5, 0x2, 0x7, 0xc}, {0x0, 0x4, 0x4, 0x3}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x7d49}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001100)=@o_path={&(0x7f0000000e00)='./file0\x00', r9, 0x4000, r8}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@getchain={0x3c, 0x66, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x10, 0xfff2}, {0xd, 0xffe0}, {0xf, 0xc}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0xce}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = pidfd_getfd(r4, r9, 0x0) ioctl$PPPIOCGDEBUG(r10, 0x80047441, &(0x7f0000001240)) syz_open_dev$I2C(&(0x7f0000001280), 0x9, 0x8000) 17:03:49 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:49 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:03:49 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) 17:03:49 executing program 4: socketpair(0x0, 0x0, 0x0, 0x0) 17:03:49 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:49 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) 17:03:49 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:49 executing program 4: socketpair(0x0, 0x0, 0x0, 0x0) 17:03:49 executing program 3: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) 17:03:49 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:49 executing program 2: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) 17:03:49 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:03:49 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:49 executing program 4: socketpair(0x0, 0x0, 0x0, 0x0) 17:03:49 executing program 1: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:49 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000840), 0x4) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) 17:03:49 executing program 3: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) 17:03:50 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x0, 0x3, 0x6, &(0x7f00000002c0)) 17:03:50 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) 17:03:50 executing program 2: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00', 0x0}) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', r8, 0x4000, r1}, 0x18) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000d80)={'\x00', 0xfb, 0x0, 0x3}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xf, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x522, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x1f000000, 0x14, &(0x7f0000000f00)=""/20, 0x41100, 0x62, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000f40)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)=[r3, r1, r4, r1, r1, r3, r1, r3, r3], &(0x7f0000000fc0)=[{0x2, 0x3, 0xd, 0x6}, {0x3, 0x3, 0x1, 0x3}, {0x5, 0x1, 0x6, 0xb}, {0x3, 0x3, 0x9, 0x3}, {0x5, 0x2, 0x7, 0xc}, {0x0, 0x4, 0x4, 0x3}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x7d49}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001100)=@o_path={&(0x7f0000000e00)='./file0\x00', r9, 0x4000, r8}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@getchain={0x3c, 0x66, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x10, 0xfff2}, {0xd, 0xffe0}, {0xf, 0xc}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0xce}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = pidfd_getfd(r4, r9, 0x0) ioctl$PPPIOCGDEBUG(r10, 0x80047441, &(0x7f0000001240)) r11 = syz_open_dev$I2C(&(0x7f0000001280), 0x9, 0x8000) ioctl$I2C_SMBUS(r11, 0x720, &(0x7f0000001300)={0x1, 0x7, 0x3, &(0x7f00000012c0)={0xa, "787a28c1a072f73e2d0a0a2c0cb752563fee91416392930d604fb04eda788b0849"}}) 17:03:50 executing program 1: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00', 0x0}) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', r8, 0x4000, r1}, 0x18) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000d80)={'\x00', 0xfb, 0x0, 0x3}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xf, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x522, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x1f000000, 0x14, &(0x7f0000000f00)=""/20, 0x41100, 0x62, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000f40)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)=[r3, r1, r4, r1, r1, r3, r1, r3, r3], &(0x7f0000000fc0)=[{0x2, 0x3, 0xd, 0x6}, {0x3, 0x3, 0x1, 0x3}, {0x5, 0x1, 0x6, 0xb}, {0x3, 0x3, 0x9, 0x3}, {0x5, 0x2, 0x7, 0xc}, {0x0, 0x4, 0x4, 0x3}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x7d49}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001100)=@o_path={&(0x7f0000000e00)='./file0\x00', r9, 0x4000, r8}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@getchain={0x3c, 0x66, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x10, 0xfff2}, {0xd, 0xffe0}, {0xf, 0xc}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0xce}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = pidfd_getfd(r4, r9, 0x0) ioctl$PPPIOCGDEBUG(r10, 0x80047441, &(0x7f0000001240)) r11 = syz_open_dev$I2C(&(0x7f0000001280), 0x9, 0x8000) ioctl$I2C_SMBUS(r11, 0x720, &(0x7f0000001300)={0x1, 0x7, 0x3, &(0x7f00000012c0)={0xa, "787a28c1a072f73e2d0a0a2c0cb752563fee91416392930d604fb04eda788b0849"}}) 17:03:50 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00', 0x0}) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', r8, 0x4000, r1}, 0x18) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000d80)={'\x00', 0xfb, 0x0, 0x3}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xf, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x522, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x1f000000, 0x14, &(0x7f0000000f00)=""/20, 0x41100, 0x62, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000f40)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)=[r3, r1, r4, r1, r1, r3, r1, r3, r3], &(0x7f0000000fc0)=[{0x2, 0x3, 0xd, 0x6}, {0x3, 0x3, 0x1, 0x3}, {0x5, 0x1, 0x6, 0xb}, {0x3, 0x3, 0x9, 0x3}, {0x5, 0x2, 0x7, 0xc}, {0x0, 0x4, 0x4, 0x3}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x7d49}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001100)=@o_path={&(0x7f0000000e00)='./file0\x00', r9, 0x4000, r8}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@getchain={0x3c, 0x66, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x10, 0xfff2}, {0xd, 0xffe0}, {0xf, 0xc}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0xce}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = pidfd_getfd(r4, r9, 0x0) ioctl$PPPIOCGDEBUG(r10, 0x80047441, &(0x7f0000001240)) r11 = syz_open_dev$I2C(&(0x7f0000001280), 0x9, 0x8000) ioctl$I2C_SMBUS(r11, 0x720, &(0x7f0000001300)={0x1, 0x7, 0x3, &(0x7f00000012c0)={0xa, "787a28c1a072f73e2d0a0a2c0cb752563fee91416392930d604fb04eda788b0849"}}) 17:03:50 executing program 3: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) 17:03:50 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) waitid$P_PIDFD(0x3, r1, &(0x7f00000006c0), 0x4, &(0x7f0000000740)) 17:03:50 executing program 3: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00', 0x0}) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', r8, 0x4000, r1}, 0x18) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000d80)={'\x00', 0xfb, 0x0, 0x3}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xf, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x522, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x1f000000, 0x14, &(0x7f0000000f00)=""/20, 0x41100, 0x62, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000f40)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)=[r3, r1, r4, r1, r1, r3, r1, r3, r3], &(0x7f0000000fc0)=[{0x2, 0x3, 0xd, 0x6}, {0x3, 0x3, 0x1, 0x3}, {0x5, 0x1, 0x6, 0xb}, {0x3, 0x3, 0x9, 0x3}, {0x5, 0x2, 0x7, 0xc}, {0x0, 0x4, 0x4, 0x3}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x7d49}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001100)=@o_path={&(0x7f0000000e00)='./file0\x00', r9, 0x4000, r8}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@getchain={0x3c, 0x66, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x10, 0xfff2}, {0xd, 0xffe0}, {0xf, 0xc}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0xce}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = pidfd_getfd(r4, r9, 0x0) ioctl$PPPIOCGDEBUG(r10, 0x80047441, &(0x7f0000001240)) r11 = syz_open_dev$I2C(&(0x7f0000001280), 0x9, 0x8000) ioctl$I2C_SMBUS(r11, 0x720, &(0x7f0000001300)={0x1, 0x7, 0x3, &(0x7f00000012c0)={0xa, "787a28c1a072f73e2d0a0a2c0cb752563fee91416392930d604fb04eda788b0849"}}) 17:03:50 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000680)={&(0x7f0000000640)=[{0x9, 0x6400, 0x34, &(0x7f0000000600)="9b996f7564920da4e3e77d864e6932e6b1ad7baa86cb071d426e7507310730ff1a7492462019b8a7ea9ac6c206008ed9568acc69"}], 0x1}) 17:03:50 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x0, 0x3, 0x6, &(0x7f00000002c0)) 17:03:50 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) (fail_nth: 1) 17:03:50 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) (fail_nth: 1) 17:03:50 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00', 0x0}) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', r8, 0x4000, r1}, 0x18) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000d80)={'\x00', 0xfb, 0x0, 0x3}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xf, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x522, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x1f000000, 0x14, &(0x7f0000000f00)=""/20, 0x41100, 0x62, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000f40)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)=[r3, r1, r4, r1, r1, r3, r1, r3, r3], &(0x7f0000000fc0)=[{0x2, 0x3, 0xd, 0x6}, {0x3, 0x3, 0x1, 0x3}, {0x5, 0x1, 0x6, 0xb}, {0x3, 0x3, 0x9, 0x3}, {0x5, 0x2, 0x7, 0xc}, {0x0, 0x4, 0x4, 0x3}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x7d49}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001100)=@o_path={&(0x7f0000000e00)='./file0\x00', r9, 0x4000, r8}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@getchain={0x3c, 0x66, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x10, 0xfff2}, {0xd, 0xffe0}, {0xf, 0xc}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0xce}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = pidfd_getfd(r4, r9, 0x0) ioctl$PPPIOCGDEBUG(r10, 0x80047441, &(0x7f0000001240)) r11 = syz_open_dev$I2C(&(0x7f0000001280), 0x9, 0x8000) ioctl$I2C_SMBUS(r11, 0x720, &(0x7f0000001300)={0x1, 0x7, 0x3, &(0x7f00000012c0)={0xa, "787a28c1a072f73e2d0a0a2c0cb752563fee91416392930d604fb04eda788b0849"}}) 17:03:50 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) r5 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={r5, r2}) [ 542.144520][T32487] FAULT_INJECTION: forcing a failure. [ 542.144520][T32487] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 542.169833][T32489] FAULT_INJECTION: forcing a failure. [ 542.169833][T32489] name failslab, interval 1, probability 0, space 0, times 1 [ 542.190722][T32489] CPU: 1 PID: 32489 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-14651-gd2f51b3516da #0 [ 542.200857][T32489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 542.210941][T32489] Call Trace: [ 542.214246][T32489] [ 542.217206][T32489] dump_stack_lvl+0x1e7/0x2d0 [ 542.222072][T32489] ? nf_tcp_handle_invalid+0x650/0x650 [ 542.227573][T32489] ? panic+0x850/0x850 [ 542.231686][T32489] ? __might_sleep+0xc0/0xc0 [ 542.236369][T32489] should_fail_ex+0x3aa/0x4e0 [ 542.241125][T32489] ? getname_flags+0xbc/0x4f0 [ 542.245863][T32489] should_failslab+0x9/0x20 [ 542.250427][T32489] kmem_cache_alloc+0x6d/0x350 [ 542.255213][T32489] ? vfs_write+0x906/0xb20 [ 542.259663][T32489] getname_flags+0xbc/0x4f0 [ 542.264169][T32489] ? build_open_flags+0x448/0x5b0 [ 542.269197][T32489] do_sys_openat2+0xd2/0x1d0 [ 542.273781][T32489] ? mutex_unlock+0x10/0x10 [ 542.278362][T32489] ? do_sys_open+0x230/0x230 [ 542.283063][T32489] __x64_sys_openat+0x247/0x290 [ 542.287935][T32489] ? __ia32_sys_open+0x270/0x270 [ 542.292884][T32489] ? syscall_enter_from_user_mode+0x32/0x230 [ 542.298873][T32489] ? lockdep_hardirqs_on+0x98/0x140 [ 542.304082][T32489] ? syscall_enter_from_user_mode+0x32/0x230 [ 542.310064][T32489] do_syscall_64+0x44/0x110 [ 542.314564][T32489] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 542.320556][T32489] RIP: 0033:0x7f7f92e7cae9 [ 542.324968][T32489] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 542.344595][T32489] RSP: 002b:00007f7f93bda0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 542.353026][T32489] RAX: ffffffffffffffda RBX: 00007f7f92f9bf80 RCX: 00007f7f92e7cae9 [ 542.361356][T32489] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffff9c [ 542.369334][T32489] RBP: 00007f7f93bda120 R08: 0000000000000000 R09: 0000000000000000 [ 542.377304][T32489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.385270][T32489] R13: 000000000000000b R14: 00007f7f92f9bf80 R15: 00007ffdd2aa5dc8 [ 542.393249][T32489] [ 542.402016][T32487] CPU: 0 PID: 32487 Comm: syz-executor.1 Not tainted 6.6.0-syzkaller-14651-gd2f51b3516da #0 [ 542.412145][T32487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 542.422229][T32487] Call Trace: [ 542.425524][T32487] [ 542.428476][T32487] dump_stack_lvl+0x1e7/0x2d0 [ 542.433196][T32487] ? nf_tcp_handle_invalid+0x650/0x650 [ 542.439408][T32487] ? panic+0x850/0x850 [ 542.439468][T32487] ? check_path+0x21/0x40 17:03:50 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x0, 0x3, 0x6, &(0x7f00000002c0)) 17:03:50 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) (fail_nth: 1) 17:03:50 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) socket$rxrpc(0x21, 0x2, 0x2) 17:03:50 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) (fail_nth: 2) 17:03:50 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) (fail_nth: 2) 17:03:50 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) (fail_nth: 3) [ 542.439526][T32487] ? check_noncircular+0x205/0x4a0 [ 542.439554][T32487] should_fail_ex+0x3aa/0x4e0 [ 542.439584][T32487] prepare_alloc_pages+0x1d9/0x5b0 [ 542.439613][T32487] __alloc_pages+0x165/0x670 17:03:51 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x6, &(0x7f00000002c0)) 17:03:51 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) (fail_nth: 2) 17:03:51 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000580)=0x3) [ 542.439636][T32487] ? zone_statistics+0x170/0x170 [ 542.439661][T32487] ? __lock_acquire+0x1267/0x7f70 17:03:51 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) (fail_nth: 4) [ 542.439691][T32487] ? policy_nodemask+0x1ec/0x720 [ 542.439726][T32487] alloc_pages_mpol+0x3de/0x640 [ 542.439756][T32487] ? __lock_acquire+0x1267/0x7f70 [ 542.439777][T32487] ? mempolicy_in_oom_domain+0x130/0x130 [ 542.439809][T32487] ? alloc_pages+0xee/0x170 [ 542.439836][T32487] __pmd_alloc+0x91/0x620 [ 542.439858][T32487] ? __pud_alloc+0x480/0x480 [ 542.439875][T32487] ? hugepage_vma_check+0x28c/0x6d0 [ 542.439904][T32487] handle_mm_fault+0xde0/0x6650 [ 542.439936][T32487] ? handle_mm_fault+0x11d/0x6650 [ 542.439968][T32487] ? numa_migrate_prep+0x260/0x260 [ 542.440002][T32487] ? mt_find+0x623/0x7c0 [ 542.440030][T32487] ? mt_find+0x271/0x7c0 [ 542.440051][T32487] ? mtree_destroy+0x30/0x30 [ 542.440105][T32487] ? lock_mm_and_find_vma+0x9c/0x2d0 [ 542.440128][T32487] exc_page_fault+0x2ac/0x860 [ 542.440158][T32487] asm_exc_page_fault+0x26/0x30 [ 542.440180][T32487] RIP: 0010:__put_user_4+0x11/0x20 [ 542.440204][T32487] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 542.440219][T32487] RSP: 0018:ffffc90004c97df8 EFLAGS: 00050206 [ 542.440238][T32487] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 00000000200002c0 [ 542.440251][T32487] RDX: 0000000000000000 RSI: ffffffff8b6ac0c0 RDI: ffffffff8bbd60c0 [ 542.440264][T32487] RBP: ffffc90004c97ef0 R08: ffffffff8f006aef R09: 1ffffffff1e00d5d [ 542.440278][T32487] R10: dffffc0000000000 R11: fffffbfff1e00d5e R12: 0000000000000000 [ 542.440290][T32487] R13: 1ffff92000992fc8 R14: 1ffff92000992fd0 R15: 00000000200002c0 [ 542.440322][T32487] __sys_socketpair+0x186/0x710 [ 542.440380][T32487] ? __ia32_sys_socket+0x90/0x90 [ 542.440404][T32487] ? print_irqtrace_events+0x220/0x220 [ 542.440431][T32487] ? syscall_enter_from_user_mode+0x32/0x230 [ 542.440457][T32487] __x64_sys_socketpair+0x9b/0xb0 [ 542.440483][T32487] do_syscall_64+0x44/0x110 [ 542.440504][T32487] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 542.440525][T32487] RIP: 0033:0x7fe152c7cae9 [ 542.440541][T32487] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 542.440555][T32487] RSP: 002b:00007fe1539f90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 542.440575][T32487] RAX: ffffffffffffffda RBX: 00007fe152d9bf80 RCX: 00007fe152c7cae9 [ 542.440589][T32487] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.440600][T32487] RBP: 00007fe1539f9120 R08: 0000000000000000 R09: 0000000000000000 [ 542.440612][T32487] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 542.440624][T32487] R13: 000000000000000b R14: 00007fe152d9bf80 R15: 00007ffe2f315738 [ 542.440660][T32487] [ 542.500789][T32497] FAULT_INJECTION: forcing a failure. [ 542.500789][T32497] name failslab, interval 1, probability 0, space 0, times 0 [ 542.500820][T32497] CPU: 0 PID: 32497 Comm: syz-executor.1 Not tainted 6.6.0-syzkaller-14651-gd2f51b3516da #0 [ 542.500841][T32497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 542.500851][T32497] Call Trace: [ 542.500859][T32497] [ 542.500867][T32497] dump_stack_lvl+0x1e7/0x2d0 [ 542.500899][T32497] ? nf_tcp_handle_invalid+0x650/0x650 [ 542.500920][T32497] ? panic+0x850/0x850 [ 542.500948][T32497] ? alloc_pages_mpol+0x40c/0x640 [ 542.500977][T32497] should_fail_ex+0x3aa/0x4e0 [ 542.501007][T32497] ? __pmd_alloc+0x110/0x620 [ 542.501024][T32497] should_failslab+0x9/0x20 [ 542.501048][T32497] kmem_cache_alloc+0x6d/0x350 [ 542.501075][T32497] __pmd_alloc+0x110/0x620 [ 542.501097][T32497] ? __pud_alloc+0x480/0x480 [ 542.501114][T32497] ? hugepage_vma_check+0x28c/0x6d0 [ 542.501140][T32497] handle_mm_fault+0xde0/0x6650 [ 542.501171][T32497] ? handle_mm_fault+0x11d/0x6650 [ 542.501203][T32497] ? numa_migrate_prep+0x260/0x260 [ 542.501237][T32497] ? mt_find+0x623/0x7c0 [ 542.501257][T32497] ? mt_find+0x271/0x7c0 [ 542.501278][T32497] ? mtree_destroy+0x30/0x30 [ 542.501329][T32497] ? lock_mm_and_find_vma+0x9c/0x2d0 [ 542.501351][T32497] exc_page_fault+0x2ac/0x860 [ 542.501379][T32497] asm_exc_page_fault+0x26/0x30 [ 542.501401][T32497] RIP: 0010:__put_user_4+0x11/0x20 [ 542.501424][T32497] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 542.501438][T32497] RSP: 0018:ffffc9000492fdf8 EFLAGS: 00050206 [ 542.501457][T32497] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 00000000200002c0 [ 542.501469][T32497] RDX: 0000000000000000 RSI: ffffffff8b6ac0c0 RDI: ffffffff8bbd60c0 [ 542.501481][T32497] RBP: ffffc9000492fef0 R08: ffffffff8f006aef R09: 1ffffffff1e00d5d [ 542.501494][T32497] R10: dffffc0000000000 R11: fffffbfff1e00d5e R12: 0000000000000000 [ 542.501506][T32497] R13: 1ffff92000925fc8 R14: 1ffff92000925fd0 R15: 00000000200002c0 [ 542.501536][T32497] __sys_socketpair+0x186/0x710 [ 542.501566][T32497] ? __ia32_sys_socket+0x90/0x90 [ 542.501590][T32497] ? print_irqtrace_events+0x220/0x220 [ 542.501615][T32497] ? syscall_enter_from_user_mode+0x32/0x230 [ 542.501652][T32497] __x64_sys_socketpair+0x9b/0xb0 [ 542.501679][T32497] do_syscall_64+0x44/0x110 [ 542.501700][T32497] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 542.501721][T32497] RIP: 0033:0x7fe152c7cae9 [ 542.501736][T32497] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 542.501750][T32497] RSP: 002b:00007fe1539f90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 542.501769][T32497] RAX: ffffffffffffffda RBX: 00007fe152d9bf80 RCX: 00007fe152c7cae9 [ 542.501781][T32497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.501792][T32497] RBP: 00007fe1539f9120 R08: 0000000000000000 R09: 0000000000000000 [ 542.501803][T32497] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 542.501814][T32497] R13: 000000000000000b R14: 00007fe152d9bf80 R15: 00007ffe2f315738 [ 542.501840][T32497] [ 542.589052][T32504] FAULT_INJECTION: forcing a failure. [ 542.589052][T32504] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 542.589081][T32504] CPU: 1 PID: 32504 Comm: syz-executor.3 Not tainted 6.6.0-syzkaller-14651-gd2f51b3516da #0 [ 542.589100][T32504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 542.589111][T32504] Call Trace: [ 542.589119][T32504] [ 542.589137][T32504] dump_stack_lvl+0x1e7/0x2d0 [ 542.589168][T32504] ? nf_tcp_handle_invalid+0x650/0x650 [ 542.589190][T32504] ? panic+0x850/0x850 [ 542.589214][T32504] ? __lock_acquire+0x1267/0x7f70 [ 542.589245][T32504] should_fail_ex+0x3aa/0x4e0 [ 542.589276][T32504] prepare_alloc_pages+0x1d9/0x5b0 [ 542.589304][T32504] __alloc_pages+0x165/0x670 [ 542.589327][T32504] ? zone_statistics+0x170/0x170 [ 542.589343][T32504] ? __lock_acquire+0x1267/0x7f70 [ 542.589373][T32504] ? policy_nodemask+0x1ec/0x720 [ 542.589404][T32504] alloc_pages_mpol+0x3de/0x640 [ 542.589431][T32504] ? __lock_acquire+0x1267/0x7f70 [ 542.589450][T32504] ? mempolicy_in_oom_domain+0x130/0x130 [ 542.589480][T32504] ? alloc_pages+0xee/0x170 [ 542.589506][T32504] __pmd_alloc+0x91/0x620 [ 542.589528][T32504] ? __pud_alloc+0x480/0x480 [ 542.589545][T32504] ? hugepage_vma_check+0x28c/0x6d0 [ 542.589571][T32504] handle_mm_fault+0xde0/0x6650 [ 542.589602][T32504] ? handle_mm_fault+0x11d/0x6650 [ 542.589632][T32504] ? numa_migrate_prep+0x260/0x260 [ 542.589662][T32504] ? mt_find+0x623/0x7c0 [ 542.589683][T32504] ? mt_find+0x271/0x7c0 [ 542.589705][T32504] ? mtree_destroy+0x30/0x30 [ 542.589757][T32504] ? lock_mm_and_find_vma+0x9c/0x2d0 [ 542.589778][T32504] exc_page_fault+0x2ac/0x860 [ 542.589807][T32504] asm_exc_page_fault+0x26/0x30 [ 542.589829][T32504] RIP: 0010:__put_user_4+0x11/0x20 [ 542.589853][T32504] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 542.589868][T32504] RSP: 0018:ffffc90004d97df8 EFLAGS: 00050206 [ 542.589886][T32504] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 00000000200002c0 [ 542.589899][T32504] RDX: 0000000000000000 RSI: ffffffff8b6ac0c0 RDI: ffffffff8bbd60c0 [ 542.589911][T32504] RBP: ffffc90004d97ef0 R08: ffffffff8f006aef R09: 1ffffffff1e00d5d [ 542.589923][T32504] R10: dffffc0000000000 R11: fffffbfff1e00d5e R12: 0000000000000000 [ 542.589935][T32504] R13: 1ffff920009b2fc8 R14: 1ffff920009b2fd0 R15: 00000000200002c0 [ 542.589965][T32504] __sys_socketpair+0x186/0x710 [ 542.589996][T32504] ? __ia32_sys_socket+0x90/0x90 [ 542.590019][T32504] ? print_irqtrace_events+0x220/0x220 [ 542.590044][T32504] ? syscall_enter_from_user_mode+0x32/0x230 [ 542.590071][T32504] __x64_sys_socketpair+0x9b/0xb0 [ 542.590096][T32504] do_syscall_64+0x44/0x110 [ 542.590114][T32504] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 542.590142][T32504] RIP: 0033:0x7f726307cae9 [ 542.590158][T32504] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 542.590173][T32504] RSP: 002b:00007f7263de30c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 542.590193][T32504] RAX: ffffffffffffffda RBX: 00007f726319bf80 RCX: 00007f726307cae9 [ 542.590207][T32504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.590219][T32504] RBP: 00007f7263de3120 R08: 0000000000000000 R09: 0000000000000000 [ 542.590231][T32504] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 542.590244][T32504] R13: 000000000000000b R14: 00007f726319bf80 R15: 00007ffd0cbf6ec8 [ 542.590272][T32504] [ 542.672142][T32509] FAULT_INJECTION: forcing a failure. [ 542.672142][T32509] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 542.672173][T32509] CPU: 1 PID: 32509 Comm: syz-executor.1 Not tainted 6.6.0-syzkaller-14651-gd2f51b3516da #0 [ 542.672194][T32509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 542.672205][T32509] Call Trace: [ 542.672213][T32509] [ 542.672221][T32509] dump_stack_lvl+0x1e7/0x2d0 [ 542.672250][T32509] ? nf_tcp_handle_invalid+0x650/0x650 [ 542.672272][T32509] ? panic+0x850/0x850 [ 542.672308][T32509] should_fail_ex+0x3aa/0x4e0 [ 542.672340][T32509] prepare_alloc_pages+0x1d9/0x5b0 [ 542.672369][T32509] __alloc_pages+0x165/0x670 [ 542.672395][T32509] ? zone_statistics+0x170/0x170 [ 542.672423][T32509] ? policy_nodemask+0x1ec/0x720 [ 542.672455][T32509] alloc_pages_mpol+0x3de/0x640 [ 542.672486][T32509] ? mempolicy_in_oom_domain+0x130/0x130 [ 542.672514][T32509] ? __pmd_alloc+0x50b/0x620 [ 542.672531][T32509] ? alloc_pages+0xee/0x170 [ 542.672558][T32509] pte_alloc_one+0x88/0x5c0 [ 542.672605][T32509] ? pfn_modify_allowed+0x2f0/0x2f0 [ 542.672628][T32509] ? do_raw_spin_unlock+0x13b/0x8b0 [ 542.672661][T32509] __pte_alloc+0x79/0x3a0 [ 542.672688][T32509] ? pmd_install+0x220/0x220 [ 542.672711][T32509] ? hugepage_vma_check+0x28c/0x6d0 [ 542.672740][T32509] handle_mm_fault+0x5302/0x6650 [ 542.672772][T32509] ? handle_mm_fault+0x11d/0x6650 [ 542.672804][T32509] ? numa_migrate_prep+0x260/0x260 [ 542.672838][T32509] ? mt_find+0x623/0x7c0 [ 542.672858][T32509] ? mt_find+0x271/0x7c0 [ 542.672880][T32509] ? mtree_destroy+0x30/0x30 [ 542.672932][T32509] ? lock_mm_and_find_vma+0x9c/0x2d0 [ 542.672954][T32509] exc_page_fault+0x2ac/0x860 [ 542.672984][T32509] asm_exc_page_fault+0x26/0x30 [ 542.673005][T32509] RIP: 0010:__put_user_4+0x11/0x20 [ 542.673028][T32509] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 542.673043][T32509] RSP: 0018:ffffc90004b1fdf8 EFLAGS: 00050206 [ 542.673062][T32509] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 00000000200002c0 [ 542.673074][T32509] RDX: 0000000000000000 RSI: ffffffff8b6ac0c0 RDI: ffffffff8bbd60c0 [ 542.673087][T32509] RBP: ffffc90004b1fef0 R08: ffffffff8f006aef R09: 1ffffffff1e00d5d [ 542.673101][T32509] R10: dffffc0000000000 R11: fffffbfff1e00d5e R12: 0000000000000000 [ 542.673114][T32509] R13: 1ffff92000963fc8 R14: 1ffff92000963fd0 R15: 00000000200002c0 [ 542.673155][T32509] __sys_socketpair+0x186/0x710 [ 542.673187][T32509] ? __ia32_sys_socket+0x90/0x90 [ 542.673212][T32509] ? print_irqtrace_events+0x220/0x220 [ 542.673238][T32509] ? syscall_enter_from_user_mode+0x32/0x230 [ 542.673266][T32509] __x64_sys_socketpair+0x9b/0xb0 [ 542.673291][T32509] do_syscall_64+0x44/0x110 [ 542.673313][T32509] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 542.673333][T32509] RIP: 0033:0x7fe152c7cae9 [ 542.673349][T32509] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 542.673363][T32509] RSP: 002b:00007fe1539f90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 542.673383][T32509] RAX: ffffffffffffffda RBX: 00007fe152d9bf80 RCX: 00007fe152c7cae9 [ 542.673397][T32509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.673408][T32509] RBP: 00007fe1539f9120 R08: 0000000000000000 R09: 0000000000000000 [ 542.673420][T32509] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 542.673432][T32509] R13: 000000000000000b R14: 00007fe152d9bf80 R15: 00007ffe2f315738 [ 542.673460][T32509] [ 542.735363][T32511] FAULT_INJECTION: forcing a failure. [ 542.735363][T32511] name failslab, interval 1, probability 0, space 0, times 0 [ 542.735394][T32511] CPU: 1 PID: 32511 Comm: syz-executor.3 Not tainted 6.6.0-syzkaller-14651-gd2f51b3516da #0 [ 542.735416][T32511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 542.735427][T32511] Call Trace: [ 542.735435][T32511] [ 542.735444][T32511] dump_stack_lvl+0x1e7/0x2d0 [ 542.735473][T32511] ? nf_tcp_handle_invalid+0x650/0x650 [ 542.735495][T32511] ? panic+0x850/0x850 [ 542.735524][T32511] ? alloc_pages_mpol+0x40c/0x640 [ 542.735552][T32511] should_fail_ex+0x3aa/0x4e0 [ 542.735582][T32511] ? __pmd_alloc+0x110/0x620 [ 542.735600][T32511] should_failslab+0x9/0x20 [ 542.735623][T32511] kmem_cache_alloc+0x6d/0x350 [ 542.735649][T32511] __pmd_alloc+0x110/0x620 [ 542.735671][T32511] ? __pud_alloc+0x480/0x480 [ 542.735687][T32511] ? hugepage_vma_check+0x28c/0x6d0 [ 542.735712][T32511] handle_mm_fault+0xde0/0x6650 [ 542.735742][T32511] ? handle_mm_fault+0x11d/0x6650 [ 542.735771][T32511] ? numa_migrate_prep+0x260/0x260 [ 542.735804][T32511] ? mt_find+0x623/0x7c0 [ 542.735824][T32511] ? mt_find+0x271/0x7c0 [ 542.735843][T32511] ? mtree_destroy+0x30/0x30 [ 542.735891][T32511] ? lock_mm_and_find_vma+0x9c/0x2d0 [ 542.735910][T32511] exc_page_fault+0x2ac/0x860 [ 542.735936][T32511] asm_exc_page_fault+0x26/0x30 [ 542.735956][T32511] RIP: 0010:__put_user_4+0x11/0x20 [ 542.735976][T32511] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 542.735992][T32511] RSP: 0018:ffffc90004da7df8 EFLAGS: 00050206 [ 542.736010][T32511] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 00000000200002c0 [ 542.736021][T32511] RDX: 0000000000000000 RSI: ffffffff8b6ac0c0 RDI: ffffffff8bbd60c0 [ 542.736033][T32511] RBP: ffffc90004da7ef0 R08: ffffffff8f006aef R09: 1ffffffff1e00d5d [ 542.736046][T32511] R10: dffffc0000000000 R11: fffffbfff1e00d5e R12: 0000000000000000 [ 542.736057][T32511] R13: 1ffff920009b4fc8 R14: 1ffff920009b4fd0 R15: 00000000200002c0 [ 542.736086][T32511] __sys_socketpair+0x186/0x710 [ 542.736125][T32511] ? __ia32_sys_socket+0x90/0x90 [ 542.736149][T32511] ? print_irqtrace_events+0x220/0x220 [ 542.736176][T32511] ? syscall_enter_from_user_mode+0x32/0x230 [ 542.736205][T32511] __x64_sys_socketpair+0x9b/0xb0 [ 542.736231][T32511] do_syscall_64+0x44/0x110 [ 542.736252][T32511] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 542.736273][T32511] RIP: 0033:0x7f726307cae9 [ 542.736289][T32511] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 542.736304][T32511] RSP: 002b:00007f7263de30c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 542.736324][T32511] RAX: ffffffffffffffda RBX: 00007f726319bf80 RCX: 00007f726307cae9 [ 542.736338][T32511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.736349][T32511] RBP: 00007f7263de3120 R08: 0000000000000000 R09: 0000000000000000 [ 542.736362][T32511] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 542.736374][T32511] R13: 000000000000000b R14: 00007f726319bf80 R15: 00007ffd0cbf6ec8 [ 542.736406][T32511] [ 542.739646][T32516] FAULT_INJECTION: forcing a failure. [ 542.739646][T32516] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 542.739672][T32516] CPU: 1 PID: 32516 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-14651-gd2f51b3516da #0 [ 542.739694][T32516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 542.739705][T32516] Call Trace: [ 542.739712][T32516] [ 542.739719][T32516] dump_stack_lvl+0x1e7/0x2d0 [ 542.739744][T32516] ? nf_tcp_handle_invalid+0x650/0x650 [ 542.739761][T32516] ? panic+0x850/0x850 [ 542.739781][T32516] ? __lock_acquire+0x7f70/0x7f70 [ 542.739804][T32516] should_fail_ex+0x3aa/0x4e0 [ 542.739827][T32516] strncpy_from_user+0x36/0x2e0 [ 542.739841][T32516] ? getname_flags+0xbc/0x4f0 [ 542.739862][T32516] getname_flags+0xf9/0x4f0 [ 542.739883][T32516] do_sys_openat2+0xd2/0x1d0 [ 542.739898][T32516] ? mutex_unlock+0x10/0x10 [ 542.739915][T32516] ? do_sys_open+0x230/0x230 [ 542.739939][T32516] __x64_sys_openat+0x247/0x290 [ 542.739956][T32516] ? __ia32_sys_open+0x270/0x270 [ 542.739973][T32516] ? syscall_enter_from_user_mode+0x32/0x230 [ 542.739991][T32516] ? lockdep_hardirqs_on+0x98/0x140 [ 542.740009][T32516] ? syscall_enter_from_user_mode+0x32/0x230 [ 542.740028][T32516] do_syscall_64+0x44/0x110 [ 542.740043][T32516] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 542.740061][T32516] RIP: 0033:0x7f7f92e7cae9 [ 542.740074][T32516] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 542.740085][T32516] RSP: 002b:00007f7f93bda0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 542.740102][T32516] RAX: ffffffffffffffda RBX: 00007f7f92f9bf80 RCX: 00007f7f92e7cae9 [ 542.740119][T32516] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffff9c [ 542.740130][T32516] RBP: 00007f7f93bda120 R08: 0000000000000000 R09: 0000000000000000 [ 542.740140][T32516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.740150][T32516] R13: 000000000000000b R14: 00007f7f92f9bf80 R15: 00007ffdd2aa5dc8 [ 542.740170][T32516] [ 542.778183][T32518] FAULT_INJECTION: forcing a failure. [ 542.778183][T32518] name failslab, interval 1, probability 0, space 0, times 0 [ 542.778214][T32518] CPU: 0 PID: 32518 Comm: syz-executor.1 Not tainted 6.6.0-syzkaller-14651-gd2f51b3516da #0 [ 542.778234][T32518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 542.778245][T32518] Call Trace: [ 542.778253][T32518] [ 542.778261][T32518] dump_stack_lvl+0x1e7/0x2d0 [ 542.778292][T32518] ? nf_tcp_handle_invalid+0x650/0x650 [ 542.778314][T32518] ? panic+0x850/0x850 [ 542.778339][T32518] ? __might_sleep+0xc0/0xc0 [ 542.778370][T32518] should_fail_ex+0x3aa/0x4e0 [ 542.778399][T32518] ? ptlock_alloc+0x20/0x70 [ 542.778418][T32518] should_failslab+0x9/0x20 [ 542.778442][T32518] kmem_cache_alloc+0x6d/0x350 [ 542.778474][T32518] ptlock_alloc+0x20/0x70 [ 542.778493][T32518] pte_alloc_one+0xcd/0x5c0 [ 542.778513][T32518] ? pfn_modify_allowed+0x2f0/0x2f0 [ 542.778536][T32518] ? do_raw_spin_unlock+0x13b/0x8b0 [ 542.778569][T32518] __pte_alloc+0x79/0x3a0 [ 542.778596][T32518] ? pmd_install+0x220/0x220 [ 542.778627][T32518] ? hugepage_vma_check+0x28c/0x6d0 [ 542.778657][T32518] handle_mm_fault+0x5302/0x6650 [ 542.778690][T32518] ? handle_mm_fault+0x11d/0x6650 [ 542.778723][T32518] ? numa_migrate_prep+0x260/0x260 [ 542.778757][T32518] ? mt_find+0x623/0x7c0 [ 542.778777][T32518] ? mt_find+0x271/0x7c0 [ 542.778799][T32518] ? mtree_destroy+0x30/0x30 [ 542.778850][T32518] ? lock_mm_and_find_vma+0x9c/0x2d0 [ 542.778872][T32518] exc_page_fault+0x2ac/0x860 [ 542.778902][T32518] asm_exc_page_fault+0x26/0x30 [ 542.778924][T32518] RIP: 0010:__put_user_4+0x11/0x20 [ 542.778947][T32518] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 542.778961][T32518] RSP: 0018:ffffc90004d5fdf8 EFLAGS: 00050206 [ 542.778980][T32518] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 00000000200002c0 [ 542.778993][T32518] RDX: 0000000000000000 RSI: ffffffff8b6ac0c0 RDI: ffffffff8bbd60c0 [ 542.779006][T32518] RBP: ffffc90004d5fef0 R08: ffffffff8f006aef R09: 1ffffffff1e00d5d [ 542.779018][T32518] R10: dffffc0000000000 R11: fffffbfff1e00d5e R12: 0000000000000000 [ 542.779029][T32518] R13: 1ffff920009abfc8 R14: 1ffff920009abfd0 R15: 00000000200002c0 [ 542.779058][T32518] __sys_socketpair+0x186/0x710 [ 542.779089][T32518] ? __ia32_sys_socket+0x90/0x90 [ 542.779112][T32518] ? print_irqtrace_events+0x220/0x220 [ 542.779137][T32518] ? syscall_enter_from_user_mode+0x32/0x230 [ 542.779164][T32518] __x64_sys_socketpair+0x9b/0xb0 [ 542.779189][T32518] do_syscall_64+0x44/0x110 [ 542.779209][T32518] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 542.779230][T32518] RIP: 0033:0x7fe152c7cae9 [ 542.779246][T32518] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 542.779259][T32518] RSP: 002b:00007fe1539f90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 542.779280][T32518] RAX: ffffffffffffffda RBX: 00007fe152d9bf80 RCX: 00007fe152c7cae9 17:03:53 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) (fail_nth: 3) 17:03:53 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) 17:03:53 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) (fail_nth: 3) 17:03:53 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x9, 0x8) 17:03:53 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) (fail_nth: 5) [ 542.779294][T32518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.779306][T32518] RBP: 00007fe1539f9120 R08: 0000000000000000 R09: 0000000000000000 [ 542.779317][T32518] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 542.779328][T32518] R13: 000000000000000b R14: 00007fe152d9bf80 R15: 00007ffe2f315738 [ 542.779354][T32518] 17:03:53 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00', 0x0}) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', r8, 0x4000, r1}, 0x18) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000d80)={'\x00', 0xfb, 0x0, 0x3}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xf, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x522, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x1f000000, 0x14, &(0x7f0000000f00)=""/20, 0x41100, 0x62, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000f40)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)=[r3, r1, r4, r1, r1, r3, r1, r3, r3], &(0x7f0000000fc0)=[{0x2, 0x3, 0xd, 0x6}, {0x3, 0x3, 0x1, 0x3}, {0x5, 0x1, 0x6, 0xb}, {0x3, 0x3, 0x9, 0x3}, {0x5, 0x2, 0x7, 0xc}, {0x0, 0x4, 0x4, 0x3}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x7d49}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001100)=@o_path={&(0x7f0000000e00)='./file0\x00', r9, 0x4000, r8}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@getchain={0x3c, 0x66, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x10, 0xfff2}, {0xd, 0xffe0}, {0xf, 0xc}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0xce}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = pidfd_getfd(r4, r9, 0x0) ioctl$PPPIOCGDEBUG(r10, 0x80047441, &(0x7f0000001240)) r11 = syz_open_dev$I2C(&(0x7f0000001280), 0x9, 0x8000) ioctl$I2C_SMBUS(r11, 0x720, &(0x7f0000001300)={0x1, 0x7, 0x3, &(0x7f00000012c0)={0xa, "787a28c1a072f73e2d0a0a2c0cb752563fee91416392930d604fb04eda788b0849"}}) [ 545.098254][T32521] FAULT_INJECTION: forcing a failure. [ 545.098254][T32521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.127390][T32521] CPU: 0 PID: 32521 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-14651-gd2f51b3516da #0 [ 545.137530][T32521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 545.147620][T32521] Call Trace: [ 545.150927][T32521] [ 545.153893][T32521] dump_stack_lvl+0x1e7/0x2d0 [ 545.158617][T32521] ? nf_tcp_handle_invalid+0x650/0x650 [ 545.164118][T32521] ? panic+0x850/0x850 [ 545.168241][T32521] ? snprintf+0xda/0x120 [ 545.172612][T32521] should_fail_ex+0x3aa/0x4e0 [ 545.177331][T32521] _copy_to_user+0x2f/0xa0 [ 545.181965][T32521] simple_read_from_buffer+0xca/0x150 [ 545.187384][T32521] proc_fail_nth_read+0x1e9/0x250 [ 545.192472][T32521] ? proc_fault_inject_write+0x3c0/0x3c0 17:03:53 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000004c0)={'\x00', 0x0, 0x3, 0xfffffff8}) [ 545.198141][T32521] ? fsnotify_perm+0x43e/0x5a0 [ 545.202975][T32521] ? proc_fault_inject_write+0x3c0/0x3c0 [ 545.208642][T32521] vfs_read+0x289/0xb00 [ 545.212871][T32521] ? getname_flags+0x24f/0x4f0 [ 545.217666][T32521] ? __fdget_pos+0x2b0/0x340 [ 545.222286][T32521] ? kernel_read+0x1f0/0x1f0 [ 545.226914][T32521] ? __fget_files+0x3fe/0x480 [ 545.231622][T32521] ? __fget_files+0x29/0x480 [ 545.237297][T32521] ? __fdget_pos+0x2b0/0x340 [ 545.241917][T32521] ? ksys_read+0x7b/0x2c0 [ 545.246260][T32521] ksys_read+0x1a0/0x2c0 [ 545.250508][T32521] ? print_irqtrace_events+0x220/0x220 [ 545.255979][T32521] ? vfs_write+0xb20/0xb20 [ 545.260403][T32521] ? syscall_enter_from_user_mode+0x32/0x230 [ 545.266400][T32521] ? lockdep_hardirqs_on+0x98/0x140 [ 545.271602][T32521] ? syscall_enter_from_user_mode+0x32/0x230 [ 545.277756][T32521] do_syscall_64+0x44/0x110 [ 545.282254][T32521] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 545.288160][T32521] RIP: 0033:0x7f7f92e7b78c [ 545.292577][T32521] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 545.312300][T32521] RSP: 002b:00007f7f93bda0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 545.320728][T32521] RAX: ffffffffffffffda RBX: 00007f7f92f9bf80 RCX: 00007f7f92e7b78c [ 545.328778][T32521] RDX: 000000000000000f RSI: 00007f7f93bda130 RDI: 0000000000000003 [ 545.336746][T32521] RBP: 00007f7f93bda120 R08: 0000000000000000 R09: 0000000000000000 [ 545.344803][T32521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.352766][T32521] R13: 000000000000000b R14: 00007f7f92f9bf80 R15: 00007ffdd2aa5dc8 [ 545.360764][T32521] [ 545.368726][T32529] FAULT_INJECTION: forcing a failure. [ 545.368726][T32529] name failslab, interval 1, probability 0, space 0, times 0 [ 545.384538][T32527] FAULT_INJECTION: forcing a failure. [ 545.384538][T32527] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:03:53 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, 0x0) 17:03:53 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00', 0x0}) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', r8, 0x4000, r1}, 0x18) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000d80)={'\x00', 0xfb, 0x0, 0x3}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xf, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x522, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x1f000000, 0x14, &(0x7f0000000f00)=""/20, 0x41100, 0x62, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000f40)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)=[r3, r1, r4, r1, r1, r3, r1, r3, r3], &(0x7f0000000fc0)=[{0x2, 0x3, 0xd, 0x6}, {0x3, 0x3, 0x1, 0x3}, {0x5, 0x1, 0x6, 0xb}, {0x3, 0x3, 0x9, 0x3}, {0x5, 0x2, 0x7, 0xc}, {0x0, 0x4, 0x4, 0x3}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x7d49}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001100)=@o_path={&(0x7f0000000e00)='./file0\x00', r9, 0x4000, r8}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@getchain={0x3c, 0x66, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x10, 0xfff2}, {0xd, 0xffe0}, {0xf, 0xc}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0xce}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = pidfd_getfd(r4, r9, 0x0) ioctl$PPPIOCGDEBUG(r10, 0x80047441, &(0x7f0000001240)) syz_open_dev$I2C(&(0x7f0000001280), 0x9, 0x8000) [ 545.398770][T32529] CPU: 0 PID: 32529 Comm: syz-executor.1 Not tainted 6.6.0-syzkaller-14651-gd2f51b3516da #0 [ 545.408876][T32529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 545.418954][T32529] Call Trace: [ 545.422262][T32529] [ 545.433212][T32529] dump_stack_lvl+0x1e7/0x2d0 [ 545.438115][T32529] ? nf_tcp_handle_invalid+0x650/0x650 [ 545.443612][T32529] ? panic+0x850/0x850 [ 545.447737][T32529] should_fail_ex+0x3aa/0x4e0 [ 545.452461][T32529] ? __anon_vma_prepare+0x68/0x410 [ 545.457605][T32529] should_failslab+0x9/0x20 [ 545.462139][T32529] kmem_cache_alloc+0x6d/0x350 [ 545.466941][T32529] __anon_vma_prepare+0x68/0x410 [ 545.471909][T32529] handle_mm_fault+0x5468/0x6650 [ 545.476862][T32529] ? handle_mm_fault+0x11d/0x6650 [ 545.481892][T32529] ? numa_migrate_prep+0x260/0x260 [ 545.487009][T32529] ? mt_find+0x623/0x7c0 [ 545.491272][T32529] ? mt_find+0x271/0x7c0 [ 545.495514][T32529] ? mtree_destroy+0x30/0x30 [ 545.500130][T32529] ? lock_mm_and_find_vma+0x9c/0x2d0 [ 545.505417][T32529] exc_page_fault+0x2ac/0x860 [ 545.510105][T32529] asm_exc_page_fault+0x26/0x30 [ 545.514980][T32529] RIP: 0010:__put_user_4+0x11/0x20 [ 545.520092][T32529] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 545.539695][T32529] RSP: 0018:ffffc90005117df8 EFLAGS: 00050206 [ 545.545761][T32529] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 00000000200002c0 [ 545.553742][T32529] RDX: 0000000000000000 RSI: ffffffff8b6ac0c0 RDI: ffffffff8bbd60c0 [ 545.561722][T32529] RBP: ffffc90005117ef0 R08: ffffffff8f006aef R09: 1ffffffff1e00d5d [ 545.569701][T32529] R10: dffffc0000000000 R11: fffffbfff1e00d5e R12: 0000000000000000 [ 545.577689][T32529] R13: 1ffff92000a22fc8 R14: 1ffff92000a22fd0 R15: 00000000200002c0 [ 545.585760][T32529] __sys_socketpair+0x186/0x710 [ 545.590701][T32529] ? __ia32_sys_socket+0x90/0x90 [ 545.595651][T32529] ? print_irqtrace_events+0x220/0x220 [ 545.601140][T32529] ? syscall_enter_from_user_mode+0x32/0x230 [ 545.607144][T32529] __x64_sys_socketpair+0x9b/0xb0 [ 545.612194][T32529] do_syscall_64+0x44/0x110 [ 545.616698][T32529] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 545.622594][T32529] RIP: 0033:0x7fe152c7cae9 [ 545.627011][T32529] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 545.646726][T32529] RSP: 002b:00007fe1539f90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 545.655258][T32529] RAX: ffffffffffffffda RBX: 00007fe152d9bf80 RCX: 00007fe152c7cae9 [ 545.663247][T32529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 545.671221][T32529] RBP: 00007fe1539f9120 R08: 0000000000000000 R09: 0000000000000000 [ 545.679206][T32529] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 545.687269][T32529] R13: 000000000000000b R14: 00007fe152d9bf80 R15: 00007ffe2f315738 [ 545.695251][T32529] [ 545.698538][T32527] CPU: 0 PID: 32527 Comm: syz-executor.3 Not tainted 6.6.0-syzkaller-14651-gd2f51b3516da #0 [ 545.708630][T32527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 545.718711][T32527] Call Trace: [ 545.722020][T32527] [ 545.724970][T32527] dump_stack_lvl+0x1e7/0x2d0 [ 545.729682][T32527] ? nf_tcp_handle_invalid+0x650/0x650 [ 545.735188][T32527] ? panic+0x850/0x850 [ 545.739300][T32527] should_fail_ex+0x3aa/0x4e0 [ 545.744015][T32527] prepare_alloc_pages+0x1d9/0x5b0 [ 545.749221][T32527] __alloc_pages+0x165/0x670 [ 545.753813][T32527] ? zone_statistics+0x170/0x170 [ 545.758753][T32527] ? policy_nodemask+0x1ec/0x720 [ 545.763707][T32527] alloc_pages_mpol+0x3de/0x640 [ 545.768563][T32527] ? mempolicy_in_oom_domain+0x130/0x130 [ 545.774198][T32527] ? __pmd_alloc+0x50b/0x620 [ 545.778783][T32527] ? alloc_pages+0xee/0x170 [ 545.783286][T32527] pte_alloc_one+0x88/0x5c0 [ 545.787782][T32527] ? pfn_modify_allowed+0x2f0/0x2f0 [ 545.792979][T32527] ? do_raw_spin_unlock+0x13b/0x8b0 [ 545.798182][T32527] __pte_alloc+0x79/0x3a0 [ 545.802524][T32527] ? pmd_install+0x220/0x220 [ 545.807115][T32527] ? hugepage_vma_check+0x28c/0x6d0 [ 545.812331][T32527] handle_mm_fault+0x5302/0x6650 [ 545.817282][T32527] ? handle_mm_fault+0x11d/0x6650 [ 545.822313][T32527] ? numa_migrate_prep+0x260/0x260 [ 545.827514][T32527] ? mt_find+0x623/0x7c0 [ 545.831752][T32527] ? mt_find+0x271/0x7c0 [ 545.835991][T32527] ? mtree_destroy+0x30/0x30 [ 545.840598][T32527] ? lock_mm_and_find_vma+0x9c/0x2d0 [ 545.845883][T32527] exc_page_fault+0x2ac/0x860 [ 545.850565][T32527] asm_exc_page_fault+0x26/0x30 [ 545.855415][T32527] RIP: 0010:__put_user_4+0x11/0x20 [ 545.860532][T32527] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 545.880134][T32527] RSP: 0018:ffffc90004d47df8 EFLAGS: 00050206 [ 545.886200][T32527] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 00000000200002c0 [ 545.894168][T32527] RDX: 0000000000000000 RSI: ffffffff8b6ac0c0 RDI: ffffffff8bbd60c0 [ 545.902143][T32527] RBP: ffffc90004d47ef0 R08: ffffffff8f006aef R09: 1ffffffff1e00d5d [ 545.910115][T32527] R10: dffffc0000000000 R11: fffffbfff1e00d5e R12: 0000000000000000 [ 545.918182][T32527] R13: 1ffff920009a8fc8 R14: 1ffff920009a8fd0 R15: 00000000200002c0 [ 545.926164][T32527] __sys_socketpair+0x186/0x710 [ 545.931026][T32527] ? __ia32_sys_socket+0x90/0x90 [ 545.935984][T32527] ? print_irqtrace_events+0x220/0x220 [ 545.941442][T32527] ? syscall_enter_from_user_mode+0x32/0x230 [ 545.947422][T32527] __x64_sys_socketpair+0x9b/0xb0 [ 545.952449][T32527] do_syscall_64+0x44/0x110 [ 545.956986][T32527] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 545.962883][T32527] RIP: 0033:0x7f726307cae9 [ 545.967295][T32527] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 545.986898][T32527] RSP: 002b:00007f7263de30c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 17:03:54 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) [ 545.995332][T32527] RAX: ffffffffffffffda RBX: 00007f726319bf80 RCX: 00007f726307cae9 [ 546.003297][T32527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 546.011281][T32527] RBP: 00007f7263de3120 R08: 0000000000000000 R09: 0000000000000000 [ 546.019270][T32527] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 546.027251][T32527] R13: 000000000000000b R14: 00007f726319bf80 R15: 00007ffd0cbf6ec8 [ 546.035412][T32527] 17:03:54 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) 17:03:54 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x2, 0x0) 17:03:54 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @none={0x0, 0x7fff}}, 0x14) 17:03:54 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x4, 0x0) 17:03:54 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) 17:03:54 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, 0x0) 17:03:54 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @hyper}, 0x10) 17:03:54 executing program 1: socketpair(0x2, 0x0, 0x0, &(0x7f00000002c0)) 17:03:54 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x18, 0x0) 17:03:54 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x4) 17:03:54 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00', 0x0}) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', r8, 0x4000, r1}, 0x18) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000d80)={'\x00', 0xfb, 0x0, 0x3}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xf, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x522, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x1f000000, 0x14, &(0x7f0000000f00)=""/20, 0x41100, 0x62, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000f40)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)=[r3, r1, r4, r1, r1, r3, r1, r3, r3], &(0x7f0000000fc0)=[{0x2, 0x3, 0xd, 0x6}, {0x3, 0x3, 0x1, 0x3}, {0x5, 0x1, 0x6, 0xb}, {0x3, 0x3, 0x9, 0x3}, {0x5, 0x2, 0x7, 0xc}, {0x0, 0x4, 0x4, 0x3}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x7d49}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001100)=@o_path={&(0x7f0000000e00)='./file0\x00', r9, 0x4000, r8}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@getchain={0x3c, 0x66, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x10, 0xfff2}, {0xd, 0xffe0}, {0xf, 0xc}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0xce}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = pidfd_getfd(r4, r9, 0x0) ioctl$PPPIOCGDEBUG(r10, 0x80047441, &(0x7f0000001240)) 17:03:54 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, 0x0) 17:03:54 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000380)={0x6, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}]}) 17:03:54 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x1800, 0x0) 17:03:54 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) (fail_nth: 1) 17:03:54 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) socketpair(0x6, 0x3, 0x6, &(0x7f00000002c0)) 17:03:54 executing program 3: socketpair(0x2, 0x0, 0x0, &(0x7f00000002c0)) 17:03:54 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x3f00, 0x0) 17:03:55 executing program 1: socketpair(0x3, 0x0, 0x0, &(0x7f00000002c0)) [ 546.687100][T32584] FAULT_INJECTION: forcing a failure. [ 546.687100][T32584] name failslab, interval 1, probability 0, space 0, times 0 17:03:55 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x10040, 0x0) 17:03:55 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000280)={{0x6, 0x1}, {0x400, 0x3}, 0x7f, 0x1}) [ 546.797696][T32584] CPU: 1 PID: 32584 Comm: syz-executor.0 Not tainted 6.6.0-syzkaller-14651-gd2f51b3516da #0 [ 546.807847][T32584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 546.817936][T32584] Call Trace: [ 546.821241][T32584] [ 546.824203][T32584] dump_stack_lvl+0x1e7/0x2d0 [ 546.828918][T32584] ? nf_tcp_handle_invalid+0x650/0x650 [ 546.834415][T32584] ? panic+0x850/0x850 [ 546.838532][T32584] ? __might_sleep+0xc0/0xc0 [ 546.843169][T32584] should_fail_ex+0x3aa/0x4e0 17:03:55 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffff7}) [ 546.847889][T32584] should_failslab+0x9/0x20 [ 546.852430][T32584] slab_pre_alloc_hook+0x59/0x300 [ 546.857507][T32584] kmem_cache_alloc_lru+0x4e/0x2c0 [ 546.862655][T32584] ? sock_alloc_inode+0x28/0xc0 [ 546.867545][T32584] sock_alloc_inode+0x28/0xc0 [ 546.872257][T32584] ? sockfs_init_fs_context+0xb0/0xb0 [ 546.877662][T32584] new_inode_pseudo+0x65/0x1d0 [ 546.882449][T32584] __sock_create+0x123/0x910 [ 546.887051][T32584] ? __might_fault+0xa5/0x120 [ 546.891732][T32584] __sys_socketpair+0x2c5/0x710 [ 546.896591][T32584] ? __ia32_sys_socket+0x90/0x90 [ 546.901573][T32584] ? print_irqtrace_events+0x220/0x220 [ 546.907121][T32584] ? syscall_enter_from_user_mode+0x32/0x230 [ 546.913107][T32584] __x64_sys_socketpair+0x9b/0xb0 [ 546.918141][T32584] do_syscall_64+0x44/0x110 [ 546.922654][T32584] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 546.928560][T32584] RIP: 0033:0x7fee9467cae9 [ 546.933068][T32584] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 546.952764][T32584] RSP: 002b:00007fee954860c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 546.961196][T32584] RAX: ffffffffffffffda RBX: 00007fee9479bf80 RCX: 00007fee9467cae9 [ 546.969296][T32584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 546.977280][T32584] RBP: 00007fee95486120 R08: 0000000000000000 R09: 0000000000000000 [ 546.985253][T32584] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 17:03:55 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00', 0x0}) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', r8, 0x4000, r1}, 0x18) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000d80)={'\x00', 0xfb, 0x0, 0x3}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xf, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x522, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x1f000000, 0x14, &(0x7f0000000f00)=""/20, 0x41100, 0x62, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000f40)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)=[r3, r1, r4, r1, r1, r3, r1, r3, r3], &(0x7f0000000fc0)=[{0x2, 0x3, 0xd, 0x6}, {0x3, 0x3, 0x1, 0x3}, {0x5, 0x1, 0x6, 0xb}, {0x3, 0x3, 0x9, 0x3}, {0x5, 0x2, 0x7, 0xc}, {0x0, 0x4, 0x4, 0x3}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x7d49}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001100)=@o_path={&(0x7f0000000e00)='./file0\x00', r9, 0x4000, r8}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@getchain={0x3c, 0x66, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x10, 0xfff2}, {0xd, 0xffe0}, {0xf, 0xc}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0xce}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pidfd_getfd(r4, r9, 0x0) 17:03:55 executing program 1: socketpair(0x4, 0x0, 0x0, &(0x7f00000002c0)) [ 546.993304][T32584] R13: 000000000000000b R14: 00007fee9479bf80 R15: 00007ffd7de53998 [ 547.001308][T32584] 17:03:55 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x1000000, 0x0) 17:03:55 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x4000000, 0x0) [ 547.205240][T32584] socket: no more sockets 17:03:55 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) (fail_nth: 2) 17:03:55 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdc2bcda8e9b3d515}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8080) 17:03:55 executing program 3: socketpair(0x3, 0x0, 0x0, &(0x7f00000002c0)) 17:03:55 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x18000000, 0x0) 17:03:55 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00', 0x0}) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', r8, 0x4000, r1}, 0x18) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000d80)={'\x00', 0xfb, 0x0, 0x3}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xf, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x522, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x1f000000, 0x14, &(0x7f0000000f00)=""/20, 0x41100, 0x62, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000f40)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)=[r3, r1, r4, r1, r1, r3, r1, r3, r3], &(0x7f0000000fc0)=[{0x2, 0x3, 0xd, 0x6}, {0x3, 0x3, 0x1, 0x3}, {0x5, 0x1, 0x6, 0xb}, {0x3, 0x3, 0x9, 0x3}, {0x5, 0x2, 0x7, 0xc}, {0x0, 0x4, 0x4, 0x3}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x7d49}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001100)=@o_path={&(0x7f0000000e00)='./file0\x00', r9, 0x4000, r8}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@getchain={0x3c, 0x66, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x10, 0xfff2}, {0xd, 0xffe0}, {0xf, 0xc}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0xce}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 17:03:55 executing program 1: socketpair(0x5, 0x0, 0x0, &(0x7f00000002c0)) 17:03:55 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) pidfd_getfd(r1, r0, 0x0) 17:03:55 executing program 3: socketpair(0x4, 0x0, 0x0, &(0x7f00000002c0)) 17:03:55 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x3f000000, 0x0) 17:03:55 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) 17:03:55 executing program 1: socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) [ 547.448926][T32627] FAULT_INJECTION: forcing a failure. [ 547.448926][T32627] name failslab, interval 1, probability 0, space 0, times 0 [ 547.509087][T32627] CPU: 1 PID: 32627 Comm: syz-executor.0 Not tainted 6.6.0-syzkaller-14651-gd2f51b3516da #0 [ 547.519227][T32627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 547.529410][T32627] Call Trace: [ 547.532723][T32627] [ 547.535683][T32627] dump_stack_lvl+0x1e7/0x2d0 [ 547.540405][T32627] ? nf_tcp_handle_invalid+0x650/0x650 [ 547.545904][T32627] ? panic+0x850/0x850 [ 547.550015][T32627] ? __might_sleep+0xc0/0xc0 [ 547.554652][T32627] ? __asan_memset+0x23/0x40 17:03:55 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x40000100, 0x0) [ 547.559286][T32627] should_fail_ex+0x3aa/0x4e0 [ 547.564003][T32627] ? security_inode_alloc+0x28/0x120 [ 547.569318][T32627] should_failslab+0x9/0x20 [ 547.573833][T32627] kmem_cache_alloc+0x6d/0x350 [ 547.578603][T32627] security_inode_alloc+0x28/0x120 [ 547.583721][T32627] inode_init_always+0x8e3/0xc00 [ 547.588660][T32627] ? sockfs_init_fs_context+0xb0/0xb0 [ 547.594037][T32627] new_inode_pseudo+0x98/0x1d0 [ 547.598804][T32627] __sock_create+0x123/0x910 [ 547.603410][T32627] ? __might_fault+0xa5/0x120 [ 547.608089][T32627] __sys_socketpair+0x2c5/0x710 [ 547.612944][T32627] ? __ia32_sys_socket+0x90/0x90 [ 547.618055][T32627] ? print_irqtrace_events+0x220/0x220 [ 547.623518][T32627] ? syscall_enter_from_user_mode+0x32/0x230 [ 547.629503][T32627] __x64_sys_socketpair+0x9b/0xb0 [ 547.634531][T32627] do_syscall_64+0x44/0x110 [ 547.639036][T32627] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 547.644933][T32627] RIP: 0033:0x7fee9467cae9 [ 547.649351][T32627] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 547.668959][T32627] RSP: 002b:00007fee954860c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 547.677377][T32627] RAX: ffffffffffffffda RBX: 00007fee9479bf80 RCX: 00007fee9467cae9 [ 547.685520][T32627] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 547.693489][T32627] RBP: 00007fee95486120 R08: 0000000000000000 R09: 0000000000000000 [ 547.701455][T32627] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 547.709419][T32627] R13: 000000000000000b R14: 00007fee9479bf80 R15: 00007ffd7de53998 [ 547.717396][T32627] [ 547.752003][T32627] socket: no more sockets 17:03:56 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) (fail_nth: 3) 17:03:56 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) 17:03:56 executing program 1: socketpair(0x7, 0x0, 0x0, &(0x7f00000002c0)) 17:03:56 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x100000000000000, 0x0) 17:03:56 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00'}) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', r7, 0x4000, r1}, 0x18) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000d80)={'\x00', 0xfb, 0x0, 0x3}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xf, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x522, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x1f000000, 0x14, &(0x7f0000000f00)=""/20, 0x41100, 0x62, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000f40)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)=[r3, r1, r4, r1, r1, r3, r1, r3, r3], &(0x7f0000000fc0)=[{0x2, 0x3, 0xd, 0x6}, {0x3, 0x3, 0x1, 0x3}, {0x5, 0x1, 0x6, 0xb}, {0x3, 0x3, 0x9, 0x3}, {0x5, 0x2, 0x7, 0xc}, {0x0, 0x4, 0x4, 0x3}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x7d49}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001100)=@o_path={&(0x7f0000000e00)='./file0\x00', r8, 0x4000, r7}, 0x18) 17:03:56 executing program 3: socketpair(0x5, 0x0, 0x0, &(0x7f00000002c0)) 17:03:56 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) [ 547.892131][T32647] FAULT_INJECTION: forcing a failure. [ 547.892131][T32647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.931320][T32647] CPU: 1 PID: 32647 Comm: syz-executor.0 Not tainted 6.6.0-syzkaller-14651-gd2f51b3516da #0 [ 547.941452][T32647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 547.951549][T32647] Call Trace: [ 547.954863][T32647] [ 547.957919][T32647] dump_stack_lvl+0x1e7/0x2d0 [ 547.962646][T32647] ? nf_tcp_handle_invalid+0x650/0x650 [ 547.968141][T32647] ? panic+0x850/0x850 [ 547.972229][T32647] ? snprintf+0xda/0x120 [ 547.976478][T32647] should_fail_ex+0x3aa/0x4e0 [ 547.981168][T32647] _copy_to_user+0x2f/0xa0 [ 547.985594][T32647] simple_read_from_buffer+0xca/0x150 [ 547.990975][T32647] proc_fail_nth_read+0x1e9/0x250 [ 547.996004][T32647] ? proc_fault_inject_write+0x3c0/0x3c0 [ 548.001641][T32647] ? fsnotify_perm+0x43e/0x5a0 [ 548.006406][T32647] ? proc_fault_inject_write+0x3c0/0x3c0 [ 548.012043][T32647] vfs_read+0x289/0xb00 [ 548.016201][T32647] ? __fdget_pos+0x2b0/0x340 [ 548.020793][T32647] ? kernel_read+0x1f0/0x1f0 [ 548.025406][T32647] ? __fget_files+0x3fe/0x480 [ 548.030098][T32647] ? __fget_files+0x29/0x480 [ 548.034699][T32647] ? __fdget_pos+0x2b0/0x340 [ 548.039317][T32647] ? ksys_read+0x7b/0x2c0 [ 548.043654][T32647] ksys_read+0x1a0/0x2c0 [ 548.047899][T32647] ? print_irqtrace_events+0x220/0x220 [ 548.053362][T32647] ? vfs_write+0xb20/0xb20 [ 548.057786][T32647] ? syscall_enter_from_user_mode+0x32/0x230 [ 548.063768][T32647] ? lockdep_hardirqs_on+0x98/0x140 [ 548.068964][T32647] ? syscall_enter_from_user_mode+0x32/0x230 [ 548.074945][T32647] do_syscall_64+0x44/0x110 [ 548.079468][T32647] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 548.085382][T32647] RIP: 0033:0x7fee9467b78c [ 548.089806][T32647] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 548.109521][T32647] RSP: 002b:00007fee954860c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 548.117946][T32647] RAX: ffffffffffffffda RBX: 00007fee9479bf80 RCX: 00007fee9467b78c [ 548.125946][T32647] RDX: 000000000000000f RSI: 00007fee95486130 RDI: 0000000000000003 [ 548.133928][T32647] RBP: 00007fee95486120 R08: 0000000000000000 R09: 0000000000000000 [ 548.141903][T32647] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 548.149875][T32647] R13: 000000000000000b R14: 00007fee9479bf80 R15: 00007ffd7de53998 [ 548.157879][T32647] 17:03:56 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x400000000000000, 0x0) 17:03:56 executing program 1: socketpair(0x8, 0x0, 0x0, &(0x7f00000002c0)) 17:03:56 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:03:56 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) 17:03:56 executing program 1: socketpair(0x9, 0x0, 0x0, &(0x7f00000002c0)) 17:03:56 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x1800000000000000, 0x0) 17:03:56 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x1}) 17:03:56 executing program 3: socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) 17:03:56 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00'}) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', r7, 0x4000, r1}, 0x18) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000d80)={'\x00', 0xfb, 0x0, 0x3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xf, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x522, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x1f000000, 0x14, &(0x7f0000000f00)=""/20, 0x41100, 0x62, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000f40)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)=[r3, r1, r4, r1, r1, r3, r1, r3, r3], &(0x7f0000000fc0)=[{0x2, 0x3, 0xd, 0x6}, {0x3, 0x3, 0x1, 0x3}, {0x5, 0x1, 0x6, 0xb}, {0x3, 0x3, 0x9, 0x3}, {0x5, 0x2, 0x7, 0xc}, {0x0, 0x4, 0x4, 0x3}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x7d49}, 0x90) 17:03:56 executing program 5: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) 17:03:56 executing program 1: socketpair(0xa, 0x0, 0x0, &(0x7f00000002c0)) 17:03:56 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x3f00000000000000, 0x0) 17:03:56 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x2, 0x0, 0x0, &(0x7f00000002c0)) 17:03:56 executing program 3: socketpair(0x7, 0x0, 0x0, &(0x7f00000002c0)) 17:03:56 executing program 5: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x482, 0x0) 17:03:57 executing program 5: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) 17:03:57 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x4000010000000000, 0x0) 17:03:57 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f00000002c0)) 17:03:57 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x4) 17:03:57 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00'}) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', r7, 0x4000, r1}, 0x18) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000d80)={'\x00', 0xfb, 0x0, 0x3}) 17:03:57 executing program 3: socketpair(0x8, 0x0, 0x0, &(0x7f00000002c0)) 17:03:57 executing program 5: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00'}) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', r7, 0x4000, r1}, 0x18) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000d80)={'\x00', 0xfb, 0x0, 0x3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xf, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x522, 0x0, 0x0, 0x0, 0x200}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x1f000000, 0x14, &(0x7f0000000f00)=""/20, 0x41100, 0x62, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000f40)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)=[r3, r1, r4, r1, r1, r3, r1, r3, r3], &(0x7f0000000fc0)=[{0x2, 0x3, 0xd, 0x6}, {0x3, 0x3, 0x1, 0x3}, {0x5, 0x1, 0x6, 0xb}, {0x3, 0x3, 0x9, 0x3}, {0x5, 0x2, 0x7, 0xc}, {0x0, 0x4, 0x4, 0x3}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x7d49}, 0x90) 17:03:57 executing program 1: socketpair(0xc, 0x0, 0x0, &(0x7f00000002c0)) 17:03:57 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x2d, 0x0, 0x0, &(0x7f00000002c0)) 17:03:57 executing program 3: socketpair(0x9, 0x0, 0x0, &(0x7f00000002c0)) 17:03:57 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x18) 17:03:57 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x2, 0x0, &(0x7f00000002c0)) 17:03:57 executing program 1: socketpair(0xd, 0x0, 0x0, &(0x7f00000002c0)) 17:03:57 executing program 3: socketpair(0xa, 0x0, 0x0, &(0x7f00000002c0)) 17:03:57 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00'}) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', r7, 0x4000, r1}, 0x18) 17:03:57 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x1800) 17:03:57 executing program 5: socketpair(0xc, 0x0, 0x0, &(0x7f00000002c0)) 17:03:57 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x3, 0x0, &(0x7f00000002c0)) 17:03:57 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x3f00) 17:03:57 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x4, 0x0, &(0x7f00000002c0)) 17:03:57 executing program 1: socketpair(0xe, 0x0, 0x0, &(0x7f00000002c0)) 17:03:57 executing program 5: socketpair(0xb, 0x0, 0x0, &(0x7f00000002c0)) 17:03:57 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x10040) 17:03:57 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f00000002c0)) 17:03:57 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0xa, 0x0, &(0x7f00000002c0)) 17:03:57 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00'}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) 17:03:57 executing program 5: socketpair(0xb, 0x0, 0x0, &(0x7f00000002c0)) 17:03:58 executing program 1: socketpair(0xf, 0x0, 0x0, &(0x7f00000002c0)) 17:03:58 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x1000000) 17:03:58 executing program 3: socketpair(0xc, 0x0, 0x0, &(0x7f00000002c0)) 17:03:58 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x300, 0x0, &(0x7f00000002c0)) 17:03:58 executing program 5: socketpair(0xb, 0x0, 0x0, &(0x7f00000002c0)) 17:03:58 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x4000000) 17:03:58 executing program 1: socketpair(0x10, 0x0, 0x0, &(0x7f00000002c0)) 17:03:58 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) 17:03:58 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0xa00, 0x0, &(0x7f00000002c0)) 17:03:58 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c80)={'vxcan1\x00'}) 17:03:58 executing program 3: socketpair(0xd, 0x0, 0x0, &(0x7f00000002c0)) 17:03:58 executing program 1: socketpair(0x11, 0x0, 0x0, &(0x7f00000002c0)) 17:03:58 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x4000, 0x0, &(0x7f00000002c0)) 17:03:58 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x18000000) 17:03:58 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) 17:03:58 executing program 1: socketpair(0x12, 0x0, 0x0, &(0x7f00000002c0)) 17:03:58 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x1000000, 0x0, &(0x7f00000002c0)) 17:03:58 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x3f000000) 17:03:58 executing program 3: socketpair(0xe, 0x0, 0x0, &(0x7f00000002c0)) 17:03:58 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) 17:03:58 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x2000000, 0x0, &(0x7f00000002c0)) 17:03:58 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000c40), 0x4) 17:03:58 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x40000100) 17:03:58 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x3000000, 0x0, &(0x7f00000002c0)) 17:03:58 executing program 5: socketpair(0xb, 0x0, 0x0, 0x0) 17:03:58 executing program 1: socketpair(0x18, 0x0, 0x0, &(0x7f00000002c0)) 17:03:58 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x100000000000000) 17:03:58 executing program 3: socketpair(0xf, 0x0, 0x0, &(0x7f00000002c0)) 17:03:58 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x4000000, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x400000000000000) 17:03:59 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0xa000000, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x101800, 0x0) 17:03:59 executing program 1: socketpair(0x21, 0x0, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 3: socketpair(0x10, 0x0, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 5: socketpair(0xb, 0x0, 0x0, 0x0) 17:03:59 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x1800000000000000) 17:03:59 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x40000000, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 1: socketpair(0x2d, 0x0, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 3: socketpair(0x11, 0x0, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 5: socketpair(0xb, 0x0, 0x0, 0x0) 17:03:59 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0xfeffffff, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x3f00000000000000) 17:03:59 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) 17:03:59 executing program 5: socketpair(0x18, 0x0, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0xfffffffe, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 3: socketpair(0x12, 0x0, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x4000010000000000) 17:03:59 executing program 5: socketpair(0x18, 0x0, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 1: socketpair(0x41, 0x0, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x28901, 0x0) 17:03:59 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x7fee9467cae9, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 5: socketpair(0x18, 0x0, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 1: socketpair(0x48, 0x0, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r3) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ac0)={r1, r5}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b00)='./file0\x00', r2, 0x4000, r6}, 0x18) 17:03:59 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x1000000000000, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 3: socketpair(0x18, 0x0, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x28901, 0x0) 17:03:59 executing program 1: socketpair(0x4c, 0x0, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 3: socketpair(0x21, 0x0, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x28901, 0x0) 17:03:59 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x100000000000000, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 1: socketpair(0x68, 0x0, 0x0, &(0x7f00000002c0)) 17:03:59 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) 17:04:00 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 17:04:00 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r2) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000ac0)={r1, r4}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 17:04:00 executing program 1: socketpair(0x6c, 0x0, 0x0, &(0x7f00000002c0)) 17:04:00 executing program 3: socketpair(0x2d, 0x0, 0x0, &(0x7f00000002c0)) 17:04:00 executing program 1: socketpair(0x74, 0x0, 0x0, &(0x7f00000002c0)) 17:04:00 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x200000000000000, 0x0, &(0x7f00000002c0)) 17:04:00 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) 17:04:00 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) 17:04:00 executing program 1: socketpair(0x7a, 0x0, 0x0, &(0x7f00000002c0)) 17:04:00 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) 17:04:00 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x300000000000000, 0x0, &(0x7f00000002c0)) 17:04:00 executing program 3: socketpair(0x41, 0x0, 0x0, &(0x7f00000002c0)) 17:04:00 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r2) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000ac0)={r1, r4}) 17:04:00 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x400000000000000, 0x0, &(0x7f00000002c0)) 17:04:00 executing program 5: socketpair(0x18, 0x0, 0x0, 0x0) 17:04:00 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}, @common=@ttl={{0x28}, {0x0, 0x4}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 17:04:00 executing program 1: socketpair(0x300, 0x0, 0x0, &(0x7f00000002c0)) 17:04:00 executing program 3: socketpair(0x48, 0x0, 0x0, &(0x7f00000002c0)) 17:04:00 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}, @common=@ttl={{0x28}, {0x0, 0x4}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 17:04:00 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0xa00000000000000, 0x0, &(0x7f00000002c0)) 17:04:00 executing program 5: socketpair(0x18, 0x0, 0x0, 0x0) 17:04:00 executing program 1: socketpair(0x500, 0x0, 0x0, &(0x7f00000002c0)) 17:04:00 executing program 3: socketpair(0x4c, 0x0, 0x0, &(0x7f00000002c0)) 17:04:00 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}, @common=@ttl={{0x28}, {0x0, 0x4}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 17:04:00 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r2) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) 17:04:00 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x4000000000000000, 0x0, &(0x7f00000002c0)) 17:04:00 executing program 5: socketpair(0x18, 0x0, 0x0, 0x0) 17:04:00 executing program 1: socketpair(0x600, 0x0, 0x0, &(0x7f00000002c0)) 17:04:00 executing program 2: ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)=0x1) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) 17:04:00 executing program 3: socketpair(0x68, 0x0, 0x0, &(0x7f00000002c0)) 17:04:00 executing program 2: ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)=0x1) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)=0x1) (async) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) (async) 17:04:00 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0xe9ca6794ee7f0000, 0x0, &(0x7f00000002c0)) 17:04:00 executing program 1: socketpair(0x700, 0x0, 0x0, &(0x7f00000002c0)) 17:04:00 executing program 5: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}, @common=@ttl={{0x28}, {0x0, 0x4}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 17:04:00 executing program 3: socketpair(0x6c, 0x0, 0x0, &(0x7f00000002c0)) 17:04:01 executing program 2: ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)=0x1) (async) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) 17:04:01 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r2) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x262800, 0x0) 17:04:01 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0xfeffffff00000000, 0x0, &(0x7f00000002c0)) 17:04:01 executing program 5: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}, @common=@ttl={{0x28}, {0x0, 0x4}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 17:04:01 executing program 1: socketpair(0x810, 0x0, 0x0, &(0x7f00000002c0)) 17:04:01 executing program 3: socketpair(0x74, 0x0, 0x0, &(0x7f00000002c0)) 17:04:01 executing program 2: ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x9, 0x0, 0x0, 0x5}) ioctl$I2C_SLAVE_FORCE(0xffffffffffffffff, 0x706, 0xc9) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffffff, 'ipvlan0\x00', 'pim6reg1\x00', {}, {}, 0x88, 0x2, 0x10}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfff}}}, {{@ip={@empty, @empty, 0xffffff00, 0xffffffff, 'team_slave_0\x00', 'netpci0\x00', {}, {0xff}, 0x84, 0x2, 0x68}, 0x0, 0x110, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x3, 0x0, 0x2}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x0, 0x2}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7e76d344a2d1dfb9a18c7d3f3b793055349b610fdec425734af3e6ea41f9"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 17:04:01 executing program 1: socketpair(0x900, 0x0, 0x0, &(0x7f00000002c0)) 17:04:01 executing program 3: socketpair(0x7a, 0x0, 0x0, &(0x7f00000002c0)) 17:04:01 executing program 5: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}, @common=@ttl={{0x28}, {0x0, 0x4}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 17:04:01 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) 17:04:01 executing program 2: ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x9, 0x0, 0x0, 0x5}) ioctl$I2C_SLAVE_FORCE(0xffffffffffffffff, 0x706, 0xc9) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffffff, 'ipvlan0\x00', 'pim6reg1\x00', {}, {}, 0x88, 0x2, 0x10}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfff}}}, {{@ip={@empty, @empty, 0xffffff00, 0xffffffff, 'team_slave_0\x00', 'netpci0\x00', {}, {0xff}, 0x84, 0x2, 0x68}, 0x0, 0x110, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x3, 0x0, 0x2}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x0, 0x2}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7e76d344a2d1dfb9a18c7d3f3b793055349b610fdec425734af3e6ea41f9"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 17:04:01 executing program 1: socketpair(0xa00, 0x0, 0x0, &(0x7f00000002c0)) 17:04:01 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r2) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000a00)={0x38, 0x9, 0x0, 0x0, 0x4}) 17:04:01 executing program 3: socketpair(0x300, 0x0, 0x0, &(0x7f00000002c0)) 17:04:01 executing program 5: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}, @common=@ttl={{0x28}, {0x0, 0x4}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:01 executing program 2: ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x9, 0x0, 0x0, 0x5}) ioctl$I2C_SLAVE_FORCE(0xffffffffffffffff, 0x706, 0xc9) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffffff, 'ipvlan0\x00', 'pim6reg1\x00', {}, {}, 0x88, 0x2, 0x10}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfff}}}, {{@ip={@empty, @empty, 0xffffff00, 0xffffffff, 'team_slave_0\x00', 'netpci0\x00', {}, {0xff}, 0x84, 0x2, 0x68}, 0x0, 0x110, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x3, 0x0, 0x2}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x0, 0x2}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7e76d344a2d1dfb9a18c7d3f3b793055349b610fdec425734af3e6ea41f9"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 17:04:01 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x2, &(0x7f00000002c0)) 17:04:01 executing program 1: socketpair(0xb00, 0x0, 0x0, &(0x7f00000002c0)) 17:04:01 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) 17:04:01 executing program 1: socketpair(0xc00, 0x0, 0x0, &(0x7f00000002c0)) 17:04:01 executing program 5: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}, @common=@ttl={{0x28}, {0x0, 0x4}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:01 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x3, &(0x7f00000002c0)) 17:04:01 executing program 3: socketpair(0x500, 0x0, 0x0, &(0x7f00000002c0)) 17:04:01 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) 17:04:01 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000009c0)=r2) 17:04:01 executing program 5: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}, @common=@ttl={{0x28}, {0x0, 0x4}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:01 executing program 1: socketpair(0xd00, 0x0, 0x0, &(0x7f00000002c0)) 17:04:01 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x4, &(0x7f00000002c0)) 17:04:01 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) 17:04:01 executing program 3: socketpair(0x600, 0x0, 0x0, &(0x7f00000002c0)) 17:04:01 executing program 5: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}, @common=@ttl={{0x28}, {0x0, 0x4}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:01 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0xa, &(0x7f00000002c0)) 17:04:01 executing program 1: socketpair(0xe00, 0x0, 0x0, &(0x7f00000002c0)) 17:04:01 executing program 3: socketpair(0x700, 0x0, 0x0, &(0x7f00000002c0)) 17:04:01 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) 17:04:01 executing program 3: socketpair(0x810, 0x0, 0x0, &(0x7f00000002c0)) 17:04:02 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) 17:04:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}, @common=@ttl={{0x28}, {0x0, 0x4}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:02 executing program 1: socketpair(0xf00, 0x0, 0x0, &(0x7f00000002c0)) 17:04:02 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x300, &(0x7f00000002c0)) 17:04:02 executing program 3: socketpair(0x900, 0x0, 0x0, &(0x7f00000002c0)) 17:04:02 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) 17:04:02 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0xa00, &(0x7f00000002c0)) 17:04:02 executing program 1: socketpair(0x1008, 0x0, 0x0, &(0x7f00000002c0)) 17:04:02 executing program 3: socketpair(0xa00, 0x0, 0x0, &(0x7f00000002c0)) 17:04:02 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}, @common=@ttl={{0x28}, {0x0, 0x4}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:02 executing program 1: socketpair(0x1100, 0x0, 0x0, &(0x7f00000002c0)) 17:04:02 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) 17:04:02 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000500), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'macsec0\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1f, 0x2, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x3, 0x1, [0x90, 0x0, 0x200, 0x36c8, 0x9, 0x101, 0x9, 0x7, 0x8, 0x400, 0x80, 0x1ff, 0x100, 0x4, 0x3, 0xbef4], 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc1, 0x81}}, @common=@mh={{0x28}, {"79b9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_to_bond\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2c, 0x6, 0x5, 0x15}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) 17:04:02 executing program 3: socketpair(0xb00, 0x0, 0x0, &(0x7f00000002c0)) 17:04:02 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}, @common=@ttl={{0x28}, {0x0, 0x4}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:02 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x4000, &(0x7f00000002c0)) 17:04:02 executing program 1: socketpair(0x1200, 0x0, 0x0, &(0x7f00000002c0)) 17:04:02 executing program 2: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x0, 0x0, 0xffffffff, 0x1c0, 0x1c0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, &(0x7f0000000000), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, @loopback, [0xff, 0xffffff00, 0xff, 0xff000000], [0xffffffff, 0x0, 0xff], 'veth0_vlan\x00', 'pimreg1\x00', {0xff}, {}, 0x33, 0x7, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0x8001, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2f}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id=0x68, @port=0x4e22}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x3d}, [0x0, 0xff, 0x0, 0xff], [0xffffffff, 0xffffff00, 0xff, 0xff000000], 'sit0\x00', 'pimreg0\x00', {}, {}, 0x33, 0x8, 0x4, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv6=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @port=0x4e24, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x10, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3c}, @ipv6=@mcast2, @gre_key=0x9, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) 17:04:02 executing program 3: socketpair(0xc00, 0x0, 0x0, &(0x7f00000002c0)) 17:04:02 executing program 1: socketpair(0x1800, 0x0, 0x0, &(0x7f00000002c0)) 17:04:02 executing program 2: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x0, 0x0, 0xffffffff, 0x1c0, 0x1c0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, &(0x7f0000000000), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, @loopback, [0xff, 0xffffff00, 0xff, 0xff000000], [0xffffffff, 0x0, 0xff], 'veth0_vlan\x00', 'pimreg1\x00', {0xff}, {}, 0x33, 0x7, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0x8001, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2f}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id=0x68, @port=0x4e22}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x3d}, [0x0, 0xff, 0x0, 0xff], [0xffffffff, 0xffffff00, 0xff, 0xff000000], 'sit0\x00', 'pimreg0\x00', {}, {}, 0x33, 0x8, 0x4, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv6=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @port=0x4e24, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x10, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3c}, @ipv6=@mcast2, @gre_key=0x9, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x0, 0x0, 0xffffffff, 0x1c0, 0x1c0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, &(0x7f0000000000), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, @loopback, [0xff, 0xffffff00, 0xff, 0xff000000], [0xffffffff, 0x0, 0xff], 'veth0_vlan\x00', 'pimreg1\x00', {0xff}, {}, 0x33, 0x7, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0x8001, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2f}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id=0x68, @port=0x4e22}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x3d}, [0x0, 0xff, 0x0, 0xff], [0xffffffff, 0xffffff00, 0xff, 0xff000000], 'sit0\x00', 'pimreg0\x00', {}, {}, 0x33, 0x8, 0x4, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv6=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @port=0x4e24, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x10, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3c}, @ipv6=@mcast2, @gre_key=0x9, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) 17:04:02 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}, @common=@ttl={{0x28}, {0x0, 0x4}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:02 executing program 3: socketpair(0xd00, 0x0, 0x0, &(0x7f00000002c0)) 17:04:02 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x1000000, &(0x7f00000002c0)) 17:04:02 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) 17:04:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 17:04:02 executing program 1: socketpair(0x2000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:02 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x2000000, &(0x7f00000002c0)) 17:04:02 executing program 2: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x0, 0x0, 0xffffffff, 0x1c0, 0x1c0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, &(0x7f0000000000), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, @loopback, [0xff, 0xffffff00, 0xff, 0xff000000], [0xffffffff, 0x0, 0xff], 'veth0_vlan\x00', 'pimreg1\x00', {0xff}, {}, 0x33, 0x7, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0x8001, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2f}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id=0x68, @port=0x4e22}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x3d}, [0x0, 0xff, 0x0, 0xff], [0xffffffff, 0xffffff00, 0xff, 0xff000000], 'sit0\x00', 'pimreg0\x00', {}, {}, 0x33, 0x8, 0x4, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv6=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @port=0x4e24, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x10, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3c}, @ipv6=@mcast2, @gre_key=0x9, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) (async) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) 17:04:02 executing program 3: socketpair(0xe00, 0x0, 0x0, &(0x7f00000002c0)) 17:04:02 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x3000000, &(0x7f00000002c0)) 17:04:02 executing program 1: socketpair(0x2d00, 0x0, 0x0, &(0x7f00000002c0)) 17:04:02 executing program 3: socketpair(0xf00, 0x0, 0x0, &(0x7f00000002c0)) 17:04:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 17:04:02 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) 17:04:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 17:04:03 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r0) 17:04:03 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) (async) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) (async) 17:04:03 executing program 1: socketpair(0x4000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:03 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x4000000, &(0x7f00000002c0)) 17:04:03 executing program 3: socketpair(0x1008, 0x0, 0x0, &(0x7f00000002c0)) 17:04:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x3f8, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, 0x0, {[{{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}, @common=@ttl={{0x28}, {0x0, 0x4}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) 17:04:03 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) 17:04:03 executing program 3: socketpair(0x1100, 0x0, 0x0, &(0x7f00000002c0)) 17:04:03 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0xa000000, &(0x7f00000002c0)) 17:04:03 executing program 1: socketpair(0x4100, 0x0, 0x0, &(0x7f00000002c0)) [ 554.732727][ T716] x_tables: duplicate underflow at hook 1 17:04:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x3f8, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, 0x0, {[{{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}, @common=@ttl={{0x28}, {0x0, 0x4}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) 17:04:03 executing program 1: socketpair(0x4800, 0x0, 0x0, &(0x7f00000002c0)) [ 554.888330][ T730] x_tables: duplicate underflow at hook 1 17:04:03 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x402202, 0x0) ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) 17:04:03 executing program 3: socketpair(0x1200, 0x0, 0x0, &(0x7f00000002c0)) 17:04:03 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x40000000, &(0x7f00000002c0)) 17:04:03 executing program 1: socketpair(0x4c00, 0x0, 0x0, &(0x7f00000002c0)) 17:04:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x3f8, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, 0x0, {[{{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}, @common=@ttl={{0x28}, {0x0, 0x4}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) 17:04:03 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) 17:04:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x3d0, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 17:04:03 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x402202, 0x0) ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) 17:04:03 executing program 3: socketpair(0x1800, 0x0, 0x0, &(0x7f00000002c0)) 17:04:03 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0xfeffffff, &(0x7f00000002c0)) [ 555.063194][ T742] x_tables: duplicate underflow at hook 1 17:04:03 executing program 1: socketpair(0x6800, 0x0, 0x0, &(0x7f00000002c0)) 17:04:03 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x402202, 0x0) ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) 17:04:03 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0xfffffffe, &(0x7f00000002c0)) 17:04:03 executing program 3: socketpair(0x2000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x3d0, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 17:04:03 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000003, 0x1010, r0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x458, 0x98, 0x0, 0xffffffff, 0x0, 0x98, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7ff, 0x5}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x4, 0x1a0}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @broadcast, @private=0xa010102, @icmp_id=0x68, @icmp_id=0x65}}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffffff, 'lo\x00', 'dummy0\x00', {0xff}, {0xff}, 0x2e, 0x3, 0x20}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x1, 0x6, 0x4, 0x7, 0x2, 0x7], 0x4, 0x6}}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x0, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@local, @ipv4=@broadcast, @gre_key=0x8000, @port=0x4e23}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x6, 0x5, 0x3, 0x2, 0x4], 0x3, 0x1}}}, @common=@socket0={{0x20}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e24}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 17:04:03 executing program 1: socketpair(0x6c00, 0x0, 0x0, &(0x7f00000002c0)) 17:04:03 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x1, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1}, {0x1, 0x4, 0x7}, {0x3}, 0x9, 0x6031}}}, {{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh={{0x30}, {0x88, 0x1, 0x3f, 0xff, 0x7, 0x3180, 0x1000}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) 17:04:03 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x2f, 0x0, 0x20, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080)=0xdd96, 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) 17:04:03 executing program 3: socketpair(0x2d00, 0x0, 0x0, &(0x7f00000002c0)) 17:04:03 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000003, 0x1010, r0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x458, 0x98, 0x0, 0xffffffff, 0x0, 0x98, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7ff, 0x5}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x4, 0x1a0}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @broadcast, @private=0xa010102, @icmp_id=0x68, @icmp_id=0x65}}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffffff, 'lo\x00', 'dummy0\x00', {0xff}, {0xff}, 0x2e, 0x3, 0x20}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x1, 0x6, 0x4, 0x7, 0x2, 0x7], 0x4, 0x6}}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x0, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@local, @ipv4=@broadcast, @gre_key=0x8000, @port=0x4e23}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x6, 0x5, 0x3, 0x2, 0x4], 0x3, 0x1}}}, @common=@socket0={{0x20}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e24}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 17:04:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x3d0, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 17:04:03 executing program 3: socketpair(0x4000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:03 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) (async, rerun: 32) socketpair(0x2f, 0x0, 0x20, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080)=0xdd96, 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) 17:04:03 executing program 1: socketpair(0x7400, 0x0, 0x0, &(0x7f00000002c0)) 17:04:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:03 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x2f, 0x0, 0x20, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080)=0xdd96, 0x8) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) 17:04:04 executing program 3: socketpair(0x4100, 0x0, 0x0, &(0x7f00000002c0)) 17:04:04 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) (async) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000003, 0x1010, r0, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x458, 0x98, 0x0, 0xffffffff, 0x0, 0x98, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7ff, 0x5}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x4, 0x1a0}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @broadcast, @private=0xa010102, @icmp_id=0x68, @icmp_id=0x65}}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffffff, 'lo\x00', 'dummy0\x00', {0xff}, {0xff}, 0x2e, 0x3, 0x20}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x1, 0x6, 0x4, 0x7, 0x2, 0x7], 0x4, 0x6}}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x0, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@local, @ipv4=@broadcast, @gre_key=0x8000, @port=0x4e23}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x6, 0x5, 0x3, 0x2, 0x4], 0x3, 0x1}}}, @common=@socket0={{0x20}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e24}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 17:04:04 executing program 4: socket$inet(0x2, 0x6, 0x3) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) 17:04:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x3a8, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 17:04:04 executing program 1: socketpair(0x7a00, 0x0, 0x0, &(0x7f00000002c0)) 17:04:04 executing program 3: socketpair(0x4800, 0x0, 0x0, &(0x7f00000002c0)) 17:04:04 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x400, 0x0) 17:04:04 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x29, 0x3, 0x800, &(0x7f0000000040)) 17:04:04 executing program 1: socketpair(0x20000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x3a8, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 17:04:04 executing program 3: socketpair(0x4c00, 0x0, 0x0, &(0x7f00000002c0)) 17:04:04 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x29, 0x3, 0x800, &(0x7f0000000040)) (async) socketpair(0x29, 0x3, 0x800, &(0x7f0000000040)) 17:04:04 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x400, 0x0) 17:04:04 executing program 1: socketpair(0x200000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:04 executing program 4: socket$inet(0x2, 0x6, 0x3) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) 17:04:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x3a8, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 17:04:04 executing program 3: socketpair(0x6800, 0x0, 0x0, &(0x7f00000002c0)) 17:04:04 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x29, 0x3, 0x800, &(0x7f0000000040)) (async) socketpair(0x29, 0x3, 0x800, &(0x7f0000000040)) 17:04:04 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x400, 0x0) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x400, 0x0) (async) 17:04:04 executing program 1: socketpair(0x1000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00', 0x0, 0x0, 0x2, 0x1}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:04 executing program 3: socketpair(0x6c00, 0x0, 0x0, &(0x7f00000002c0)) 17:04:04 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) 17:04:04 executing program 1: socketpair(0x2000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:04 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000080)) socketpair(0x1d, 0x0, 0x0, &(0x7f00000002c0)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000040)) 17:04:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00', 0x0, 0x0, 0x0, 0x1}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:04 executing program 4: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) 17:04:04 executing program 1: socketpair(0x3000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:04 executing program 3: socketpair(0x7400, 0x0, 0x0, &(0x7f00000002c0)) 17:04:04 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) (async) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) 17:04:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:04 executing program 1: socketpair(0x4000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:04 executing program 3: socketpair(0x7a00, 0x0, 0x0, &(0x7f00000002c0)) 17:04:04 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) (async) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) 17:04:04 executing program 4: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) 17:04:04 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) (async, rerun: 64) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (rerun: 64) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000080)) socketpair(0x1d, 0x0, 0x0, &(0x7f00000002c0)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000040)) [ 556.442572][ T858] can: request_module (can-proto-0) failed. 17:04:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:04 executing program 1: socketpair(0x5000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:04 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000080)) socketpair(0x1d, 0x0, 0x0, &(0x7f00000002c0)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000040)) 17:04:04 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000100)=0x3) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x5) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f00000000c0)) r2 = accept4$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x10, 0x80000) getsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 17:04:04 executing program 3: socketpair(0x200000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:05 executing program 1: socketpair(0x6000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id=0x66, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:05 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000100)=0x3) (async) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x5) (async) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f00000000c0)) (async) r2 = accept4$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x10, 0x80000) getsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 17:04:05 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) (async) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000080)) socketpair(0x1d, 0x0, 0x0, &(0x7f00000002c0)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000040)) [ 556.705895][ T897] can: request_module (can-proto-0) failed. 17:04:05 executing program 1: socketpair(0x7000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:05 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000100)=0x3) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x5) (async) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f00000000c0)) r2 = accept4$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x10, 0x80000) getsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 17:04:05 executing program 3: socketpair(0x1000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @gre_key=0xcc6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:05 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000080)) socketpair(0x1d, 0x0, 0x0, &(0x7f00000002c0)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000040)) [ 556.818641][ T903] can: request_module (can-proto-0) failed. 17:04:05 executing program 1: socketpair(0x8000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:05 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x4, 0x1}) 17:04:05 executing program 3: socketpair(0x2000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0xff000000, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) [ 556.953734][ T919] can: request_module (can-proto-0) failed. 17:04:05 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)=0xfdfffffc) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) 17:04:05 executing program 1: socketpair(0x8100000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x84, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:05 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) (async, rerun: 64) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x4, 0x1}) (rerun: 64) 17:04:05 executing program 3: socketpair(0x3000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:05 executing program 1: socketpair(0x9000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:05 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x2, 0x0) (async) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)=0xfdfffffc) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) (async) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) [ 557.125400][ T934] can: request_module (can-proto-0) failed. 17:04:05 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000080)) socketpair(0x1d, 0x0, 0x0, &(0x7f00000002c0)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000040)) 17:04:05 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x4, 0x1}) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) (async) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) (async) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x4, 0x1}) (async) 17:04:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x0, 0x1, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:05 executing program 3: socketpair(0x4000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:05 executing program 1: socketpair(0xa000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:05 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)=0xfdfffffc) (async) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) (async) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) 17:04:05 executing program 2: getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) 17:04:05 executing program 3: socketpair(0x5000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_team\x00', 'veth1\x00', {}, {}, 0x0, 0x0, 0x9}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:05 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000080)) socketpair(0x1d, 0x0, 0x0, &(0x7f00000002c0)) [ 557.366198][ T962] can: request_module (can-proto-0) failed. 17:04:05 executing program 3: socketpair(0x6000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:05 executing program 2: getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) 17:04:05 executing program 1: socketpair(0xb000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:05 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10) 17:04:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_team\x00', 'veth1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:05 executing program 1: socketpair(0xc000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:05 executing program 2: getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) [ 557.572204][ T987] can: request_module (can-proto-0) failed. 17:04:06 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10) 17:04:06 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) socketpair(0x1d, 0x0, 0x0, &(0x7f00000002c0)) 17:04:06 executing program 3: socketpair(0x7000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_team\x00', 'veth1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:06 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r2}, 0x4) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r3, 0x3ba0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, 0x0) 17:04:06 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) (async) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10) 17:04:06 executing program 3: socketpair(0x8000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:06 executing program 1: socketpair(0xd000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_team\x00', 'veth1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:06 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r2}, 0x4) (async) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, 0x0) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r3, 0x3ba0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, 0x0) 17:04:06 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 17:04:06 executing program 1: socketpair(0xe000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_team\x00', 'veth1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @icmp_id, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:06 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socketpair(0x1d, 0x0, 0x0, &(0x7f00000002c0)) 17:04:06 executing program 3: socketpair(0x8100000, 0x0, 0x0, &(0x7f00000002c0)) [ 557.914556][ T1020] can: request_module (can-proto-0) failed. 17:04:06 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) (async) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) (async) getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 17:04:06 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r2}, 0x4) (async) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, 0x0) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r3, 0x3ba0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, 0x0) 17:04:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xd, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_team\x00', 'veth1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @icmp_id}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:06 executing program 3: socketpair(0x9000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:06 executing program 1: socketpair(0xf000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:06 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) (async) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 17:04:06 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x105683, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) 17:04:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @private=0xa010101, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_team\x00', 'veth1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @icmp_id}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:06 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x1d, 0x0, 0x0, &(0x7f00000002c0)) 17:04:06 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) socketpair(0x10, 0x4, 0x9, &(0x7f0000000040)) [ 558.152566][ T1047] can: request_module (can-proto-0) failed. 17:04:06 executing program 1: socketpair(0x10000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:06 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x105683, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) (async) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) 17:04:06 executing program 3: socketpair(0xa000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:06 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) socketpair(0x10, 0x4, 0x9, &(0x7f0000000040)) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) (async) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) (async) socketpair(0x10, 0x4, 0x9, &(0x7f0000000040)) (async) 17:04:06 executing program 1: socketpair(0x11000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:06 executing program 2: openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x105683, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) 17:04:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @private, @rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_team\x00', 'veth1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @icmp_id}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:06 executing program 4: socketpair(0x1d, 0x0, 0x0, &(0x7f00000002c0)) [ 558.357135][ T1068] can: request_module (can-proto-0) failed. 17:04:06 executing program 3: socketpair(0xb000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:06 executing program 1: socketpair(0x12000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:06 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) (async) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) (async) socketpair(0x10, 0x4, 0x9, &(0x7f0000000040)) 17:04:06 executing program 3: socketpair(0xc000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_team\x00', 'veth1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @icmp_id}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:06 executing program 2: r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r2, 0x3ba0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000040)={0x40, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000780)) read$ptp(r4, &(0x7f0000000000)=""/14, 0xe) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38}) 17:04:06 executing program 1: socketpair(0x18000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:06 executing program 3: socketpair(0xd000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:06 executing program 4: socketpair(0x1d, 0x0, 0x0, &(0x7f00000002c0)) 17:04:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @port, @port=0x4e23}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_team\x00', 'veth1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @icmp_id}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:07 executing program 1: socketpair(0x20000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:07 executing program 3: socketpair(0xe000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:07 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) 17:04:07 executing program 3: socketpair(0xf000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:07 executing program 1: socketpair(0x21000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x2, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @private}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_team\x00', 'veth1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @icmp_id}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:07 executing program 2: r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r2, 0x3ba0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000040)={0x40, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) (async) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) (rerun: 32) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000780)) (async) read$ptp(r4, &(0x7f0000000000)=""/14, 0xe) (async) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38}) 17:04:07 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)) (async) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) 17:04:07 executing program 3: socketpair(0x10000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:07 executing program 4: socketpair(0x1d, 0x0, 0x0, &(0x7f00000002c0)) 17:04:07 executing program 1: socketpair(0x2d000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x3d0, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @private}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_team\x00', 'veth1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @icmp_id}}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 17:04:07 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)) (async) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) (async) 17:04:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x3d0, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @private}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_team\x00', 'veth1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @icmp_id}}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 17:04:07 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x2) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) 17:04:07 executing program 3: socketpair(0x11000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:07 executing program 2: r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r2, 0x3ba0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000040)={0x40, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) openat$ppp(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000780)) (async) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000780)) read$ptp(r4, &(0x7f0000000000)=""/14, 0xe) (async) read$ptp(r4, &(0x7f0000000000)=""/14, 0xe) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38}) 17:04:07 executing program 1: socketpair(0x40000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:07 executing program 4: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) socketpair(0x1d, 0x0, 0x0, &(0x7f00000002c0)) 17:04:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x3d0, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @private}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_team\x00', 'veth1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @icmp_id}}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 17:04:07 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) (async) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x2) (async) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) 17:04:07 executing program 3: socketpair(0x12000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:07 executing program 1: socketpair(0x41000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:07 executing program 3: socketpair(0x18000000, 0x0, 0x0, &(0x7f00000002c0)) [ 559.263962][ T1183] general protection fault, probably for non-canonical address 0xdffffc000000002a: 0000 [#1] PREEMPT SMP KASAN [ 559.276000][ T1183] KASAN: null-ptr-deref in range [0x0000000000000150-0x0000000000000157] [ 559.284442][ T1183] CPU: 0 PID: 1183 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-14651-gd2f51b3516da #0 [ 559.294691][ T1183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 559.304765][ T1183] RIP: 0010:__lock_acquire+0x10d/0x7f70 17:04:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{}, {0x0, 0x4}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @private}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_team\x00', 'veth1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @icmp_id}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) 17:04:07 executing program 0: ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x2) (async) socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) 17:04:07 executing program 1: socketpair(0x48000000, 0x0, 0x0, &(0x7f00000002c0)) 17:04:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x198, 0xffffffff, 0x240, 0xf0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x7, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @private}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'veth0_to_team\x00', 'veth1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @icmp_id}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@osf={{}, {'syz1\x00'}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffef6) [ 559.310759][ T1183] Code: 85 75 18 00 00 83 3d 6d 4a 93 0d 00 48 89 9c 24 10 01 00 00 0f 84 f8 0f 00 00 83 3d bc 50 12 0c 00 74 34 48 89 d0 48 c1 e8 03 <42> 80 3c 00 00 74 1a 48 89 d7 e8 04 8a 7d 00 48 8b 94 24 80 00 00 [ 559.330396][ T1183] RSP: 0018:ffffc90003d5f600 EFLAGS: 00010002 [ 559.336677][ T1183] RAX: 000000000000002a RBX: 1ffff920007abee4 RCX: 0000000000000000 [ 559.344844][ T1183] RDX: 0000000000000150 RSI: 0000000000000000 RDI: 0000000000000150 [ 559.353445][ T1183] RBP: ffffc90003d5f8c8 R08: dffffc0000000000 R09: 0000000000000000 [ 559.361437][ T1183] R10: dffffc0000000000 R11: fffffbfff1e00d5e R12: 0000000000000000 [ 559.369599][ T1183] R13: 0000000000000001 R14: 0000000000000000 R15: ffff888074e70000 [ 559.377851][ T1183] FS: 00007f7f93b986c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 559.387565][ T1183] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 559.394167][ T1183] CR2: 00007f7263175198 CR3: 000000001fbae000 CR4: 00000000003506f0 [ 559.402422][ T1183] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 559.410416][ T1183] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 559.418667][ T1183] Call Trace: [ 559.421963][ T1183] [ 559.425175][ T1183] ? __die_body+0x8b/0xe0 [ 559.429530][ T1183] ? die_addr+0xc9/0x100 [ 559.434131][ T1183] ? exc_general_protection+0x3c2/0x5b0 [ 559.439679][ T1183] ? __switch_to+0xe3f/0x1be0 [ 559.444375][ T1183] ? asm_exc_general_protection+0x26/0x30 [ 559.450091][ T1183] ? __lock_acquire+0x10d/0x7f70 [ 559.455019][ T1183] ? print_irqtrace_events+0x161/0x220 [ 559.460463][ T1183] ? lockdep_hardirqs_on+0x98/0x140 [ 559.465651][ T1183] ? verify_lock_unused+0x140/0x140 [ 559.470881][ T1183] ? __schedule+0x1968/0x4a80 [ 559.475577][ T1183] ? verify_lock_unused+0x140/0x140 [ 559.480763][ T1183] ? __schedule+0x1968/0x4a80 [ 559.485434][ T1183] ? mark_lock+0x9a/0x340 [ 559.489758][ T1183] lock_acquire+0x1e3/0x520 [ 559.494248][ T1183] ? simple_recursive_removal+0x8d/0x7c0 [ 559.499877][ T1183] ? read_lock_is_recursive+0x20/0x20 [ 559.505327][ T1183] ? simple_recursive_removal+0x35/0x7c0 [ 559.510965][ T1183] ? __might_sleep+0xc0/0xc0 [ 559.515550][ T1183] ? do_raw_spin_unlock+0x13b/0x8b0 [ 559.520851][ T1183] down_write+0x3a/0x50 [ 559.525565][ T1183] ? simple_recursive_removal+0x8d/0x7c0 [ 559.531197][ T1183] simple_recursive_removal+0x8d/0x7c0 [ 559.536661][ T1183] ? debugfs_remove+0x70/0x70 [ 559.541374][ T1183] debugfs_remove+0x49/0x70 [ 559.545865][ T1183] ptp_release+0x70/0x1e0 [ 559.550223][ T1183] ptp_read+0x17f/0x820 [ 559.554380][ T1183] ? __asan_memset+0x23/0x40 [ 559.558960][ T1183] ? __down_common+0x7a0/0x7a0 [ 559.563723][ T1183] ? ptp_poll+0x160/0x160 [ 559.568151][ T1183] ? __fsnotify_update_child_dentry_flags+0x2a0/0x2a0 [ 559.574922][ T1183] ? ptp_poll+0x160/0x160 [ 559.579261][ T1183] posix_clock_read+0x12f/0x190 [ 559.584143][ T1183] ? pc_clock_adjtime+0x220/0x220 [ 559.589157][ T1183] vfs_read+0x289/0xb00 [ 559.593309][ T1183] ? lockdep_hardirqs_on+0x98/0x140 [ 559.598585][ T1183] ? kernel_read+0x1f0/0x1f0 [ 559.603182][ T1183] ? __fget_files+0x29/0x480 [ 559.607761][ T1183] ? __fget_files+0x3fe/0x480 [ 559.612442][ T1183] ? __fget_files+0x29/0x480 [ 559.617043][ T1183] ? __fdget_pos+0x1df/0x340 [ 559.621689][ T1183] ? ksys_read+0x7b/0x2c0 [ 559.626017][ T1183] ksys_read+0x1a0/0x2c0 [ 559.630248][ T1183] ? print_irqtrace_events+0x220/0x220 [ 559.635690][ T1183] ? vfs_write+0xb20/0xb20 [ 559.640091][ T1183] ? syscall_enter_from_user_mode+0x32/0x230 [ 559.646163][ T1183] ? lockdep_hardirqs_on+0x98/0x140 [ 559.651370][ T1183] ? syscall_enter_from_user_mode+0x32/0x230 [ 559.657349][ T1183] do_syscall_64+0x44/0x110 [ 559.661872][ T1183] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 559.667783][ T1183] RIP: 0033:0x7f7f92e7cae9 [ 559.672203][ T1183] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 559.691802][ T1183] RSP: 002b:00007f7f93b980c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 559.700204][ T1183] RAX: ffffffffffffffda RBX: 00007f7f92f9c120 RCX: 00007f7f92e7cae9 [ 559.708164][ T1183] RDX: 000000000000000e RSI: 0000000020000000 RDI: 0000000000000005 [ 559.716553][ T1183] RBP: 00007f7f92ec847a R08: 0000000000000000 R09: 0000000000000000 [ 559.724517][ T1183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.732489][ T1183] R13: 000000000000000b R14: 00007f7f92f9c120 R15: 00007ffdd2aa5dc8 [ 559.740639][ T1183] [ 559.743652][ T1183] Modules linked in: [ 559.747911][ T1183] ---[ end trace 0000000000000000 ]--- [ 559.753452][ T1183] RIP: 0010:__lock_acquire+0x10d/0x7f70 [ 559.758995][ T1183] Code: 85 75 18 00 00 83 3d 6d 4a 93 0d 00 48 89 9c 24 10 01 00 00 0f 84 f8 0f 00 00 83 3d bc 50 12 0c 00 74 34 48 89 d0 48 c1 e8 03 <42> 80 3c 00 00 74 1a 48 89 d7 e8 04 8a 7d 00 48 8b 94 24 80 00 00 [ 559.779120][ T1183] RSP: 0018:ffffc90003d5f600 EFLAGS: 00010002 [ 559.785181][ T1183] RAX: 000000000000002a RBX: 1ffff920007abee4 RCX: 0000000000000000 [ 559.793147][ T1183] RDX: 0000000000000150 RSI: 0000000000000000 RDI: 0000000000000150 [ 559.801195][ T1183] RBP: ffffc90003d5f8c8 R08: dffffc0000000000 R09: 0000000000000000 [ 559.809158][ T1183] R10: dffffc0000000000 R11: fffffbfff1e00d5e R12: 0000000000000000 [ 559.817302][ T1183] R13: 0000000000000001 R14: 0000000000000000 R15: ffff888074e70000 [ 559.825550][ T1183] FS: 00007f7f93b986c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 559.834481][ T1183] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 559.841249][ T1183] CR2: 00007f7263175198 CR3: 000000001fbae000 CR4: 00000000003506f0 [ 559.849399][ T1183] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 559.857360][ T1183] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 559.865320][ T1183] Kernel panic - not syncing: Fatal exception [ 559.871473][ T1183] Kernel Offset: disabled [ 559.875798][ T1183] Rebooting in 86400 seconds..