95acd6e444e092bb40969502d9cd88df4f659f8f31cb875f0dd9050ef67f9eea78f3310e45a8b7d022a0220b28b20a2ce2ff4509bb1cd1ba1d5c1c8c390a621fb208f983b7e2a3a4f1717ecb38b14f293e77518d4e905626f1d3ae361a68716ff1759cc0b9b5fc2a42add1aace02c817c6387a2dde24ca1f548e40a364dfc6377b3df665378d98378f0847956f314de0f40aff2804f15db7436d420dbfda938880a4e000000"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) write$cgroup_int(r0, 0x0, 0x0) [ 1134.392951][T30871] binder: 30868:30871 transaction failed 29201/-28, size 0-0 line 3147 [ 1134.431934][T30871] binder: 30868:30871 transaction failed 29201/-28, size 0-0 line 3147 03:47:31 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5800]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0xcd, 0x8, 0x109, 0x0, 0x1}, 0x219) r0 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3, 0x0, 0x740000, 0x0, 0x20820000, r0}, 0x2c) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x80040, 0x0) bind$nfc_llcp(r1, &(0x7f0000000100)={0x27, 0x0, 0x2, 0x7, 0x10000, 0x9, "cf3cdd6fb39940778021a91d688ee2b2f1fce3fd93a79df1833618f369124df5a5b65b677d6a4ca27798ea23e123053a0aa11b77504ff11b9c5355f96fae0d"}, 0x60) 03:47:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x40044581, &(0x7f00000000c0)=""/8) [ 1134.443238][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 1134.463224][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:47:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1134.588014][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1134.593916][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:32 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1134.677152][T31071] binder: 30982:31071 transaction failed 29201/-28, size 0-0 line 3147 03:47:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c12a41d88b070") io_setup(0x4, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200, 0x0) getsockname$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0xfffffffffffffdcc) [ 1134.738524][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:32 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6488]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1134.898196][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1134.904040][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:32 executing program 4: set_mempolicy(0x4002, &(0x7f0000000140)=0x6, 0x9) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600), 0x77) write$binfmt_misc(r0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x2000c091) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x800000000105082) r2 = memfd_create(0x0, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) accept$netrom(r3, &(0x7f0000000080)={{0x3, @default}, [@default, @null, @remote, @default, @netrom, @remote, @netrom, @default]}, &(0x7f0000000180)=0x48) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x80000) sendfile(r1, r1, 0x0, 0x102000000) 03:47:32 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800e]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x40044590, &(0x7f00000000c0)=""/8) 03:47:32 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000001400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001440)=0x14, 0x80800) socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'irlan0\x00', 0x7fffffff}) gettid() socket(0x11, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000003a80)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) flistxattr(0xffffffffffffffff, &(0x7f0000001640)=""/4096, 0x1000) rt_sigtimedwait(&(0x7f0000000340), 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xffffffffffffffff) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000240)={0x70, "234bdae97461e9bd7a46e4ca72f89c525df0ca97d962a6af8f0b4903f04e0a83a8739dff7cd28f2893e9355ce73c55a255bf31488a5e7924ba363ec96930ea1a607fef3a42caa0c613c22061bb88550aa7bab7c3e92b64cba17c6db5eb29743eb4f3926ae6bf3fa8b39c152c5d3c24b73ec90e8051dc2607447ae832dda9939d"}) ioctl(r0, 0xc2604110, &(0x7f0000000080)="6c02b78d58f871971b3f993f32c1f68332a78269dfa499f7a5913ff98f19de49a1b38e7842ad1fd0214341089addda632f4584f1d137266072104f7a1607673d426d16a6edb8cd567ab6f15960c6da2d601202db252057eb8cc4cffb450a6f79fc1c0b7ae617d10afc0283dcfd3c1a9bb2a1d9fa6b4489c6190fc1adc8a6588a9af1be806db45fe9d037a5b4aacaa13748f7f0e286e32adb97cc6e134c189a3f20f6ff36d2c433805f2de1ea44351962d2861cdfd3b5b94a06857b3192065ed862615b3fb8a39755ab91b9dd21c9e4956e532bbb4849428a2c0a0d5afa3f1537973a0f49445664b8ed4837d0") 03:47:32 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8035]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1135.123802][T31407] binder: 31403:31407 transaction failed 29201/-28, size 0-0 line 3147 [ 1135.180664][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:47:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001240)="2e0000002a00815f00000000000000cf0800b0eba0b4d65cdbaa18b29c473da67e3d743298cbb3001be63e75c80b", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @broadcast}, &(0x7f0000000100)=0xc) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, r2, 0x3}, 0xc) 03:47:32 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8100]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1135.349419][T31639] binder: 31627:31639 transaction failed 29201/-28, size 0-0 line 3147 [ 1135.377518][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 [ 1135.384572][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1135.388182][T31639] binder: 31627:31639 transaction failed 29201/-28, size 0-0 line 3147 03:47:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x40044591, &(0x7f00000000c0)=""/8) [ 1135.418089][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1135.627736][T31854] binder: 31787:31854 transaction failed 29201/-28, size 0-0 line 3147 [ 1135.654420][T31854] binder: 31787:31854 transaction failed 29201/-28, size 0-0 line 3147 [ 1135.678437][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 [ 1135.696759][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:33 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8847]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:33 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x1}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x20002, 0x0) 03:47:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x71, 0x200) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000200), 0x4) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {}]}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000000c0)=r2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000000000002d0, 0x0) fcntl$dupfd(r0, 0x406, r1) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000240)={0xff, 0x4, 0x5, "6486f84db0c48c9dcdadbebdfd1665a882d30a7d5e87a1ae8bac75207febdad5923ba1ba3e1c3d9d148a8f6772f50e04f96c5d27a90f596b79d41308", 0x3c, "c7d0128b67ba44f6141aea26102d0e97fb6715ab6001347b729b07f6f15eeea14636752636f6d60fa628b34bcc82d496b1181d42f3ad7b41b41178c1", 0x40}) 03:47:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x400445a0, &(0x7f00000000c0)=""/8) 03:47:33 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8848]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1135.848792][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:33 executing program 4: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffff9c, &(0x7f0000000580)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000280)=0x80) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000340)=0x3, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000700)) futimesat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB=',\x00']) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="3439ac36372556e4c6bc4ed04f2500e5ed0c2ea7bd6abb666705d7cd95c6e52457afc343c3475ef7742d77de997ae7b03adfd0240b62cbbc922761ae9e9f61aa1f2542e086dfd549624b3bfea0b34e6a3d60a94b524e8ea220d01613c9e6ce367a"]) r2 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) sched_setattr(r1, &(0x7f0000000200)={0x30, 0x7, 0x0, 0x200, 0x1000, 0x5, 0x4, 0x8}, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000780)) chdir(0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000600)=""/93, &(0x7f0000000400)=0x5d) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000180)) mkdir(&(0x7f0000000440)='./file1\x00', 0xfffffffffffffffe) syz_open_dev$midi(&(0x7f0000000680)='/dev/midi#\x00', 0x100000000, 0x1) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469726c65302c6c6f7765726469723d2e2f66696c65fe7ca7ca3cfefbac315c00"]) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000880)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000980)=0xe8) getresgid(&(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=0x0) fchownat(r2, &(0x7f0000000500)='./file1/file0\x00', r4, r5, 0x0) fchdir(r3) syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000740)='./file0/file0\x00', 0x3b, 0x1, &(0x7f0000000540)=[{&(0x7f00000007c0)="e0e8b7bc8989896be67d890336e4fbbd704b6320694a450e2b486aae64ded2f982a2c233687e775a7646760ac0f5e26b25b632f7509964317d9dd1b7adba1e599367772b11d8e0deae2c9b8825fd074b80920c6394cfcc8decb954fa37ab5072426874921817f57ed98703ed75439ca15c8fab6042853d5072d2b1f7c6e2593ce68d4be813b2481b511c7e8ffabe73f823671ded9b1d80fdddd8c7f3", 0x2d, 0x8000}], 0x0, 0x0) 03:47:33 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8864]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:33 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) socket$isdn(0x22, 0x3, 0x23) mknod(&(0x7f0000000200)='./file0\x00', 0x1020, 0x0) [ 1136.176375][T32355] overlayfs: unrecognized mount option "49¬67%VäƼNÐO%" or missing value [ 1136.282226][T32355] overlayfs: unrecognized mount option "upperdirle0" or missing value 03:47:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:33 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8906]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x40049409, &(0x7f00000000c0)=""/8) 03:47:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:33 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4000000000008000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x80000000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20000002812, r0, 0x0) 03:47:34 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:34 executing program 1: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c0a0b5aff6e10b500000780cc08001c0006000000", 0x24) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x40, @dev={0xfe, 0x80, [], 0x2b}, 0x5}, 0x1c) 03:47:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x50, &(0x7f00000001c0)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, r0, 0x0, 0x1a, &(0x7f00000000c0)='security%em0\\ppp0\x99vmnet0\\\x00', r3}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r0, 0x0, 0x17, &(0x7f0000000080)='\x06-[\'posix_acl_access/-\x00', r4}, 0x30) r5 = socket$inet6(0xa, 0x800000000000000, 0x7fffffff) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000180), 0x4) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x2, 0x0) 03:47:34 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1136.731778][ T416] netlink: 'syz-executor.1': attribute type 28 has an invalid length. [ 1136.781241][ T416] netlink: 'syz-executor.1': attribute type 28 has an invalid length. 03:47:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x40084503, &(0x7f00000000c0)=""/8) 03:47:34 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x8000, 0x0) connect$rds(r1, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10) mount$overlay(0x400000, &(0x7f0000000200)='./file1\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[]) 03:47:34 executing program 1: mkdir(0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') pread64(r2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x8, 0x0, 0xfffffffffffffff8, 0xd81, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0x6, 0xffffffffffffffff, 0x8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) signalfd4(r1, &(0x7f0000000000)={0x40}, 0x8, 0x80000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x10, 0xffffffffffffffff, 0x0) r4 = dup2(r0, r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, 0x0, 0x8010) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000280)={0x6, 0x0, [{0x3, 0x4, 0x0, 0x0, @irqchip={0x9, 0x8a5}}, {0x3ff, 0x6, 0x0, 0x0, @adapter={0x6, 0x0, 0x7e, 0x9, 0x88}}, {0x9995, 0x4, 0x0, 0x0, @adapter={0x10001, 0x9, 0x5f, 0x7, 0x20000000000000}}, {0x401, 0x7, 0x0, 0x0, @irqchip={0x40, 0x8}}, {0x3bfc, 0x1, 0x0, 0x0, @msi={0xffffffffffffc43c, 0x393, 0x2}}, {0x3ff, 0x0, 0x0, 0x0, @msi={0x3, 0x58, 0x6}}]}) 03:47:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x40084504, &(0x7f00000000c0)=""/8) 03:47:34 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1137.242227][ T835] overlayfs: missing 'lowerdir' 03:47:34 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x5, 0x8) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x28cf, 0x7426, 0x7, 0x400]) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x4, 0x5, 0x7, 0x1dda, 0x1, 0x100000000, 0x9, 0x3, 0x1, 0x3]) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffcc}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x240200, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) semop(r0, &(0x7f0000000080)=[{0x7, 0x10001, 0x1800}, {0x3, 0x7, 0x1800}, {0x4, 0x613, 0x1000}, {0x3, 0xffffffff, 0x1800}, {0x2, 0xbd, 0x1800}, {0x1, 0x91, 0x1800}, {0x3, 0x1ff, 0x800}, {0x0, 0x3f, 0x1800}], 0x8) r2 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000100)={0x7f, 0x2, 0x0, 0x0, 0xffffffffffff8001, 0xff, 0xa}) 03:47:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x40104593, &(0x7f00000000c0)=""/8) 03:47:35 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x30855944af2d4b07) getsockname$unix(r0, &(0x7f0000000180), &(0x7f0000000200)=0x6e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="eb64c88a4f53732e66417400100441001101037008f8", 0x16}], 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f00000000c0)=0xffff) 03:47:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:35 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:35 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000080)=@x25={0x9, @remote={[], 0x1}}, 0x80) 03:47:35 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x200000) r1 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x2) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r1, 0x0, 0x2}) r2 = socket(0x0, 0x80006, 0xeac) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000100)=[0x9, 0x1]) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x40000}, 0xc) socket(0x25, 0x0, 0x0) epoll_wait(r0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x7f) 03:47:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x4020940d, &(0x7f00000000c0)=""/8) 03:47:35 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:35 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101000, 0x0) recvfrom$ax25(r1, &(0x7f0000000080)=""/196, 0xc4, 0x0, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000300)={0x1, [0x0]}, &(0x7f00000002c0)=0x24f) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x11, &(0x7f0000000040)={r2}, 0x8) 03:47:35 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:35 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000001c0)=""/254) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000100)={0x63}) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x6, 0x100) ioctl$FIONREAD(r2, 0x5437, 0x0) 03:47:36 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8060000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)=""/8) 03:47:36 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x3b) fallocate(r0, 0x0, 0x0, 0x1000f4) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) 03:47:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:36 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1138.763349][ T26] audit: type=1804 audit(2000000856.237:199): pid=2073 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832457040/syzkaller.U1dLKM/1419/bus" dev="sda1" ino=17763 res=1 03:47:36 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x81, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000740)='\x00\b\x00\x00tinfo\x00\xb1x\xb4@/\xb6\x04+\x16\xd2)\x8a\n\x80\xd6\xb1\n\v\x13\x8d\x1a\xfb58p\x00\x89>\xd0]\x12\x9bT\xd9\x91\b\xcf|\xd8\xb5\xee\xceDM\xdf\x1d(\xa6lIt\x7f\xa5\x8b\xb8\xd5A\xc9\x8a\xe1Ga\xde1\xdfa\x1f\xc7\x10,\xa4\xedN\xa4\v/\x1d\x84\xd2\xad\x8a\xf9\xd2\x8a\xe2\xa6d\x97^\xb0l\xe1\xbf\xbc\xe6}\xcf \xa9\x15\x96\x83`5\xf8\xef\x04\xd0@\x96\xd8x\x18\xac\x9fu\xf1\x85nE\xd3\xab\xc7fBEIM`\xb9\x17\xd3\xe1w\x98\xb0\xf3v\x98\xa8\xf8\xdd\xdcN \xe4\xa5#e\x8a\xb6\xd7') ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000006780)=ANY=[@ANYBLOB="00000005007d00008e1b4cc70000000000000000"]) prctl$PR_GET_DUMPABLE(0x3) read(r1, &(0x7f0000000a80)=""/245, 0xf5) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000e00)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000280)=0x44) write$P9_RUNLINKAT(r3, &(0x7f0000000300)={0x7, 0x4d, 0x2}, 0x7) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000180)) syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0x0, 0x0, [0x9, 0x8, 0x0, 0xffffffffffff14af, 0x10000, 0x8, 0xff, 0xffff]}) linkat(r3, &(0x7f0000000680)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1404) fcntl$getownex(r2, 0x10, &(0x7f0000000200)) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x6, @broadcast, 0x0, 0x0, 'dh\x00', 0x0, 0x80000000, 0x16}, 0x2c) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x40, 0x0) recvmmsg(r2, &(0x7f0000006240)=[{{&(0x7f0000000380)=@nfc_llcp, 0x80, &(0x7f0000000a00)=[{&(0x7f00000004c0)=""/130, 0x82}, {&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000000800)=""/255, 0xff}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000b80)=""/199, 0xc7}, {&(0x7f0000000440)=""/24, 0x18}], 0x8, &(0x7f0000000c80)=""/205, 0xcd}, 0x1000}, {{&(0x7f0000000d80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000002080)=""/220, 0xdc}, {&(0x7f0000000700)=""/18, 0x12}, {&(0x7f0000002180)=""/4096, 0x1000}], 0x3, &(0x7f0000000f80)=""/100, 0x64}, 0x4}, {{&(0x7f0000003180)=@ax25={{0x3, @bcast}, [@rose, @netrom, @null, @default, @default, @rose, @netrom, @netrom]}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003200)=""/16, 0x10}, {&(0x7f0000003240)=""/209, 0xd1}, {&(0x7f0000003340)=""/222, 0xde}, {&(0x7f0000003440)=""/45, 0x2d}, {&(0x7f0000003480)=""/21, 0x15}, {&(0x7f00000034c0)=""/205, 0xcd}, {&(0x7f00000035c0)=""/124, 0x7c}, {&(0x7f0000003640)=""/77, 0x4d}, {&(0x7f00000036c0)=""/3, 0x3}, {&(0x7f0000003700)=""/157, 0x9d}], 0xa, &(0x7f0000003880)=""/143, 0x8f}, 0x3f}, {{&(0x7f0000003940)=@generic, 0x80, &(0x7f0000004c00)=[{&(0x7f00000039c0)=""/186, 0xba}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/8, 0x8}, {&(0x7f0000004ac0)=""/66, 0x42}, {&(0x7f0000004b40)=""/160, 0xa0}], 0x5}, 0x2}, {{&(0x7f0000004c80)=@rc, 0x80, &(0x7f0000006100)=[{&(0x7f0000004d00)=""/184, 0xb8}, {&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/220, 0xdc}, {&(0x7f0000004ec0)=""/137, 0x89}, {&(0x7f0000004f80)=""/97, 0x61}, {&(0x7f0000006040)=""/188, 0xbc}], 0x6, &(0x7f0000006180)=""/153, 0x99}, 0xff}], 0x5, 0x10000, &(0x7f0000006380)={0x0, 0x989680}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000063c0)={r5, 0x1, 0xce38, 0x3, 0x100000001, 0x3f, 0x3}) ioctl$BLKRRPART(r4, 0x125f, 0x0) r6 = perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x8001) getsockopt$netrom_NETROM_T4(r6, 0x103, 0x6, &(0x7f0000000340)=0x1f, &(0x7f0000006400)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r7, 0x7f, 0x1}, 0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) 03:47:36 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80044501, &(0x7f00000000c0)=""/8) [ 1139.141153][ T2283] binder_transaction: 19 callbacks suppressed [ 1139.141171][ T2283] binder: 2265:2283 transaction failed 29201/-28, size 0-0 line 3147 03:47:36 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x29000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1139.275397][ T26] audit: type=1804 audit(2000000856.747:200): pid=2073 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir832457040/syzkaller.U1dLKM/1419/bus" dev="sda1" ino=17763 res=1 03:47:36 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x81, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000740)='\x00\b\x00\x00tinfo\x00\xb1x\xb4@/\xb6\x04+\x16\xd2)\x8a\n\x80\xd6\xb1\n\v\x13\x8d\x1a\xfb58p\x00\x89>\xd0]\x12\x9bT\xd9\x91\b\xcf|\xd8\xb5\xee\xceDM\xdf\x1d(\xa6lIt\x7f\xa5\x8b\xb8\xd5A\xc9\x8a\xe1Ga\xde1\xdfa\x1f\xc7\x10,\xa4\xedN\xa4\v/\x1d\x84\xd2\xad\x8a\xf9\xd2\x8a\xe2\xa6d\x97^\xb0l\xe1\xbf\xbc\xe6}\xcf \xa9\x15\x96\x83`5\xf8\xef\x04\xd0@\x96\xd8x\x18\xac\x9fu\xf1\x85nE\xd3\xab\xc7fBEIM`\xb9\x17\xd3\xe1w\x98\xb0\xf3v\x98\xa8\xf8\xdd\xdcN \xe4\xa5#e\x8a\xb6\xd7') ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000006780)=ANY=[@ANYBLOB="00000005007d00008e1b4cc70000000000000000"]) prctl$PR_GET_DUMPABLE(0x3) read(r1, &(0x7f0000000a80)=""/245, 0xf5) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000e00)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000280)=0x44) write$P9_RUNLINKAT(r3, &(0x7f0000000300)={0x7, 0x4d, 0x2}, 0x7) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000180)) syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0x0, 0x0, [0x9, 0x8, 0x0, 0xffffffffffff14af, 0x10000, 0x8, 0xff, 0xffff]}) linkat(r3, &(0x7f0000000680)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1404) fcntl$getownex(r2, 0x10, &(0x7f0000000200)) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x6, @broadcast, 0x0, 0x0, 'dh\x00', 0x0, 0x80000000, 0x16}, 0x2c) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x40, 0x0) recvmmsg(r2, &(0x7f0000006240)=[{{&(0x7f0000000380)=@nfc_llcp, 0x80, &(0x7f0000000a00)=[{&(0x7f00000004c0)=""/130, 0x82}, {&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000000800)=""/255, 0xff}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000b80)=""/199, 0xc7}, {&(0x7f0000000440)=""/24, 0x18}], 0x8, &(0x7f0000000c80)=""/205, 0xcd}, 0x1000}, {{&(0x7f0000000d80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000002080)=""/220, 0xdc}, {&(0x7f0000000700)=""/18, 0x12}, {&(0x7f0000002180)=""/4096, 0x1000}], 0x3, &(0x7f0000000f80)=""/100, 0x64}, 0x4}, {{&(0x7f0000003180)=@ax25={{0x3, @bcast}, [@rose, @netrom, @null, @default, @default, @rose, @netrom, @netrom]}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003200)=""/16, 0x10}, {&(0x7f0000003240)=""/209, 0xd1}, {&(0x7f0000003340)=""/222, 0xde}, {&(0x7f0000003440)=""/45, 0x2d}, {&(0x7f0000003480)=""/21, 0x15}, {&(0x7f00000034c0)=""/205, 0xcd}, {&(0x7f00000035c0)=""/124, 0x7c}, {&(0x7f0000003640)=""/77, 0x4d}, {&(0x7f00000036c0)=""/3, 0x3}, {&(0x7f0000003700)=""/157, 0x9d}], 0xa, &(0x7f0000003880)=""/143, 0x8f}, 0x3f}, {{&(0x7f0000003940)=@generic, 0x80, &(0x7f0000004c00)=[{&(0x7f00000039c0)=""/186, 0xba}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/8, 0x8}, {&(0x7f0000004ac0)=""/66, 0x42}, {&(0x7f0000004b40)=""/160, 0xa0}], 0x5}, 0x2}, {{&(0x7f0000004c80)=@rc, 0x80, &(0x7f0000006100)=[{&(0x7f0000004d00)=""/184, 0xb8}, {&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/220, 0xdc}, {&(0x7f0000004ec0)=""/137, 0x89}, {&(0x7f0000004f80)=""/97, 0x61}, {&(0x7f0000006040)=""/188, 0xbc}], 0x6, &(0x7f0000006180)=""/153, 0x99}, 0xff}], 0x5, 0x10000, &(0x7f0000006380)={0x0, 0x989680}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000063c0)={r5, 0x1, 0xce38, 0x3, 0x100000001, 0x3f, 0x3}) ioctl$BLKRRPART(r4, 0x125f, 0x0) r6 = perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x8001) getsockopt$netrom_NETROM_T4(r6, 0x103, 0x6, &(0x7f0000000340)=0x1f, &(0x7f0000006400)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r7, 0x7f, 0x1}, 0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) [ 1139.358550][ T2496] binder: 2430:2496 transaction failed 29201/-28, size 0-0 line 3147 [ 1139.397718][ T7952] binder_release_work: 19 callbacks suppressed [ 1139.397726][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:36 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2b000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1139.538084][ C0] net_ratelimit: 23 callbacks suppressed [ 1139.538092][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1139.549676][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)=""/8) 03:47:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80044584, &(0x7f00000000c0)=""/8) 03:47:37 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:37 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x81, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000740)='\x00\b\x00\x00tinfo\x00\xb1x\xb4@/\xb6\x04+\x16\xd2)\x8a\n\x80\xd6\xb1\n\v\x13\x8d\x1a\xfb58p\x00\x89>\xd0]\x12\x9bT\xd9\x91\b\xcf|\xd8\xb5\xee\xceDM\xdf\x1d(\xa6lIt\x7f\xa5\x8b\xb8\xd5A\xc9\x8a\xe1Ga\xde1\xdfa\x1f\xc7\x10,\xa4\xedN\xa4\v/\x1d\x84\xd2\xad\x8a\xf9\xd2\x8a\xe2\xa6d\x97^\xb0l\xe1\xbf\xbc\xe6}\xcf \xa9\x15\x96\x83`5\xf8\xef\x04\xd0@\x96\xd8x\x18\xac\x9fu\xf1\x85nE\xd3\xab\xc7fBEIM`\xb9\x17\xd3\xe1w\x98\xb0\xf3v\x98\xa8\xf8\xdd\xdcN \xe4\xa5#e\x8a\xb6\xd7') ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000006780)=ANY=[@ANYBLOB="00000005007d00008e1b4cc70000000000000000"]) prctl$PR_GET_DUMPABLE(0x3) read(r1, &(0x7f0000000a80)=""/245, 0xf5) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000e00)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000280)=0x44) write$P9_RUNLINKAT(r3, &(0x7f0000000300)={0x7, 0x4d, 0x2}, 0x7) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000180)) syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0x0, 0x0, [0x9, 0x8, 0x0, 0xffffffffffff14af, 0x10000, 0x8, 0xff, 0xffff]}) linkat(r3, &(0x7f0000000680)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1404) fcntl$getownex(r2, 0x10, &(0x7f0000000200)) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x6, @broadcast, 0x0, 0x0, 'dh\x00', 0x0, 0x80000000, 0x16}, 0x2c) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x40, 0x0) recvmmsg(r2, &(0x7f0000006240)=[{{&(0x7f0000000380)=@nfc_llcp, 0x80, &(0x7f0000000a00)=[{&(0x7f00000004c0)=""/130, 0x82}, {&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000000800)=""/255, 0xff}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000b80)=""/199, 0xc7}, {&(0x7f0000000440)=""/24, 0x18}], 0x8, &(0x7f0000000c80)=""/205, 0xcd}, 0x1000}, {{&(0x7f0000000d80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000002080)=""/220, 0xdc}, {&(0x7f0000000700)=""/18, 0x12}, {&(0x7f0000002180)=""/4096, 0x1000}], 0x3, &(0x7f0000000f80)=""/100, 0x64}, 0x4}, {{&(0x7f0000003180)=@ax25={{0x3, @bcast}, [@rose, @netrom, @null, @default, @default, @rose, @netrom, @netrom]}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003200)=""/16, 0x10}, {&(0x7f0000003240)=""/209, 0xd1}, {&(0x7f0000003340)=""/222, 0xde}, {&(0x7f0000003440)=""/45, 0x2d}, {&(0x7f0000003480)=""/21, 0x15}, {&(0x7f00000034c0)=""/205, 0xcd}, {&(0x7f00000035c0)=""/124, 0x7c}, {&(0x7f0000003640)=""/77, 0x4d}, {&(0x7f00000036c0)=""/3, 0x3}, {&(0x7f0000003700)=""/157, 0x9d}], 0xa, &(0x7f0000003880)=""/143, 0x8f}, 0x3f}, {{&(0x7f0000003940)=@generic, 0x80, &(0x7f0000004c00)=[{&(0x7f00000039c0)=""/186, 0xba}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/8, 0x8}, {&(0x7f0000004ac0)=""/66, 0x42}, {&(0x7f0000004b40)=""/160, 0xa0}], 0x5}, 0x2}, {{&(0x7f0000004c80)=@rc, 0x80, &(0x7f0000006100)=[{&(0x7f0000004d00)=""/184, 0xb8}, {&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/220, 0xdc}, {&(0x7f0000004ec0)=""/137, 0x89}, {&(0x7f0000004f80)=""/97, 0x61}, {&(0x7f0000006040)=""/188, 0xbc}], 0x6, &(0x7f0000006180)=""/153, 0x99}, 0xff}], 0x5, 0x10000, &(0x7f0000006380)={0x0, 0x989680}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000063c0)={r5, 0x1, 0xce38, 0x3, 0x100000001, 0x3f, 0x3}) ioctl$BLKRRPART(r4, 0x125f, 0x0) r6 = perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x8001) getsockopt$netrom_NETROM_T4(r6, 0x103, 0x6, &(0x7f0000000340)=0x1f, &(0x7f0000006400)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r7, 0x7f, 0x1}, 0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) [ 1139.695562][ T2704] binder: 2700:2704 transaction failed 29201/-28, size 0-0 line 3147 [ 1139.735466][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:37 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x5}}, 0xe8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x1c) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070009020000000000000089216d00"], 0x10}}, 0x0) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0x40, 0x81, 0x5}) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r3, 0x20, 0x3, r4) 03:47:37 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:37 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1139.936387][ T2820] binder: 2775:2820 transaction failed 29201/-28, size 0-0 line 3147 03:47:37 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x81, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000740)='\x00\b\x00\x00tinfo\x00\xb1x\xb4@/\xb6\x04+\x16\xd2)\x8a\n\x80\xd6\xb1\n\v\x13\x8d\x1a\xfb58p\x00\x89>\xd0]\x12\x9bT\xd9\x91\b\xcf|\xd8\xb5\xee\xceDM\xdf\x1d(\xa6lIt\x7f\xa5\x8b\xb8\xd5A\xc9\x8a\xe1Ga\xde1\xdfa\x1f\xc7\x10,\xa4\xedN\xa4\v/\x1d\x84\xd2\xad\x8a\xf9\xd2\x8a\xe2\xa6d\x97^\xb0l\xe1\xbf\xbc\xe6}\xcf \xa9\x15\x96\x83`5\xf8\xef\x04\xd0@\x96\xd8x\x18\xac\x9fu\xf1\x85nE\xd3\xab\xc7fBEIM`\xb9\x17\xd3\xe1w\x98\xb0\xf3v\x98\xa8\xf8\xdd\xdcN \xe4\xa5#e\x8a\xb6\xd7') ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000006780)=ANY=[@ANYBLOB="00000005007d00008e1b4cc70000000000000000"]) prctl$PR_GET_DUMPABLE(0x3) read(r1, &(0x7f0000000a80)=""/245, 0xf5) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000e00)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000280)=0x44) write$P9_RUNLINKAT(r3, &(0x7f0000000300)={0x7, 0x4d, 0x2}, 0x7) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000180)) syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0x0, 0x0, [0x9, 0x8, 0x0, 0xffffffffffff14af, 0x10000, 0x8, 0xff, 0xffff]}) linkat(r3, &(0x7f0000000680)='./file0\x00', r3, &(0x7f00000006c0)='./file0\x00', 0x1404) fcntl$getownex(r2, 0x10, &(0x7f0000000200)) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x6, @broadcast, 0x0, 0x0, 'dh\x00', 0x0, 0x80000000, 0x16}, 0x2c) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x40, 0x0) recvmmsg(r2, &(0x7f0000006240)=[{{&(0x7f0000000380)=@nfc_llcp, 0x80, &(0x7f0000000a00)=[{&(0x7f00000004c0)=""/130, 0x82}, {&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000000800)=""/255, 0xff}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000b80)=""/199, 0xc7}, {&(0x7f0000000440)=""/24, 0x18}], 0x8, &(0x7f0000000c80)=""/205, 0xcd}, 0x1000}, {{&(0x7f0000000d80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000002080)=""/220, 0xdc}, {&(0x7f0000000700)=""/18, 0x12}, {&(0x7f0000002180)=""/4096, 0x1000}], 0x3, &(0x7f0000000f80)=""/100, 0x64}, 0x4}, {{&(0x7f0000003180)=@ax25={{0x3, @bcast}, [@rose, @netrom, @null, @default, @default, @rose, @netrom, @netrom]}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003200)=""/16, 0x10}, {&(0x7f0000003240)=""/209, 0xd1}, {&(0x7f0000003340)=""/222, 0xde}, {&(0x7f0000003440)=""/45, 0x2d}, {&(0x7f0000003480)=""/21, 0x15}, {&(0x7f00000034c0)=""/205, 0xcd}, {&(0x7f00000035c0)=""/124, 0x7c}, {&(0x7f0000003640)=""/77, 0x4d}, {&(0x7f00000036c0)=""/3, 0x3}, {&(0x7f0000003700)=""/157, 0x9d}], 0xa, &(0x7f0000003880)=""/143, 0x8f}, 0x3f}, {{&(0x7f0000003940)=@generic, 0x80, &(0x7f0000004c00)=[{&(0x7f00000039c0)=""/186, 0xba}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/8, 0x8}, {&(0x7f0000004ac0)=""/66, 0x42}, {&(0x7f0000004b40)=""/160, 0xa0}], 0x5}, 0x2}, {{&(0x7f0000004c80)=@rc, 0x80, &(0x7f0000006100)=[{&(0x7f0000004d00)=""/184, 0xb8}, {&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/220, 0xdc}, {&(0x7f0000004ec0)=""/137, 0x89}, {&(0x7f0000004f80)=""/97, 0x61}, {&(0x7f0000006040)=""/188, 0xbc}], 0x6, &(0x7f0000006180)=""/153, 0x99}, 0xff}], 0x5, 0x10000, &(0x7f0000006380)={0x0, 0x989680}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000063c0)={r5, 0x1, 0xce38, 0x3, 0x100000001, 0x3f, 0x3}) ioctl$BLKRRPART(r4, 0x125f, 0x0) r6 = perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x8001) getsockopt$netrom_NETROM_T4(r6, 0x103, 0x6, &(0x7f0000000340)=0x1f, &(0x7f0000006400)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r7, 0x7f, 0x1}, 0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) [ 1139.996024][ T2820] binder: 2775:2820 transaction failed 29201/-28, size 0-0 line 3147 [ 1140.036761][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 1140.050878][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:47:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80084502, &(0x7f00000000c0)=""/8) 03:47:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:37 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:37 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x180000000000, 0x0, 0x2, 0x9}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f00000000c0)={r2, 0xfff}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) close(r0) [ 1140.338028][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1140.339081][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1140.344001][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1140.350028][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1140.363409][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1140.369471][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1140.423598][ T3034] binder: 3030:3034 transaction failed 29201/-28, size 0-0 line 3147 [ 1140.454331][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:38 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:38 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000080)=""/246) read(r0, 0x0, 0x3c8) socketpair(0x17, 0x2, 0x8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x7, 0x0, 0x8000, 0x7, 0x2, 0x6, 0x3, 0x5, 0x0}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r2, @in={{0x2, 0x4e24, @remote}}, 0x7fffffff, 0xfffffffffffffff9, 0x8, 0x891, 0x4a}, &(0x7f0000000300)=0x98) socket$vsock_dgram(0x28, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8a, 0x4) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) 03:47:38 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0xd81, 0x0, 0x8, 0x42, 0x7, 0x9, 0x40, 0x1, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)={r1, 0x0, 0x3, [0x6, 0x100000000, 0x6]}, 0xe) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x40040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, r2, 0x0) r3 = socket(0x10, 0x2, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x4002, 0x0) write$P9_RSTAT(r4, &(0x7f0000000100)={0x5a, 0x7d, 0x1, {0x0, 0x53, 0x0, 0x0, {0x40, 0x0, 0x6}, 0x40000000, 0x5, 0x100, 0x1, 0x6, 'vmnet0', 0xe, 'veth1_to_team\x00', 0x0, '', 0xc, 'bdevself}em0'}}, 0x5a) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000013001107000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c000100aaaaaaaaaabb0000140003007665782a92af261abe0a65616d000000"], 0x40}}, 0x0) read(r2, &(0x7f00000001c0)=""/44, 0x2c) 03:47:38 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1140.662465][ T3293] binder: 3291:3293 transaction failed 29201/-28, size 0-0 line 3147 [ 1140.681409][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80084503, &(0x7f00000000c0)=""/8) 03:47:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1140.817960][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1140.823877][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1140.907211][ T3509] binder: 3414:3509 transaction failed 29201/-28, size 0-0 line 3147 [ 1140.947593][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:38 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffff8, 0x101000) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2f, 'pids'}]}, 0x6) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000100)={0x0, 0xffff}) 03:47:38 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x50, r0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x400000000000a) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80003f000000) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) 03:47:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80084504, &(0x7f00000000c0)=""/8) [ 1141.133035][ T3747] binder: 3739:3747 transaction failed 29201/-28, size 0-0 line 3147 03:47:38 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1141.193053][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:38 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000080000001d0000000000b92520f6c243141ca99ab42f775400009500000000000000"], &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 03:47:38 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1141.418106][ T4013] binder: 3975:4013 transaction failed 29201/-28, size 0-0 line 3147 [ 1141.445472][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:47:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80104592, &(0x7f00000000c0)=""/8) [ 1141.675226][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:47:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:39 executing program 4: syz_init_net_socket$rose(0xb, 0x5, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f00000003c0)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB], 0x1) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000140), 0x5d) setsockopt$inet_tcp_buf(r0, 0x6, 0x2d, &(0x7f00000001c0)="3194ef8eed7364b52511634dd5d9adc6ce623e155b27fb1763e379489234529ab4fa53e97d060e96e57f5b289b41da3a01b678f658fa22a832510576d8e6dca5b250ab946d92a927fba93b2542b457e7b82c5c39c884ad9a3bdd1d8ffae714b3ac0b72125383d602b48471ec16956774f4b0fb24e50d39faf6", 0x79) 03:47:39 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800e0000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000040)) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00') ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000000c0)={0xff, 0x2, 0xfffffffffffff801, 0x9}) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2, 0x80000000}}, 0x10) r3 = socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x8) fcntl$addseals(r1, 0x409, 0x8) renameat(r3, &(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000240)='./file0\x00') setsockopt$inet6_buf(r1, 0x29, 0x1c, &(0x7f0000000280)="62ed63df40ec88d39571fb9d35e81c37e6eb822b42f0710d6202ff71056812bb86717d606aa90e1c35d611d654269c182a88acdafcf8033f4e8cb3ce8f0c421e47258076002850f5e4ab7bf397910a9c861cb86228b07d3b76806ad40eb683025647aa70fbcb", 0x66) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x5, 0x1ff, 0x400, 0x6}, &(0x7f0000000340)=0x14) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000380)={r4, 0x4, 0x81, 0x0, 0x6, 0x3}, 0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, r1, 0x0, 0x18, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0xffffffffffffffff}, 0x30) move_pages(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000480)=[0x7, 0x4, 0xff, 0x7f, 0xfe00000000000000, 0x7, 0x8, 0x7], &(0x7f00000004c0)=[0x0, 0x0], 0x4) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000500)='tls\x00', 0x4) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000540)={0x8, 0x6, 0x0, 0x100000001}) fcntl$setown(r0, 0x8, r5) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000580)) write$UHID_INPUT2(r1, &(0x7f00000005c0)={0xc, 0x30, "287d8dbbe3e948d3b9bead12738a090a7a120f5ace852b49340e47fadf3553bb185042f267b70d5ea59dd63fc593fb4b"}, 0x36) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000600)={0x6, 0x2, 0x3, 0x3000000000, 0x9, 0x800000000, 0x2, 0x3, 0x9, 0x5, 0x8, 0x6c5fa3ed}) socket$kcm(0x29, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000640)={r4, 0x9, 0x52, "7ee411577635bc2a11fba69eebfdd6b057d882e3269a2310fb3e224b87ce213a6e48964f1162e7946c443e37e33c39e7f6fd64eb26bee4abb07762f0320a2308d23b629b4391a1c5a6979262718a974b5b81"}, 0x5a) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) sendto$inet6(r1, &(0x7f00000006c0)="51b7545e1b9b247365542a9d45a1231bc3a400202fbf3ce9f002e5986b0d798415c3e140b1bbb26eb2a4ed5188922a27971904d038e65177d338c8d249d712154fde5822decdf37060ea180569a25134f76a867ca1d626cd5437f95709c8ada63500b9354f32e19398a5f24086a8836486e6306328ee2a77784c2f7e8b8b8c3be2ae0f5608a74280eaf1e7625ef89a025b3f353909c75ebf3c616f3eb23c696aef43a1fd293c1a29dbcca7504c45d7846a02c1473e9931d987d56bbc2b4977fd436d1d135ea68be685434f32796e9ba105fae3c123aed4478f73", 0xda, 0x40, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000007c0)={r4, 0x3, 0x6, [0xa0, 0x6, 0x1, 0x3, 0x7f, 0x2]}, &(0x7f0000000800)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)) 03:47:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0xc0045878, &(0x7f00000000c0)=""/8) 03:47:39 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80350000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:39 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x4, 0x4, 0x2, 0x9}, 0x2c) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 03:47:39 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001cc0)={0xffffffffffffff9c}) sendmsg$kcm(r1, &(0x7f0000001e40)={&(0x7f0000001d00)=@ipx={0x4, 0x80000001, 0x2, "861edb1b796d", 0x100000001}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000a80)='cpuacct.usage_percpu_user\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x3) r4 = socket$kcm(0xa, 0x5, 0x0) io_setup(0x7, &(0x7f00000002c0)=0x0) io_cancel(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000ac0)="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", 0x1000, 0x9, 0x0, 0x1, r3}, &(0x7f0000000380)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000440)={{0x3, 0x1, 0x8, 0x3, 0x8}, 0xd52d, 0x1, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0x1, 0x4, 0x9}) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@in, 0x80, &(0x7f0000000540)}, 0x0) sendmsg(r4, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)='m', 0x1}], 0x1}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="45964a5c4f0f00fe2a6cf6aa2676cdb4b40edaa04797eb96de8e70e69843121a053a5f623745e0be803d3fa8486aca42036863a427c65ddc2680f83a3c700352aa7ec8425ec334dccd971a3fa82d802788e36b9c7333f5d97a96d176394107b89fac6c3f451539c659fbf390cea3da54439d0774461975aea79ac7581fe4"], 0x0}, 0x48) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1ed1, 0x4, 0xffff, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100100000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x6, 0x7}, 0x0, 0x0, r2, 0x10000002) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, &(0x7f0000000000)='ip6gre0\x00') 03:47:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:40 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0xc0045878, &(0x7f00000000c0)=""/8) 03:47:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}], 0x24}}], 0x1, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x220000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000140)={0x0, 0xfff, 0xa, [0x10001, 0x0, 0x12, 0x200000, 0x8, 0x5, 0x5, 0x2c45, 0xfffffffffffff6ca, 0xece]}, &(0x7f0000000180)=0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x6}, 0x8) 03:47:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:40 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:40 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x40002, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x3) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'ip_vti0\x00', @ifru_data=&(0x7f0000000040)="635e9537d475cf912822b8b3532ee1cf3be4469deb510465c9eb58cbd8641d57"}) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)=0x0) ioprio_set$pid(0x2, r2, 0x5) 03:47:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:40 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@null) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) r4 = gettid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000011c0)=0x0) getresuid(&(0x7f0000001200)=0x0, &(0x7f0000001240), &(0x7f0000001280)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000012c0)={0x0, 0x0, 0x0}, &(0x7f0000001300)=0xc) sendmsg$netlink(r1, &(0x7f0000001380)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x800}, 0xc, &(0x7f0000001180)=[{&(0x7f0000000240)={0x570, 0x18, 0x0, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x8, 0x75, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x47, @u32=0x5}, @typed={0x8, 0x8, @u32=0x3}, @nested={0x178, 0x63, [@generic="8eb61d1cee612a9d350e2f214ac260785e18f0d63c0f45bba13c4b575b80e2656976541d853bf2665be893b0a6fc04c42394476e79191c99194167eeda918be61f372048c2c1d9b516b6f43543649369ffc63ebc565a8dba43bc777420d2a12ebdf2079b899cbad4b0ee5b63", @typed={0x8, 0x16, @fd=r0}, @typed={0x8, 0x2e, @uid=r2}, @typed={0x10, 0x2c, @str='ppp1nodev\x00'}, @generic="a0910ebeb56a42726134db9d0ec074e9b2eff824b08057e450be5830e42f8e8b29d1f8d8ff63bf4f7c88fdf686049b601914ba6b61c4c6bf22809c246414c675c6387d74f76ea9105dc376e429712fb842577c52be74180d2a36e4523094db", @generic="afb5e6a709677c9de93d02743678448aa305d837c4a818a2bd83219169f64d15f62160548cf7ecc9128b8c65208f42c7f0494d1314f0e96f80b15e5f7265fe7400314cc64cda012e1562e8d3bb9134d95640290b66f05a2971cc64f58dbe437a4eb338fd69077ab28e0810b308a9e12ff38758044c65a28395cf5296e7151069ff1f379aa2e6"]}, @typed={0x4, 0x60}, @nested={0x154, 0x95, [@generic="75ea790a9bdc0bc022ea3cdd9d12036711f6d6490f819ec74d15c14c9f7b632f13a28299be87eeaee646495e03f4f07a3091e3dbc893b27e6b0ec7e747086f548c2c83ad515fd21f5bbde0d83b08e5e75d382aa237df3dd64bf7d54d51c1398fe35ec0e7cdbdb4900722fab40eb8f2ad5c8e50312107e8c9bff4768487504bf3ac57f87917e01e8605acec958a38aaa7e3943236812363fa6c3c5ea8e25ba232e7bf96fe1c28eeac4088b2a9bfbc65e061c0f2405f596cbc309aa41806", @typed={0x8, 0x26, @uid=r3}, @generic="36f0f08454c5875c18f87e64d18de4d3964e70ebb5f262a747b9639905602e2d0218609e897c78cf1e2167eb0dd36c8727309921fd4bb4d9a6d6a7d62f1df94a302e35810ffdde6251a72ee5389c9f21e5a6c5a573d949382291314bbfa38c77d9af79bd6a80684818e69d7fd74a450b9839a4b4afc65b5fa29c83a26a4c5e29c86f8d154af84c95"]}, @typed={0x8, 0x8, @u32=0xfb32}, @nested={0x270, 0x2a, [@generic="0d72e83807294399e2c3a6348db4f0718370c6b67b7b20e76960ae17b8bc40d7029e232910005bfffee225588ca0e0918127715166cfd89a9efaae3a7d0b172a52249192b946859961ec8f17a79949c6d609a56e9c184e7f333496644fc313014453713ec2614d4b19e0c4aa97457d7b418e9ae8a55d9ff31355d41de36284db9e62e358a618d5ff03d42f5e4fdeac788aaa8d3107f5237d42adc3c8513b0011587526a60acc3595739848fe682b9f898a", @typed={0x8, 0x79, @str='\x00'}, @typed={0xc, 0x36, @u64=0x1}, @generic="104a1ba3aeb96a78e4abae2a85bc5fefc500ac04f50332403b0f4a4127c149a3d30a6a210a1b37d2dc352fa902ba6dcc64fd1682718d877234a511266a87cb09a2ccc72d60f4b832960a1d33141354890f5648a3efee7f8e9dc284903cf58d32c50a1b13f65d5c03024c0940e75b1b4ffac3801d67cc1e479fb890112a81586f214bc9cbbb59478b46c8ff7747bd7ae048c9a1319095", @typed={0x8, 0x91, @pid=r4}, @typed={0x8, 0x43, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="9087b84126fb156b1c008a7388dfeb950266d43adf6595229faf381835bb44314a0ee4ce71a2244f17ab68b1c51316f68b5f980063fcce39eeed806411e7c864e9c62dc473ee61e119295f046dbda4986a0e2d7890fd0fa4f7afd3981b7ed78cdfcfb982960de48f88e6fef8b9cfaa08e8123f673b72f178d9551a67ff6d6ddf01c16dcb49249f13910a70efcca9af18a38064b4b3e2607b825f374895a80d9fcf15e267791fac8d2dc3060efe4e911c12402cd0ee66befcbfdb54145f8c5cf41fa8e7b2b7dd7609e4de6dc08e19b424dd62f3043ab28967b060fcd73ea4924eb58961e23aeef10894393a24a2574b7997130bd2fb21f845", @typed={0x8, 0x59, @u32=0xfffffffffffffffe}]}]}, 0x570}, {&(0x7f00000007c0)={0x1a0, 0x38, 0x200, 0x70bd2a, 0x25dfdbff, "", [@typed={0x8, 0x82, @fd=r0}, @typed={0x8, 0x5, @fd=r0}, @nested={0x70, 0x8b, [@generic="c1f2abcf6dc188ba401a480b45449e04fe6651154bb0400d314dbf5b5f83a4275e43a9b0df82034dfc3059d536cb89f8566de076b4d41da7b2ff83705aa479dea5176cd7cf3a38508897dcceddbea315864cacb12440bce234c13f7871c59e02e6010020f14a7e4068"]}, @generic="718edac8fc12308fcc2c5c825492", @generic="072afd5f30965e39294f52e96c25a9db06fa61de4e168ce8caef885e8c06bb2b34788d5ccbf7d62859d2bd76f58f78015fdcdc291222e6e93b1ba448c88853bd4f673134042dae755d676f35f4f66850c518df12b626309fea587a4dd7944456de40fee737dfa6b86cdbff47f3a14fc5055d1a06a320f71c06b33400f88f97e5dbb65c34f704942627f1d09eaf561f887ee7", @generic="bea460f579cae03c2fb42746cf118dde51e618b1857bed96e2e2fb0ebbbc5c1988dafbed66d1be9e55a8ece1333abe6a84d601146d1e0baecebc5f4724ddef8cdfd0c19667fdc376f9bde8061ea78343f1441b326d347231d1e36f2099361e64d98d00c10401d675086897588cd381"]}, 0x1a0}, {&(0x7f0000000980)={0x7c8, 0x10, 0x6, 0x70bd26, 0x25dfdbfe, "", [@generic="2fa43b40ec813e8b6bc02305d996a63e3c3a3795a21da6c465ebda78a33ff82968ec92ae87851398a47c91c06121cd1e441a27126bff4c2e32d86e2c6a4b0e02dd5db5ff61fbf5b7da173d8bc92d5b42cebe3a36e4aae4fe3f81bd5eef998f3012862f21f1d4e20419", @nested={0x1b0, 0x79, [@generic="0557b84a29d154c86fef6cc917d005b571c22b5b72aca9a84ff6c2a0b1bba15d121e9ee484cadf37426a25947a7fd4c7a6c9bb178ee03ff4bd5e2edabf1fff3455343bcab0e6d09b5c4c924a51a8180c823f02860b1d0ed5593cf55b409e81328d30661348f87ac815b80f040f00312f4b3f332151e3416142710d95861ec34137de545dc6c7a869a46db0984a1fb277dce9f6ddfbfd36da39226fec4b63667ab95e47dd8d51c22325cbe1257fa45f10a413ac808c61", @typed={0x8, 0x8c, @fd=r0}, @generic="03ac281f9a4b1d702e874cbc47064790112684b85315fd8a3ce9bbbb8d2f6e4437e33462f2862eff44b4c9aee509c0da6994df44d8d5aad45a4eb775ae234a364e615a8ee0725ac5aa7ea21f551cd02a3b877af90fdac54465a899fac8a06c5a59e3884e07639e9ff9af43add824fbff8a6dff2e5f70d9c97b78635e8ca47274c3d74489e38620ab5dcf5553deb2221690568e3fbd42", @generic="e547c0aa86d19799fb60bb72ed7bd62e356314883f22d0a51102a210a576d5ce9e87d83820675b0f4dc63843857ab391cd92", @generic="793ab654873a660318960e96ac35c4f015857f41271e5554dc21bd95375e297fe114acb69bb0"]}, @nested={0x40c, 0x27, [@generic="45804fd7196a84027c9c00aece93d04a9e7f95e2380b3c9385f62d7d31be9924b3e9bc45a2c67dd63dfa189a2e673cbccb0931c26937da56e754aa6fabb5e2381f3d023d976709d53c8847c7c6c70ec37c5cfeb774edbdeaa26b844fa99868f1c60711b722f9640995f0807b8397e5adb6a949325cda2f93ed91d6647dbce85c98bd90825ff89d69384190bed0a2a342597b39fbaa5614d4ac0b29dbf36b59c67eab8659dc1ae75709eb05f87e41414a567e139f36788b4882b3", @typed={0xc, 0x96, @u64=0xa18}, @generic="489b040a24671d449ab2c523c63961d7600b51b1d4ccb155c1ae1a18eb374afb3293549b6413b1957ba3f02368c43dc7d98e74cc53c02a9be5598566a7ac5dbc1c96706f2b5215d5f6ddacbbe1d1f9c67677fc75b74f17df02ea82197d7cd4287b6899d34722d607a90841363484d7a6ecf08b6288ac2eb067c8477f6993d537d1a9c1eaa88a92aefa1533c1eec9c5ddcb73ef2e5dc7796ee5fc397931a8b31461d01d2144dc059cf40bb41f96c4", @generic="67cc489f3dd8497710a3de79f752b1cd129c2d356d6864ddaeb012185c8bc60c32fd3122ccd5fea629f9332ac9dc54177ae652d65870cabe84b4e21faa575f5261c98f52ba1cb398e6bc3920a6ae6c4e59af0bb3dca16e9c6d0ef3d1f507c5711fdf8deeaa87c9a269071902795c7867b79a906e16d8c587a6f5dac27109e2952df3100d518f88c3b10704aca7e70e6cea9017dcf936006984e05e9ec714b9cc6a5ca9b3b1cdc967c46fab52074b347dcbfe", @typed={0xc, 0x59, @u64=0x6}, @generic="90b8289bfff7c53e409f60b465eb52a38c3c88149255058231c0bbd5cd2a45fe64066af862ab197f18af5eef7894719cbd8eadf3aab17a228fbf705e26e4d3faf5d00a0121a76371e2f119ae5f8c2cef249751d000418151678b332467fd67b04abb6a37abffcce684ed9b5f23528e1bf57a8d20834aec63139b9fae1985ec7f6cac59e71092c4238d49d29f25dbf6380e7f399cec798dc87aaacaf70a2c2936b648c9435f016739d7463461b3d7671461390827a63220b63eb4252c54", @typed={0x14, 0x4a, @ipv6=@rand_addr="c6c76a8723d6784a8e20f1c5014ff989"}, @typed={0xc, 0x77, @u64=0x211}, @generic="765c54d0758110d1f6677c2de835e4b3deab40ce7cd3038d10295c08b082f02869c3edfc58f4ccda307b9ab662a9649d7b3e79c76fdffcb3b078ae8be8d86d1992eac0b66e905980cd5988c53afa8058b6ee0b6e1274ddc5d2ac9bfd3b0d3b4587a24c6cce3cf2e009cab0a4a71776f1554c7db851ac448081670ac9d1d11e085b38a7289af346fce5a615ffa873b6613defc57e495342068f694626dc454452c27a5609a0b1895f84059e7942240e3064d842c381aebc11e6638a30a7f3a21ca8d83ec564ebb532a83caf174cefa2c028c00965458405de264c5b19ea687e02806ccac9135372acbf2f3994511da9", @typed={0x8, 0x8d, @u32=0x1}]}, @nested={0x88, 0x43, [@generic="f1b699b9f29a26f9b4e77c335d642c989a98d18447eaae412c4663da5feae9dc5397d052e272f4f90afef1e10d66465b62f42ca1ba0f514bace8290adf4cd932b41afc8fe987a082d25e541c5f2241264a351df7708d01cb8d33b90aa5ee2f4573c04432b5197acc9f2f5fdd24f7d8f1d8cf09f04407cbdbdca7ef09f4dac0d6d6"]}, @typed={0xc, 0x79, @u64=0x1ff}, @generic="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"]}, 0x7c8}], 0x3, &(0x7f0000001340)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x20, 0x40}, 0x40) 03:47:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0xc0189436, &(0x7f00000000c0)=""/8) 03:47:40 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:40 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88640000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:40 executing program 1: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x20000800) r0 = syz_open_procfs(0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0xc, 0x0, "54c7a3397dc86ef862fdd12d526db579ff5a6c5f5a3a56d7147de7cd6caf8e8731f36198ac01dab7c343b9c9405fa3d1e48afb33d637c25f5222f76e45c26602", "6ad6267a44f96680ac78b3292a014d5e48d4cfb0e1bbea9395b287427f350bde", [0x6, 0xffffffff80000001]}) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) gettid() memfd_create(&(0x7f0000000a80)='\xa3t,\x13\x8d\xd3\x84\xa0\xbfG\xa6\xcb\xcd\x1f\xafzf\x00V\x18\x13#\xac[\xee\x12|\xc9\x12\xd9\xf3\xef<\x10/\x8b\xcf\xdas\x94 \xc3\xa91_Q\xcb]\xfe\xa3e?\xdd\xae\x88(\xbe\xb7\xe6`\xcf\xd3\b{\b8@\x8e\x7f):\xce\x8c\xb9sw\x16\xeak\xc9\xac\x19\xca}\xb1\xa8\x008\x9cb$q\x95zG\x8d\xd1XA\xc3\x93DsK\x16L\x84\xa5\a\x9aT\xfb\x1aM\xb5Z0\xb9)?\xa4\xd3\x18', 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff, r0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x8c, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x5}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x8810) utime(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x6ad}) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) getxattr(0x0, 0x0, 0x0, 0x209f73f0858629f3) stat(&(0x7f0000000540)='./file0/file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000500)='overlay\x00', 0x8000, &(0x7f0000000840)={[{@metacopy_off='metacopy=off'}], [{@appraise='appraise'}, {@fsname={'fsname', 0x3d, '\xa3t,\x13\x8d\xd3\x84\xa0\xbfG\xa6\xcb\xcd\x1f\xafzf\x00V\x18\x13#\xac[\xee\x12|\xc9\x12\xd9\xf3\xef<\x10/\x8b\xcf\xdas\x94 \xc3\xa91_Q\xcb]\xfe\xa3e?\xdd\xae\x88(\xbe\xb7\xe6`\xcf\xd3\b{\b8@\x8e\x7f):\xce\x8c\xb9sw\x16\xeak\xc9\xac\x19\xca}\xb1\xa8\x008\x9cb$q\x95zG\x8d\xd1XA\xc3\x93DsK\x16L\x84\xa5\a\x9aT\xfb\x1aM\xb5Z0\xb9)?\xa4\xd3\x18'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_eq={'euid', 0x3d, r3}}, {@dont_appraise='dont_appraise'}]}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 03:47:40 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/117, 0x75, 0x4c) 03:47:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0xc020660b, &(0x7f00000000c0)=""/8) 03:47:41 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:41 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x89060000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:41 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3bc864c88021a886}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe8, r1, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @mcast2, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) 03:47:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:41 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x89ffffff]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:41 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x6, "f3376b64e9ed"}, &(0x7f0000000140)=0xe) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r1, 0x2}, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000000c0)=""/8) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000240)) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={0x5, 0x80000000, 0x4, 0x0, 0x800, 0xb, 0x10, "e2a4ace3da239d8f203bb027eca9b9e97bc79014", "bcd48bad6ac2b481accc72f8bef8e922a2d4ec47"}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, r2, 0x0, 0x1a, &(0x7f0000000300)='keyring!\\-\'@selinux%wlan0\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x607a2779, 0x9, 0x9, 0x100000001, 0x0, 0xffffffffffffffff, 0x80, 0x4, 0x9, 0x8, 0x9, 0x7, 0x9c3, 0x3, 0x222f, 0x8000000, 0x2000000000000000, 0xfffffffffffffffc, 0x11a, 0x80000000, 0x6, 0xf87, 0x0, 0x2, 0x81, 0x6, 0x10000, 0x400, 0x1f, 0x6, 0x3, 0xffffffff, 0x6, 0x8, 0xfff, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x1, 0xff}, 0x3002, 0x0, 0x20, 0x5, 0x0, 0x74, 0x7f}, r3, 0x7, r0, 0xb) recvmsg(r0, &(0x7f0000001600)={&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/81, 0x51}], 0x3, &(0x7f0000001540)=""/165, 0xa5}, 0x2000) 03:47:41 executing program 1: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x20000800) r0 = syz_open_procfs(0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0xc, 0x0, "54c7a3397dc86ef862fdd12d526db579ff5a6c5f5a3a56d7147de7cd6caf8e8731f36198ac01dab7c343b9c9405fa3d1e48afb33d637c25f5222f76e45c26602", "6ad6267a44f96680ac78b3292a014d5e48d4cfb0e1bbea9395b287427f350bde", [0x6, 0xffffffff80000001]}) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) gettid() memfd_create(&(0x7f0000000a80)='\xa3t,\x13\x8d\xd3\x84\xa0\xbfG\xa6\xcb\xcd\x1f\xafzf\x00V\x18\x13#\xac[\xee\x12|\xc9\x12\xd9\xf3\xef<\x10/\x8b\xcf\xdas\x94 \xc3\xa91_Q\xcb]\xfe\xa3e?\xdd\xae\x88(\xbe\xb7\xe6`\xcf\xd3\b{\b8@\x8e\x7f):\xce\x8c\xb9sw\x16\xeak\xc9\xac\x19\xca}\xb1\xa8\x008\x9cb$q\x95zG\x8d\xd1XA\xc3\x93DsK\x16L\x84\xa5\a\x9aT\xfb\x1aM\xb5Z0\xb9)?\xa4\xd3\x18', 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff, r0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x8c, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x5}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x8810) utime(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x6ad}) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) getxattr(0x0, 0x0, 0x0, 0x209f73f0858629f3) stat(&(0x7f0000000540)='./file0/file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000500)='overlay\x00', 0x8000, &(0x7f0000000840)={[{@metacopy_off='metacopy=off'}], [{@appraise='appraise'}, {@fsname={'fsname', 0x3d, '\xa3t,\x13\x8d\xd3\x84\xa0\xbfG\xa6\xcb\xcd\x1f\xafzf\x00V\x18\x13#\xac[\xee\x12|\xc9\x12\xd9\xf3\xef<\x10/\x8b\xcf\xdas\x94 \xc3\xa91_Q\xcb]\xfe\xa3e?\xdd\xae\x88(\xbe\xb7\xe6`\xcf\xd3\b{\b8@\x8e\x7f):\xce\x8c\xb9sw\x16\xeak\xc9\xac\x19\xca}\xb1\xa8\x008\x9cb$q\x95zG\x8d\xd1XA\xc3\x93DsK\x16L\x84\xa5\a\x9aT\xfb\x1aM\xb5Z0\xb9)?\xa4\xd3\x18'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_eq={'euid', 0x3d, r3}}, {@dont_appraise='dont_appraise'}]}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 03:47:41 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1144.248803][ T6112] binder_transaction: 14 callbacks suppressed [ 1144.248827][ T6112] binder: 6106:6112 transaction failed 29201/-28, size 0-0 line 3147 03:47:41 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:41 executing program 1: mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x0, 0x40, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r5, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0) close(0xffffffffffffffff) 03:47:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:41 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) [ 1144.524295][ T6223] QAT: Invalid ioctl [ 1144.569193][ T6226] binder: 6224:6226 transaction failed 29201/-28, size 0-0 line 3147 [ 1144.636151][ T7952] binder_release_work: 14 callbacks suppressed [ 1144.636158][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 [ 1144.992965][ C0] net_ratelimit: 22 callbacks suppressed [ 1144.992990][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1145.005102][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") write(r0, &(0x7f00000000c0)="f0dc966d27daa86120c685ced84023ab67a89f4ce3816f391d184b33fc99143f7bebf5512f43604fabc322428c4b14fc5bb47978982b0fb7c7deafd0ee202734ed2afbed4cd70bc28c272f2fdadd86bce15eec325a6c61263a5fbd648a7ea7d02663bd2ad0a9453ef4d3752a880f98ba1369c7161479ce6728687172072c7622d209eb3d3b425b411b980e913e7f461dda5863146f862950399ba9d3a7fe5f67f2be5a11b46fa23b4a", 0xa9) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x201, 0x2) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x20323}) 03:47:42 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdd86]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000200)="e5cdfc7a888f0ae969ec1b6063b9eb3307509819842c18c551ff548899732c8c8955d01bf4ae5052ad5140e9cdd8ef4364c52ae46d1214e76c59d7a2a3ddc8781c549ddd9e60194bc1ee1bf281fee417f809ea5ca320a2dbf8de724657f10d22ad75f082a4487b09f49a8803e306bf172a5c2f848e7ec835319b635c19f43f51719e1bae29a6d36f605fbceaab3fa312540bc436f03d7da7b58d34e3226e84d83aade41d62d5aec0fac336939e8fc9e8a8b0", 0xb2, r1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) r2 = shmget$private(0x0, 0x2000, 0x5400021a, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f00000002c0)=""/131) 03:47:42 executing program 1: r0 = semget(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(r0, 0x3, 0x3, &(0x7f0000000080)=""/205) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000580)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x4, 0x0, {0xa, 0x4e21, 0x9, @ipv4={[], [], @local}, 0x1}}}, 0xfffffffffffffeeb) r3 = open(&(0x7f0000000500)='./file0\x00', 0x410240, 0x166) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0xffffffffffffff11, 0x3e4, 0x3, 0x8001, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x840, 0x20000, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x0, 0x1000000, 'wrr\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x2) r6 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x200000000000002) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000680)=0x3ff, 0x8) r7 = fcntl$dupfd(r4, 0x406, r4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000300)=0x8, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) sendfile(r4, r4, &(0x7f00000000c0), 0x6) pselect6(0x40, &(0x7f0000000100)={0x3f, 0xfffffffffffffffc, 0x5, 0x200, 0x401, 0x2, 0x607153fe, 0x100000001}, &(0x7f0000000140)={0x5, 0x1, 0xc53, 0x401, 0x9, 0x2, 0xd75c, 0x100}, &(0x7f0000000180)={0x2197, 0xbc, 0x40, 0x400, 0x3, 0x7}, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x2}, 0x8}) ioctl(r5, 0x800000000008982, &(0x7f0000000080)) signalfd4(r6, &(0x7f00000003c0)={0x4}, 0xffffffffffffffb0, 0x80800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r9 = socket(0xd, 0x10000000002, 0x0) ioctl(r9, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x8180, 0x0) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000480)=[@vmwrite={0x8, 0x0, 0x8, 0x0, 0x8e, 0x0, 0x5, 0x0, 0x1000}, @cstype3={0x5, 0x6}], 0xffffffffffffe0a) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000640)=ANY=[]) 03:47:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) [ 1145.298046][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1145.303912][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1145.322903][ T6639] binder: 6636:6639 transaction failed 29201/-28, size 0-0 line 3147 03:47:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1145.351946][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:42 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1145.467519][ T6776] binder: 6765:6776 transaction failed 29201/-28, size 0-0 line 3147 [ 1145.524427][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:43 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x42, 0x0) r1 = memfd_create(&(0x7f0000000180)='/dev/vga_arbiter\x00', 0xfffffffffffffffe) write(r1, &(0x7f0000002000)='/', 0x1) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='3'], 0x1) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@int=0x10001, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 03:47:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:43 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff89]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x57661d37, 0x200) [ 1145.694878][ T6964] binder: 6963:6964 transaction failed 29201/-28, size 0-0 line 3147 03:47:43 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x71c) ioctl$VT_ACTIVATE(r0, 0x5606, 0xd31c) [ 1145.742799][ T6964] binder: 6963:6964 transaction failed 29201/-28, size 0-0 line 3147 [ 1145.759372][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 [ 1145.775880][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 [ 1145.782880][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1145.782931][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:43 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)='\n', 0x1) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x2, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) [ 1145.963528][ T7187] binder: 7180:7187 transaction failed 29201/-28, size 0-0 line 3147 [ 1145.997604][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 [ 1146.008332][ T7187] binder: 7180:7187 transaction failed 29201/-28, size 0-0 line 3147 03:47:43 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1146.039532][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:47:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0xffff, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x6) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x20, 0x100) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x44, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x40054) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) 03:47:43 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:43 executing program 1: r0 = socket$inet(0x10, 0x2, 0xc) socket$inet(0x2, 0x80004, 0x20) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010407051dfffd946fa2830025200a0009000100031d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:47:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000001700)={0xffffffffffffffff}, 0x84000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001740)={0x4b0e, 0x1, 0x200, 0xfff, 0x0}, &(0x7f0000001780)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000017c0)={r3, 0x6}, &(0x7f0000001800)=0x8) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xf}]}}}]}, 0x3c}}, 0x0) [ 1146.232653][ T7494] binder: 7491:7494 transaction failed 29201/-28, size 0-0 line 3147 03:47:43 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1146.290709][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:47:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:44 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket(0x8, 0x4, 0x9d) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xa8, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x5}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3fcd}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x48000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) [ 1146.483168][ T7709] binder: 7699:7709 transaction failed 29201/-28, size 0-0 line 3147 [ 1146.510477][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:44 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x800) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x40189206, 0x2000007e) [ 1146.577998][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1146.578034][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1146.583897][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1146.589715][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:47:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @empty}, &(0x7f0000000140)=0xc) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3, 0x4001) connect$inet6(r1, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) r2 = socket(0x10, 0x807, 0x9) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) 03:47:44 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1146.730893][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/mixer\x00', 0xc003d, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB="0700616e733d2c7201fe6aa828", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',access=any,fowner=', @ANYRESDEC=r2, @ANYBLOB=',obj_type=security,\x00']) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x6, 0x7844, 0x1, 0x2, 0x3e, 0x7de0, 0x2c0, 0x40, 0x350, 0x5, 0x1, 0x38, 0x2, 0x4, 0x5, 0x80000000}, [{0x6, 0x7, 0x0, 0x40, 0xffffffffffffff7f, 0x20, 0x7ff, 0x9}, {0x70000007, 0xb87a, 0x7f, 0x6, 0x5, 0x8, 0x7, 0x81}], "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", [[], [], [], [], [], [], [], []]}, 0x18b0) bind$bt_l2cap(r0, &(0x7f0000000080), 0xe) listen(r0, 0x0) 03:47:44 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:44 executing program 4: r0 = socket$inet6(0xa, 0xf, 0xd8251ad) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xffff, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={'rose', 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @bcast, @bcast, @default]}) bind$isdn(r1, &(0x7f00000000c0)={0x22, 0x5, 0x860b, 0x20}, 0x6) 03:47:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f0000000100)='^\x00', 0x2, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) 03:47:44 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:44 executing program 4: sched_setattr(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000000000"]) 03:47:44 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x806000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x105, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) 03:47:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r1, 0x6, 0x15, &(0x7f00000002c0), 0x4) 03:47:45 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:45 executing program 4: mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x4, 0x4001b071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYRES16], 0x24d) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x6, 0x6040) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f00000000c0)={0x2, r3}) recvmmsg(r1, &(0x7f0000000080), 0x24b, 0x0, 0x0) 03:47:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='nlmon0\x00') setitimer(0x2, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000000c0)=""/8) 03:47:45 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:45 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x5, 0x7, 0x11d0, 0xffffffffffffffff, 0x0, 0x4, 0x400, 0x1, 0x9, 0x10000, 0x7, 0x80000001, 0x6, 0x3, 0x9, 0x6, 0x12800000, 0xdbe, 0xffff, 0x200, 0x7, 0x0, 0x3ff, 0xffffffff, 0x36e, 0x4, 0x9, 0x6, 0x1, 0x101, 0x1, 0x16, 0x4, 0x1, 0x9, 0xfff, 0x0, 0x8001, 0x7, @perf_config_ext={0x3, 0xfffffffffffffffd}, 0x40, 0x2, 0x6, 0x7, 0xff, 0x6, 0x6}, r1, 0x7, r0, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000000c0)=""/8) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2002, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000100)={{0x29, @loopback, 0x4e22, 0x0, 'sed\x00', 0x32, 0xffffffff, 0x27}, {@local, 0x4e24, 0x4, 0x8, 0x6, 0x4}}, 0x44) 03:47:45 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2900000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:45 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000002480)=ANY=[@ANYBLOB], 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x0, 0x100000000]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000600)={0xcbf, {{0x2, 0x4e24, @remote}}, 0x1, 0x3, [{{0x2, 0x0, @empty}}, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e24, @multicast2}}]}, 0x210) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f00000005c0)={0x18, 0x71, 0x2, {{0x8, 0x2, 0x8}, 0x5}}, 0x18) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000001c0)={0xffffffff7fffffff, 0x9, 0x0, 0x7d76, 0x3, 0x1}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sendto$rose(r0, &(0x7f0000000380)="f70d53ea8721a2325880c23c15067fa6e9b0999c3380b138df6601d8073c739bff67e5bebf281f03c8af9b0f47342a50311dbe9160b5c5088d5957a2b279c2994376eba4", 0x44, 0x80, &(0x7f00000002c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0) close(r0) 03:47:45 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2b00000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:45 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:46 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40000, 0x0) write$nbd(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xc6) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) setsockopt(r1, 0x9, 0x3941, 0x0, 0x9b) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000180)={0x34, 0x0, &(0x7f0000000140)}) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) 03:47:46 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:46 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r2 = msgget(0x0, 0x1) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000200)=""/248) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) 03:47:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getpeername$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x6) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x3d) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0xfed5, 0xfa00, @id_resuseaddr={&(0x7f0000000200), r2, 0x0, 0x3, 0x4}}, 0x20) 03:47:46 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x18c00, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x5, 0x4) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) 03:47:46 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:46 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x6, 0x11ac}) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, &(0x7f0000001000)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') open(&(0x7f0000000080)='./file0\x00', 0x200100, 0x0) preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x300, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x0) 03:47:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:46 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:46 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1}, &(0x7f0000000000)=0x90) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) 03:47:46 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_setup(0x100004000000009, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x22000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e20, 0x8000, @local, 0x8c1}, @in6={0xa, 0x4e21, 0x23, @rand_addr="3349e2b5bfc3124fb3e40ecd19d70dda", 0x3ff}, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffffffff}], 0x74) 03:47:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f00000002c0)='autofs\x00', 0x0, &(0x7f00000004c0)='\xf8\x1d)\n\x89\f\xe0R\xa5\xe8X\xec\x84\xd8\x8a\x83p\x84l\xfc/\t\x8f\xd5!:\x96\xeb\x8c\x18\xd73S\\\x16<\xfb\xc7\xe3\xb5\xd1V\xfc+5\x863\t\xc8\x9c\x92\xe5\xe1}\xfbp\xe0\xcb\xa2N\xefnZ=\x86\x90\x85A I\xd1Q\xedB\xa0\xda{\x91\xe2\x90\xb0\xfb\x1d\x88\x87\x9e\xcc\x00\xce\xf3t\xa2\xf8\x9a\x95\x1d/\xff;\xc4\xff\x15\x9d\xe0\x88\xc0\xcf\xd6\x85\xab0GI\x17\xb1\x03\x89%\xf7\x9eh\xab\x7f\xf2\xde\x92\xa6\xd9\x857\xa7\xbfg\x10\x97\xf7\xbb[k\x0eW\x066\x01\xf5p\xea\x7f\x92\xfe\xf5\x1d7Z4?\xd9\x1f\xe7O\xe0\xd8\x03%%\xe2n\x18\x91\x88\xa7ZYpv\"\xce=9\x88\xa4\xb4\xe7\xbd\xb4O5z\x9e\x19\xb3\xefifk,\ts\x02\xd2\xb6\xe2*\xee\x9aq\xd0\x9cb\xfa^\x8eX\xf7\xe2b\x9f\x1c\xee\xd6\xe0|\xa6u\x03T\xea\xd1\x16x\xcc/\x7f[\xa7\xb4\x1e:~\xef\x10\xd5\xedm\xe2#nb\xbe\x94\xa1#\xc6\xad\xe8\x1c@YM\xddx*\xd9\x91\xd1Y') setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) 03:47:46 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4305000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1149.326423][T10096] autofs4:pid:10096:autofs_fill_super: called with bogus options 03:47:46 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4400000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1149.394044][T10270] binder_transaction: 18 callbacks suppressed [ 1149.394061][T10270] binder: 10198:10270 transaction failed 29201/-28, size 0-0 line 3147 03:47:46 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x1, 0x10000) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000200)=""/4096) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r2, 0x5eb857) setsockopt$inet6_buf(r2, 0x29, 0x44, &(0x7f0000000140)="201807cb3b85c12e2bf9633fbc4fb22400167e68ea099a6f013bc50aa4f827cb89073517d6284f28c3a12dc3cb018bd85ea9fde07328478c0bc4d1d84ad05d30bd242f374cda4c7bd8dbdc64e7084bfb4d7cd3d60dca", 0x56) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x208001, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x71f9) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000c00), 0x4000000000001e6, 0x1100) 03:47:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:47 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x170, 0x1, 0xa10, 0x70bd27, 0x25dfdbfc, {0xb}, [@generic="f6d04e1794e866a779ecd037777097923408e42d865867bac64542dd07be4ec3c6d12513275faa11ce4d75e5a3b65cac8610f6c022938162de836cde4f088f69ffdc96a51be8982a6164ef5eba62cde5c3f5e5ffa646a49c575701d78c1c381a44d4da4a3cf02da403e1b6264766c44cdc2bdbeedb2e2764cdf6b54b81bf24ddf68b6230f70a4f7ae0f0472852ed7fc1ca23e497840dc41b8082f6d861b7b94827c565ee2f7f3d6e5b97bc62315adede5cb02d6100fb3fb45d1c9e8999c55037b4b8939d1f18839d1d8d780b90bf44b8f68e0bd4af47f2bbb392763254c4ff6e2d8225ce1e08abb04b669dc78e", @generic="f2e588e7a253924473257f5c0d0d28cb769c0860fb2bc34101ef6eab6375dfdb6c26da807675382c41272cc3b3275e6d5321f1fea50390a4ef4de991e261a2023b0c1571f38cd5b2bd870f07dea45d4ae0da8f5b6f790dbee9dcfa2eb953dab1c803286764d0d308157ae6167d"]}, 0x170}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x10000, 0xd000, 0x6000, 0xf000], 0x7, 0x2, 0x8}) chmod(&(0x7f0000000200)='./file0\x00', 0x3c) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) [ 1149.660253][T10393] binder: 10383:10393 transaction failed 29201/-28, size 0-0 line 3147 [ 1149.732155][ T22] binder_release_work: 18 callbacks suppressed [ 1149.732214][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:47:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:47 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) accept4$packet(r0, 0x0, &(0x7f0000000040), 0x0) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000100)) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140)=0x48, 0x4) write$P9_RXATTRWALK(r0, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0x3}, 0xf) connect$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x1, 0x7f, 0x1000, 0x6, @remote}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000200)) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000002c0)='tunl0\x00') getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14) r1 = accept$nfc_llcp(r0, &(0x7f0000000380), &(0x7f0000000400)=0x60) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000440)=0x101, 0x4) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000480)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000500)) perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x9, 0xfeb0, 0xffffffffffffffff, 0xe02, 0x0, 0x100000000, 0x2000, 0x8, 0x4, 0x6, 0xd, 0x401, 0xffff, 0x8, 0x10000, 0x3, 0x101, 0x0, 0x40, 0x6515ec63, 0x10001, 0x7fffffff, 0x5, 0x2, 0x0, 0x2, 0x7, 0x1f4, 0x6, 0x1, 0x7f, 0x1, 0x0, 0x80000001, 0x9, 0x7fffffff, 0x0, 0x63c, 0x2, @perf_config_ext={0x9}, 0x1002, 0x7, 0x2, 0x4, 0x6, 0xfffffffffffff001, 0x58}, 0xffffffffffffffff, 0x1, r0, 0x2) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000005c0)=0x4c, 0x4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000600)=0x912, 0x4) read(r1, &(0x7f0000000640)=""/198, 0xc6) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000740)={0xaf, @loopback, 0x4e23, 0x1, 'fo\x00', 0x27, 0x986, 0x5c}, 0x2c) connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000800)=0x1) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000840), &(0x7f0000000880)=0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0)={0x0}, &(0x7f0000000900)=0xc) write$FUSE_LK(r0, &(0x7f0000000940)={0x28, 0x0, 0x3, {{0x1, 0x1, 0x1, r2}}}, 0x28) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000009c0)={0x3, &(0x7f0000000980)=[{0x1f, 0x3, 0x100, 0xfffffffffffffff9}, {0x0, 0x2, 0x84c, 0xf9}, {0x8, 0x400, 0x1000, 0x2}]}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000a00)="178e5f65834da100873a9cdb12c32071", 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000ac0)={0x10, 0x30, 0xfa00, {&(0x7f0000000a80)={0xffffffffffffffff}, 0x1, {0xa, 0x4e21, 0x5, @empty, 0x8}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000b00)={0x11, 0x10, 0xfa00, {&(0x7f0000000a40), r3}}, 0x18) accept$inet6(r0, &(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000b80)=0x1c) 03:47:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:47 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5800000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:47 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000200)=""/176) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000000c0)=""/8) 03:47:47 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x0, &(0x7f0000000040), 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x6, 0x1b}, {0x5a9, 0x40}, {0x7, 0x80000000}]}) 03:47:47 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1149.955511][T10708] binder: 10694:10708 transaction failed 29201/-28, size 0-0 line 3147 [ 1150.033463][T10708] binder: 10694:10708 transaction failed 29201/-28, size 0-0 line 3147 [ 1150.061973][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:47 executing program 1: syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8010, 0x0) timerfd_create(0x5, 0x800) 03:47:47 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800e000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1150.092918][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:47:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x101000000000001, 0x4) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000180)=""/171) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c) 03:47:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0xffffffffffffffe0, 0x1]) [ 1150.282777][T10925] binder: 10918:10925 transaction failed 29201/-28, size 0-0 line 3147 [ 1150.322628][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:47 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8035000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:47 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000000000, 0x7ffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffff7fffffff, 0x800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000100)={{0x3, 0x1}, 0x0, 0x3, 0x1, {0x80000000, 0xfff}, 0x80, 0x38}) 03:47:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:47 executing program 4: io_setup(0x9, &(0x7f0000000000)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40, 0x0) 03:47:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x80, 0xc763796e4f73645) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) [ 1150.581286][T11242] binder: 11234:11242 transaction failed 29201/-28, size 0-0 line 3147 03:47:48 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1150.621878][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:47:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:48 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000000)=""/8) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64IPIN\x00', &(0x7f00000000c0)='/dev/input/event#\x00', 0x12, 0x2) 03:47:48 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff00000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1150.738070][ C1] net_ratelimit: 19 callbacks suppressed [ 1150.738079][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1150.738858][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1150.743874][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1150.749644][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1150.767006][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1150.772886][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:48 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, [], 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xa0000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r3, 0x8000}}, 0x10) [ 1150.832032][T11558] binder: 11541:11558 transaction failed 29201/-28, size 0-0 line 3147 03:47:48 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1004) getsockopt$rose(r0, 0x104, 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000001080)) [ 1150.913537][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:48 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8847000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1151.047595][T11631] binder: 11581:11631 transaction failed 29201/-28, size 0-0 line 3147 [ 1151.107003][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:48 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) r1 = fcntl$getown(0xffffffffffffffff, 0x9) write$FUSE_LK(r0, &(0x7f00000000c0)={0x28, 0x0, 0x8, {{0x9c2, 0x6, 0x2, r1}}}, 0x28) dup2(r0, r0) syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000086dd6002290f00300000fe800000000000008000000000000000ff0200000000009b"], 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x8, 0x4, @thr={&(0x7f00000003c0)="f98348046f49b90a140ab00cd3ed55f40f13cfd43c2c2b19415c32db8b5b7e4b6298e354db7f4fc4d55f7131f96c5351f5bb42f7e5ef602327278cc1b76a0ea27a5e78b0ca23c0c83ecbd52d295d9456a50b61e8383a18d47b4cffdfc67b1670e0d19e7e76062f2a2a0b4263d2d360ff717515e16e924a34497b9cc5cb8c8635c800155dea266da9dec824f56b65e94fe4b7ed8cdfa69d57381e3ff0816b5b94b55ce6545b7ac9c35e0df0b15bb06afee4866ce8f68a39e41d9d84f2da577b2a6c1fb96d50b25be20a88bb25c785b4ff67aef5b40643ca2d2f30dd66571f93abd019b7fcee2f846755be265d85602347e5f32c", &(0x7f0000000200)="aafcb4157b9ba63078a7e09ad793f4a53285fbafc017ce41b40921854d88df76540d8bbed8a61f3b9501bd18e239f6186f0fbf6adff02ecd4dfc9bd1e114363334ffdd8fdd176969f56751c6b4066409533debed945462f7f9eaad4b9df1af0d99d26f786819b6170e7f1987a57ee5a72e8d6ff62070eaf59ff286f0331560bc90fa5eb1a6a32d52d1cead98c8694991"}}, &(0x7f0000000140)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe800053672232416cbdc299368ffb58000000000000000000000019841536338ad68b2330ab852c4105e7b11194ba007fdb4b21b2ce1b4223c3381ac90d399a67ecc8640d7bcf8b281b358844d628e76e7cd9850e7459873574d2dca2950632927c7c5ed47da03bc2936b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c016813eb66103e82886511003f5f49e62e8bc93fda060b5380aacef61267a8abc908ce6922db42e4a62983be5241f17d506f4830e258b4af18ba7da6376f881300d1f8c36c2363ddc8c56cc7a1408edc0ad03e78fe427511a639"], 0x15c}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='.nodev$bdev:(\x00') ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000004c0)={0x1, 0x7, 0x49d0}) 03:47:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:48 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:48 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, r1, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 1151.227974][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1151.233912][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:48 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) flistxattr(r0, &(0x7f0000000200)=""/225, 0xe1) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000100)=0x1ff) r3 = dup2(r1, r0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000000)=0x1b27) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) 03:47:48 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8864000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1151.313530][T11882] binder: 11878:11882 transaction failed 29201/-28, size 0-0 line 3147 03:47:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1151.390569][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 [ 1151.424743][T11890] netlink: 268 bytes leftover after parsing attributes in process `syz-executor.1'. 03:47:48 executing program 4: ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000140)={0x1, 0x4, 0x2}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000080)="120000001600e70d017b00000000008e0084", 0x12, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000003c0), 0x4) recvmmsg(r1, &(0x7f0000001cc0)=[{{&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f00000001c0)=""/89, 0x59}, {&(0x7f0000000240)=""/81, 0x51}], 0x3, &(0x7f0000000300)=""/138, 0x8a}, 0xffffffffffffffff}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/61, 0x3d}, {&(0x7f0000000480)=""/98, 0x62}], 0x2, &(0x7f0000000540)=""/105, 0x69}, 0x81}], 0x2, 0x0, 0x0) [ 1151.522827][T12006] binder: 11940:12006 transaction failed 29201/-28, size 0-0 line 3147 [ 1151.538031][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1151.543867][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:49 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1151.571443][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x21, 0x8082) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) [ 1151.787282][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:47:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:49 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff00000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x73, 0x9, 0x6, 0x6ba7954d, 0x18, 0x5, 0x1ff, 0x8, 0x1f}) 03:47:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:49 executing program 4: ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000140)={0x1, 0x4, 0x2}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000080)="120000001600e70d017b00000000008e0084", 0x12, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000003c0), 0x4) recvmmsg(r1, &(0x7f0000001cc0)=[{{&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f00000001c0)=""/89, 0x59}, {&(0x7f0000000240)=""/81, 0x51}], 0x3, &(0x7f0000000300)=""/138, 0x8a}, 0xffffffffffffffff}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/61, 0x3d}, {&(0x7f0000000480)=""/98, 0x62}], 0x2, &(0x7f0000000540)=""/105, 0x69}, 0x81}], 0x2, 0x0, 0x0) 03:47:49 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8906000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:49 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000200)={'veth0_to_bond\x00', 0xca2}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000240)) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000000c0)=""/8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x5, 0x100000000, 0x1, 0x4, 0x0, 0x20, 0x80000, 0x2, 0x7fff, 0x6, 0x8, 0x8, 0x100000001, 0xfff, 0x356e, 0xfffffffffffffffe, 0x6b, 0xc75, 0x4, 0x6, 0x3, 0xe0000000000, 0x8, 0x1, 0x61f148ae, 0x3, 0x8, 0x100000000, 0x7, 0x0, 0x3, 0x2, 0x1ff, 0x1, 0x4, 0x7, 0x0, 0xffffffffffffff80, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x2, 0x4, 0x3, 0x4, 0x4, 0xd5, 0xb3a}, r3, 0x6, r1, 0x0) 03:47:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x4, 0x4, 0x10070}, 0xe7) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000180)='bcsf0\x00\x00\x00\x00\x00\x00\x00\x11\x00\x00\x13') openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x30400) 03:47:49 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x89ffffff00000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:49 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x7, 0x2}, 0x240) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x141000, 0x0) ioctl$KDENABIO(r1, 0x4b36) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x21bb, 0x0, 0x0, 0x0, 0xffffff97, 0x0, 0x40f00}, 0x3b6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x4082, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000000c0)=""/167) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 03:47:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:50 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xa3c, 0x1) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x14, 0xed, &(0x7f0000000200)="f8f9284a80aeb69d5a74055669abc820e34e0896e613d1ea0bd37d97db224fa09df380c142f67f29ebf4b46d20cabc4c9d2033416b2cbc794c95a157b08ff63e370432d6e34b389cb52324f07bb6c5cb00469999796b6f62e28d1c5a670e9c8e099d9bd371bcbf5de16c45db3f42ab79c5c279ca4be10235869118e3434657c39b8a5b80b61bbd91f36975a0d59f4cfcf527aec0e00d1974258a754e09169cb9e804729296300e614d3581fb73344d69ad222d658468a00e7e4ef0c84d26f32f91c63cb3ab60f0c42f234ff1d8065495db9fbb85f6662ed76db59c337d2f2f3d270fe35dcd9e16eb0bba3cc9ff"}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) 03:47:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB=',fs']) r0 = socket(0xa, 0x5, 0x589) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000040)) clone(0x21a2101ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, &(0x7f0000000480)) 03:47:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x8}, {r0, 0x380}, {r0}, {r0, 0x1}, {r0, 0x8}, {r0, 0x8440}, {r0, 0x8120}, {r0, 0x40}], 0x8, 0x8001) [ 1152.675204][T12958] e sysfs: Unknown parameter 'fs' 03:47:50 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000000002001fcd55a9170c5a3c00000bff000095b4d1873e474959c674066c49ec74b248ef28c67b3af24c1c59a84f3461686271798d3a6c30e85a9d7288a56b9a7ee9359e917a0a452e614bcfda76fcb89c5011219b2f06a140bb4c1ce3cc344758e178531e31134d7115799125ad444b6d3c758a324a853e68221f4eef9137e2e2815fe36d6c577ada9a463f0b5584b3084cec216a5953699a3469b8", @ANYRES32=0x0], 0x28}}, 0x0) 03:47:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:50 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00\x00\x00\xfe\xff\xff\a\x00\x00\x00\x03\x00', 0x19, 0x1, 0x1b0, [0x20000340, 0x0, 0x0, 0x20000370, 0x200003a0], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000004bfca4ad12230000000000000000000000feffffff01000000150000000000000000007663616e300000000000000000000000726f7365300000000000000000000000726f736530000000000000000000000076657468305f746f5f7465616d0000000180c2000000000000000000ffffffffffff0000000000000000a8000000a800000020010000636c757374657200000000000000000000000000000000000000000000000d001000000000000000000000000000000000000000000000004e464c4f47000000000000000000000000000000000001000000000000000000500000000000000000000000000000000000000021d1f19bf80fa1bac9b665f398c86131ecccae30fbd509fc864d4871efd20c71c8f750df6b644ca6fea88be2689d2098dd8231ea7e6d012b87b612bbf065f67a00000000f152316e6dc4ef9484d3125b62c94f6e55d8883bc212aa061954905530e33411be888671c05ee822ce5515b85330cf9dc0f2765d1f"]}, 0x255) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10100, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x1f}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r2, @in={{0x2, 0x4e20, @rand_addr=0x8}}, 0x9, 0x200, 0x6, 0x81}, 0x98) prctl$PR_SVE_GET_VL(0x33, 0x1c8ef) 03:47:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@nfc, &(0x7f0000000100)=0x80, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000140)={0x76, 0xe0a0, 0x1000, @broadcast, 'rose0\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) 03:47:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:50 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:50 executing program 4: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000480)='./file1\x00', 0x84800000) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) chdir(&(0x7f00000003c0)='./file0\x00') r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) uselib(&(0x7f0000000040)='./file1\x00') ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000400)=""/125) fcntl$setstatus(r1, 0x4, 0x40c00) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 03:47:51 executing program 1: capset(&(0x7f0000000000)={0x24020019980333}, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x0, 0x5}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, r1, 0x203, 0x0, 0x0, {0x3}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 03:47:51 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:51 executing program 4: r0 = socket$packet(0x11, 0x808000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffbfffffc}, 0x4) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000000140)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000080)={0x1, 0x400080000000}) 03:47:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:51 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) fcntl$setlease(r0, 0x400, 0x2) 03:47:51 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:51 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080), 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x800, 0x0) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f00000000c0)={0x8, 0x5, &(0x7f00000003c0)="d2abf4b162f4ff0a5f2a78d3174f5a13dddb20a3e1782dce369efc51abc20ba0237a906db836784d1daa6609a3bbd1091658ed6a3a04754669273abcef0512418398af74ab1a861524807ba1d773249bd654e9d2305c1f3db1edf7f0912782eb9c19f9b2e85a9a84bd7ea2bdee08d3f688914e69ea", {0x5, 0xfffffffffffffff9, 0x32314742, 0xf, 0xb8e, 0x2, 0x7}}) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000240)="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", 0xfa, r0}, 0x68) sendmsg(0xffffffffffffffff, 0x0, 0x0) 03:47:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) syz_extract_tcp_res(&(0x7f0000000140), 0x7ff, 0x5) r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) 03:47:51 executing program 1: socket$inet6(0xa, 0x3, 0x3) 03:47:51 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:51 executing program 4: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vcs\x00', 0x4000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10002300}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r3, 0x4, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x1400000000, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x0) accept4$packet(r2, 0x0, &(0x7f0000000680), 0x800) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f00000002c0)='./file0\x00', 0x7fffffff, 0x3, &(0x7f0000000540)=[{&(0x7f0000000300)="b3c1d65f629b96f921e91592c2317c926960e801c365d2dd4cf7fd8fdbd5772fa4e2177d04602c6f6dcda97af6abf8191d64c0846c4d1b0c3564c7d392308129b42d2b1d4ef4325fd242cc2fb06d69c593f05cd3cf505507ead8ac8dca0886c5536d8943c106998e8d6cd0f9e6ae357000e8aab5506cb5b4edc52f075bf069260a08751f8fd0cf9dbe71f3c8125d3152f189dd4185c635c6f82218312e209cb3721f1ce340cf6140bee36d9988a9b95c51a6f0a1b8ce46758f76f20f835c355acc1e42fef07a91b0809b709aa719a6c6b9f2c9a1a841", 0xd6, 0x7}, {&(0x7f0000000400)="3c8c2740882c2f65064c68f55b1a2c556e21e47937422aeec9232ec9e3e1d995773501a714e8a513684f4bab386448c03797a18784095944f3d816d94c8b928f5a0dc8438192c8dd96b06cde145449df51a8222455440c7d0ebf57e840e4f9d40a88d43ac14639b23a83b908870f89de3253fbba22e561969c11", 0x7a, 0xffffffffffff0000}, {&(0x7f0000000480)="fd2a614816b97d42a6c7b29f0b8c1f75c719a4cad62b1a092f43431d82858a5ad21807d48d1da3acde565689468d821fbdf1d0ba148e4e407b5ffc9b09e6c3a05b7462420554c9e6804346e19ba35b216d3ad0ccd0279abf85b67302b24a90e171a6e8eab8a7fcbb87643db1c192337147e4cead5e29d48e55bd7471cc4db571e4265148fce03826cb42366e8b8a2e3783d066198ebb2bbe88c876a12c7cc3c44c779bcabc75624eddf28dd652800cfbd3e1", 0xb2, 0x7}], 0x1000000, &(0x7f00000005c0)='GPL}vmnet1self}\x00') r4 = socket$inet6(0xa, 0x6, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fsetxattr(r0, &(0x7f0000000040)=@random={'user.', '#cgroup\\lo\x00'}, &(0x7f0000000080)='#\x00', 0x1, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) r6 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740)}}], 0x2, 0x0) r7 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x4000) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000600)=0x9, 0x4) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f00000006c0)={0x33, ""/51}) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x6685) 03:47:51 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xed, 0x100, 0x7f, 0x2, 0x0, 0x1, 0x8000, 0x8, 0x0, 0x800, 0x1ff, 0x4, 0x3bb, 0x1, 0x4800000000, 0xf9, 0x4, 0x1, 0x20, 0x1f, 0x200000, 0x3, 0x1, 0x2, 0x4, 0x1f, 0xffffffffffffffff, 0x800, 0x1, 0x8, 0x6, 0x1ff, 0x3, 0xff52, 0x4, 0xfffffffffffffc01, 0x0, 0x6, 0x7, @perf_config_ext={0xb, 0x7f}, 0x403, 0x1, 0x800, 0x0, 0x80, 0x5, 0x401}, r2, 0x1, r0, 0x1) 03:47:51 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0a5c2d023c12a50698eed1b9d806574f173eb067707de209d72a80d14ab875900d79bb7e2f838e77a36db5c5a4779c0cc936752252fb1a2080dac99200791965ddd36c7d7b43c9af5ef438e74c0904e9f48d3ef6f4b7abe79dd947822aed99f3ab4ddb000a3787f5a357c70eda8da63f0e1d71bbd6c801b7505a10aeb3ecefb378bb3c94b5424b9a26793fe121954673933e8d570310ec6708") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bind$bt_hci(r1, &(0x7f0000000040), 0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fuse\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x8400, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) setsockopt$ax25_int(r4, 0x101, 0xf, &(0x7f00000000c0)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x3, 0x100}, &(0x7f0000000440)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000540)={r5, 0x2, 0x41, "d85f02e998a47b36f4fff9111607a5c192466f573c179f50c1f4399d123d8693eb72ae31ee9903257498bed9c53a447d0c11a7248cd1f87a65ec8094eae3c7e400"}, 0x49) fchmodat(r4, &(0x7f0000000480)='./file0\x00', 0x21) getxattr(0x0, &(0x7f0000000340)=@known='security.capability\x00', &(0x7f0000000380)=""/88, 0x58) r6 = perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x2, 0x0, 0x80, 0xffffffffffffffe0, 0x0, 0x6997, 0x4, 0x0, 0x3, 0x8, 0x0, 0x1f, 0xfffffffffffffcd1, 0x800, 0x0, 0x0, 0x2, 0x0, 0x1, 0x3, 0x0, 0x7fffffff, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0xe, 0x0, 0x200, 0x1, 0x0, 0x401, 0x0, @perf_config_ext={0x9, 0x7}, 0x0, 0x5, 0xfffffffffffffffb, 0x0, 0x4, 0x0, 0x7f}, 0x0, 0x0, r3, 0x8) mkdir(&(0x7f00000009c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_ad=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, &(0x7f0000001000), 0x1000) ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000400)) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000600)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r7, 0x404, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x24}}, 0x81) umount2(&(0x7f00000004c0)='./file0\x00', 0x3) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) 03:47:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:51 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:52 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1154.509562][T14509] binder_transaction: 18 callbacks suppressed [ 1154.509579][T14509] binder: 14469:14509 transaction failed 29201/-28, size 0-0 line 3147 03:47:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:52 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:52 executing program 1: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0xe800, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000), 0x0, 0xfffffffffffffffc}], 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x81) open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x2, 0xffffffff80000000, 0x0, 0x7fffffff}, &(0x7f0000000200)=0x98) syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) 03:47:52 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000100)={{0xff, @broadcast, 0x4e20, 0x4, 'wlc\x00', 0x7, 0x7, 0x57}, {@loopback, 0x4e22, 0x2, 0x100000001, 0x5, 0x8}}, 0x44) recvfrom(r0, &(0x7f0000000080)=""/37, 0x25, 0x1, &(0x7f0000000180)=@ax25={{0x3, @bcast, 0x4}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) rename(&(0x7f0000000040)='./file1/file0\x00', &(0x7f00000000c0)='./file1\x00') 03:47:52 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) r2 = fcntl$dupfd(r0, 0x406, r1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r2}, 0x10) [ 1154.764346][T14785] binder: 14778:14785 transaction failed 29201/-28, size 0-0 line 3147 03:47:52 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1154.845958][ T22] binder_release_work: 18 callbacks suppressed [ 1154.845966][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:47:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:52 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) msgget(0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000540)=""/131, 0x83}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, &(0x7f0000000080), &(0x7f00000001c0)=ANY=[@ANYBLOB="a3fbf0d3e3e5d14f7cce90f50571df115fa627c9fd2f67deb02f6c16d048282c5ac1565fb2330490f0b3386b5e3c54128ab60f5b13ef0e13f56061f07b9377d42121df103726e3147a11f9d7aa78d91551f5ca9d30551276130c49c27b398ef91f115eb41b14ecac4c91f8c99e48e3428f9de3260ece25fc1d93da931974f1f227e5672e287544d3607ce8ba80f9"]}, 0x106) r3 = socket(0x10, 0x2, 0x0) read$FUSE(r1, &(0x7f0000001600), 0x1000) fcntl$setstatus(r0, 0x4, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) [ 1155.039607][T14947] binder: 14887:14947 transaction failed 29201/-28, size 0-0 line 3147 [ 1155.100857][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 [ 1155.101421][T14947] binder: 14887:14947 transaction failed 29201/-28, size 0-0 line 3147 [ 1155.127453][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:47:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:52 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:52 executing program 4: sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) socket$pptp(0x18, 0x1, 0x2) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r1, r2}) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000300)=0xc) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x8fcf, 0x9, 0x0, 0xffffffff00000001, 0x0, 0xffffffffffffb472, 0x8000, 0x8, 0x6, 0x7ff, 0x4, 0x8, 0x2, 0x6, 0x0, 0x80000001, 0x1, 0x2, 0xfffffffffffffffc, 0x8ae5, 0x9, 0x0, 0x0, 0x0, 0xfff, 0x5fff, 0x9, 0x4, 0x20, 0x4, 0x6, 0x7000000000000000, 0x81, 0x4, 0x7f, 0x710, 0x0, 0x6, 0x3, @perf_bp={&(0x7f0000000080), 0x2}, 0x2, 0x6, 0x400, 0x7, 0x2, 0x20}, r4, 0xf, r0, 0x1) recvmmsg(r3, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x2fd, 0x400002fd, 0x0) 03:47:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) 03:47:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1155.306964][T15198] binder: 15180:15198 transaction failed 29201/-28, size 0-0 line 3147 03:47:52 executing program 1: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xfffffffffffffffe, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 1155.366918][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:52 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:53 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) [ 1155.584291][T15405] binder: 15366:15405 transaction failed 29201/-28, size 0-0 line 3147 [ 1155.610585][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:47:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:53 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1155.913348][T15627] binder: 15592:15627 transaction failed 29201/-28, size 0-0 line 3147 [ 1155.984988][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:47:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:53 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1156.178015][ C0] net_ratelimit: 24 callbacks suppressed [ 1156.178030][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1156.190196][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:53 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=0x1000) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") getsockopt$inet6_int(r2, 0x29, 0x24, 0x0, &(0x7f0000000000)) 03:47:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x800, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x200) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffffffffffff0001, 0x212000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000200)={0x3, 0x0, 0x100, 'queue1\x00', 0x5}) 03:47:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter6\x00') read$FUSE(r0, 0x0, 0x2) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = shmget(0x0, 0x4000, 0x301, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/253) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000080)=ANY=[@ANYBLOB="5c0000002beea4bce85307385a121dccb9d545a0c094c5a68feba44c9e216505be192b1c7fb1c11b5c49416c1ec4ad52446ef96ed45914946230d7ecec8ce84374a8000d1b20691abe5de58018c00f776562f6c8a4402304033abbe3321df605"]) 03:47:53 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:54 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1156.547438][T15851] binder: 15775:15851 transaction failed 29201/-28, size 0-0 line 3147 [ 1156.583418][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:47:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:47:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:54 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:54 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x3b46, 0x40) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1a55a97b6a049bfa47a55e8f4f3e00000000087fff"], 0x0}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x300, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) [ 1156.733007][T16158] binder: 16114:16158 transaction failed 29201/-28, size 0-0 line 3147 03:47:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @reserved}, 0x10) [ 1156.780410][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:54 executing program 1: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fsetxattr$security_ima(r0, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="09004242437d3ca80000"], 0xa, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000280)={0x0, 0x3}) r1 = open(&(0x7f0000000040)='./bus\x00', 0x400004, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x68, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x9, @media='ib\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4044081) 03:47:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x8, 0x0, 0x0}) 03:47:54 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x543]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1156.966470][T16228] binder: 16181:16228 transaction failed 29201/-28, size 0-0 line 3147 [ 1156.977996][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1156.978046][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1156.983840][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1156.989578][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1157.001169][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1157.006966][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1157.035491][T16228] binder: 16181:16228 ioctl c0306201 20000040 returned -14 [ 1157.076106][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:47:54 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x12, 0x0, 0x0}) 03:47:54 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xe16, 0x100) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080)) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rmdir(&(0x7f00000000c0)='./file0\x00') lstat(&(0x7f0000000040)='./file0\x00', 0x0) 03:47:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) r1 = openat(0xffffffffffffffff, &(0x7f00000003c0)='.\x00', 0x40000, 0x106) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000400)={0x0, 0xffff}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000480)={r2, 0x56, "495e04ff048394be7af911fb50457448993ba5e1fbdbf887fe5f5c6938d30faaf14baf117c08035431fb6df6d64148956d003ff8fd2bd52e73dceb4314e596fe89bc3a31d26de685bbd058d36cdb71083013d1c359a2"}, &(0x7f0000000500)=0x5e) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80040, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x5b, "fdf113e1dd7b82c96760175f86461da820601510541e98c000091712c81fd45f7899fc2637f23a14c03b51649d7f54d799fa96ac4de68eb8ee64aa62a9e84b3526915236f8989b4a8c0496e17db41935a7102cc7ff36a9eac38f99"}, &(0x7f0000000040)=0x63) fcntl$getown(r3, 0x9) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000380)={r4, 0x8}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) exit_group(0x0) r6 = perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x8000000000011, r7, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7) close(r6) r9 = socket$inet(0x2, 0x80001, 0x84) shutdown(0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sendmsg(r9, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1, 0x0, 0x0, 0x3f4}, 0x0) syz_open_dev$vivid(0x0, 0xffffffffffffffff, 0x2) 03:47:54 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000002c0)=""/105, 0x69}], 0x1, 0x0) signalfd4(r0, &(0x7f0000000180)={0x9}, 0x8, 0x800) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) preadv(r0, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x195) [ 1157.311775][T16501] binder: 16498:16501 ioctl c0306201 20000040 returned -14 [ 1157.342234][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 1157.457990][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1157.463842][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1200, 0x0, 0x0}) 03:47:55 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x608]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:55 executing program 4: r0 = socket$unix(0x1, 0x104000000000001, 0x0) r1 = dup(r0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x1, 0x4, 0x13, 0xb443}, 0xc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x5, 0x3c, 0xffffffffffffffb0, 0x7, 0x0, 0x80000000, 0x10000, 0xa, 0x4, 0x200, 0xc33, 0x100000001, 0x6, 0x4f3, 0x52140814, 0x5, 0xffffffffffffffc0, 0xc80e, 0x4, 0x0, 0x0, 0x3, 0x10000, 0xa1eb, 0x1, 0x800, 0x0, 0x1, 0x3, 0xfffffffffffffffd, 0x1, 0x9, 0xdb7c, 0x2, 0x8, 0x80000000, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x7ff, 0xfffffffffffffffd, 0x6, 0x1, 0x7, 0x9}, r2, 0x5, r1, 0x9) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) write$UHID_INPUT2(r1, &(0x7f0000000040)={0xc, 0xbb, "7fd7852baaf61c3f52d0160d91538414c7afcc44b0115b9655fc1aa8f466f11c82651fa2d2f48c608b65bd6d19e718340267542676a8be1c0cd8c968a4304c64be7da0f419904129ef6b4dae8cd7ed49b0e88f4ce058d5632c2285865a4c9032389dbd5965a060b0dfb21e59a9123b9f54df63d16cafe8d02a360df4baf129eefaec075b95d8b4efaace51a452e79ef6f46c0f85114efd0e68d8264c4138b6cc986c50d49f63669bd2d9a56be8efbaeeb0f5b9636d1a9c81f73e2a"}, 0xc1) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) setrlimit(0x7, &(0x7f0000000000)) ioctl$TIOCCBRK(r1, 0x5428) ioctl$sock_proto_private(r0, 0x89e1, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) 03:47:55 executing program 1: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14, 0x800) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0), &(0x7f0000000380)=0x8) socketpair$unix(0x1, 0xa, 0x0, &(0x7f00000000c0)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x404000, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200800, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80000001) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0xf9, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0xc0, 0x0, 0x5, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x4c64874c}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000300)=""/52) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000180)={0x81, 0xf45e, 0x0, 0x5b8c6081, 0x7, 0x13d6, 0x100000001, 0x3f, 0x6, 0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000001c0)}, 0x10) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x12}) openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x0, 0x0) [ 1157.764170][T16815] binder: 16809:16815 ioctl c0306201 20000040 returned -14 03:47:55 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1000000, 0x0, 0x0}) 03:47:55 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./bus\x00', 0x6, 0x2) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000200)={0x40, 0xc00000, 0x7, 'queue1\x00', 0x5}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KDDELIO(r2, 0x4b35, 0x100) write(r4, &(0x7f0000000340), 0x100000428) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r3, &(0x7f0000000180), 0x0, 0x4) 03:47:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x2, 0xf191, 0x2, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r4, 0x4, 0x2, 0x1f}, &(0x7f0000000140)=0x10) r5 = dup2(r0, r2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000001c0)={0x0, @aes256, 0x1, "4c715b628bd0b492"}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x4000, 0x0) 03:47:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) [ 1158.055995][T16926] binder: 16924:16926 ioctl c0306201 20000040 returned -14 03:47:55 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x8000000, 0x0, 0x0}) [ 1158.224667][T16944] binder: 16934:16944 ioctl c0306201 20000040 returned -14 [ 1158.268933][T16944] binder: 16934:16944 ioctl c0306201 20000040 returned -14 03:47:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x12000000, 0x0, 0x0}) 03:47:55 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:55 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000000202ffbf00000000fddbe2250000000008000200", @ANYRES32=0x0, @ANYBLOB="14000700ff020000000000000000000000000001"], 0x30}}, 0x0) 03:47:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffff9c, 0x80284504, &(0x7f00000000c0)=""/8) [ 1158.515377][T17338] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1158.516363][T17347] binder: 17336:17347 ioctl c0306201 20000040 returned -14 03:47:56 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe80]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:56 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000400)=""/226) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000140)) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000340)={0x5, {{0xa, 0x4e20, 0x6, @loopback, 0x39}}}, 0x88) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000001c0)={{0x4}, 'port0\x00', 0x0, 0x30008, 0x3, 0x0, 0x1005, 0x2, 0x9, 0x0, 0x2, 0x9}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x2404, &(0x7f0000000380)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65472c776f726b6469723dd4ff66696c655c7065726d69745f6469726563740d6f2c6f626a5f726f6c653d3a626465762c0000"]) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6fbd, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000000c0)={{0x62, @loopback, 0x0, 0x0, 'none\x00', 0x14}, {@local, 0x4e21, 0xea4bb570c7acc0b0, 0x7, 0xc00000000000, 0x6}}, 0x44) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x71, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0xb4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000440), 0x0, 0x0, [0x9c00]}}, 0xfef5) r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r5) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) close(0xffffffffffffffff) [ 1158.559748][T17338] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 03:47:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfdfdffff, 0x0, 0x0}) 03:47:56 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1158.767625][T17562] binder: 17526:17562 ioctl c0306201 20000040 returned -14 03:47:56 executing program 4: shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffd000/0x1000)=nil) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0xc, 0x4) sendmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x394}}], 0x1, 0x0) 03:47:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffdfd, 0x0, 0x0}) 03:47:56 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2900]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20004, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0)=0x2, &(0x7f0000000200)=0x2) connect$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x5, {0xb2fd, 0xfff, 0x4, 0x257f, 0x3, 0x5}, 0x8, 0x10000}, 0xe) fcntl$setsig(r0, 0xa, 0x29) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000002c0)) rt_sigpending(&(0x7f0000000040), 0x8) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000240)=""/8) mknod$loop(&(0x7f0000000340)='./file0\x00', 0x2002, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x5c) write$FUSE_LSEEK(r2, &(0x7f0000000100)={0x18, 0xffffffffffffffda, 0x7, {0xffffffffffffae02}}, 0x18) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x900, 0x0) recvfrom$netrom(r1, &(0x7f0000000380)=""/64, 0x40, 0x1, &(0x7f00000003c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @default]}, 0x48) [ 1159.035280][T17690] binder: 17637:17690 ioctl c0306201 20000040 returned -14 03:47:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x402000, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000040)) prctl$PR_GET_TSC(0x19, &(0x7f0000000100)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendto$rxrpc(r1, &(0x7f0000000180)="cfd683047c11316eb5a996358dcb45040a1aef7ca74854b20e5f587d968c809763eef510b0fe0272de91764a33b7c5d1091138a7e6aa70959ac5cafad30344077579094121a01bec6e8aabf3bf55fac117da7c720ff27cb9e15754ecc2e0692caf0a3fe0649a9e649adaa9f448c671657f396b1f5476dbe4f199b1bd29538b", 0x7f, 0x4, 0x0, 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000140)='./file0\x00', 0x8000, 0x2) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40d09) 03:47:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:57 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b00]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x100000000000000, 0x0, 0x0}) 03:47:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000002c0)={0x80, 0x0, 'client1\x00', 0x0, "41d51061879cd79a", "0902a4a8b66f53b7db795462b39311e1c28cabe313f034a9f0a7b1649dc60f4f"}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0x2, 0x4}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x4, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000080)={0x0, 0x5, 0xfff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x22, &(0x7f0000000040)={@ipv4={[0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2], [], @multicast2}, 0x0, 0x0, 0x0, 0x3f00}, 0x20) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000001c0)={'icmp6\x00'}, &(0x7f0000000180)=0x325) [ 1159.938962][T17988] binder_transaction: 8 callbacks suppressed [ 1159.938979][T17988] binder: 17972:17988 transaction failed 29201/-28, size 0-0 line 3147 [ 1159.977235][T17988] binder: 17972:17988 ioctl c0306201 20000040 returned -14 [ 1159.996861][ T7952] binder_release_work: 7 callbacks suppressed [ 1159.996869][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:57 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') sendfile(r0, r2, 0x0, 0x800000bf) 03:47:57 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000200)=""/8) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x10000) 03:47:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x800000000000000, 0x0, 0x0}) 03:47:57 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:57 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x400000000000f, &(0x7f0000000080)=0x80, 0x5ffa) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="5e2f1aea0d18"}, 0x14) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f8100006700000000000000000049000000000000dae776aa0200020000109aa0068c0000000000001300004c0000f2cd3378000000000000dd00000000eeff7121b488a2dde41d1ae0672658aaf63338331e5613c12f07304fcd95f2478f484af80ef6560e013489aaad825a82af0361eeab2b38b75297c09f0ac80518a2a8fce731a04199661c2cdab793947e1385029f3709e7c8be720a5682c110ccb061fb66cf2a7d5ef5e98c8572ba634efdd1e579c34f7f7701f4a5b2526b"], 0xbc) [ 1160.313132][T18188] binder: 18053:18188 transaction failed 29201/-28, size 0-0 line 3147 [ 1160.339675][T18188] binder: 18053:18188 ioctl c0306201 20000040 returned -14 03:47:57 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3580]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1160.382308][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:47:57 executing program 0: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x86) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000000)=""/8) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x4100) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="030003000000ffffbfff"], &(0x7f0000000100)=0xe) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r3, 0x3}, 0x8) 03:47:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1200000000000000, 0x0, 0x0}) 03:47:58 executing program 1: socketpair$unix(0x1, 0x10000000003, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r3 = geteuid() mount$9p_xen(&(0x7f00000000c0)='$cgroup]:\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x20000, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d78656e2c756e616d653d2d73656375726974792a2b2c63616368653d6c6f6f73652c7375626a5f757365723d7070703173656c696e7578bc422c6f626a5f757365723de447504c5e6367726f75702d2947504c2f706f7369785f61636c5f61636365737376626f786e657431757365727d5c2c666f776e65723c", @ANYRESDEC=r0, @ANYBLOB=',euid>', @ANYRESDEC=r1, @ANYBLOB="28755e43ebf27e91694a73bf1f0b3b2453262977", @ANYRESDEC=r2, @ANYBLOB=',pcr=00000000000000000033,fowner=', @ANYRESDEC=r3, @ANYBLOB=',\x00']) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0xd, &(0x7f0000000000)=0x3, 0x4) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000180)=0x32, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000240)=0xa3, 0x4) connect$inet(r5, &(0x7f0000000200)={0x2, 0x100000000000, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 03:47:58 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:58 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000000b000)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=ANY=[@ANYBLOB="3801000010001307000000000000000000000000000000000000000000c6330000cb0000414200000000000000060000000000000000000f0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000000006c000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x138}}, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xdc, 0x80000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x210, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffffffffff80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) [ 1160.698192][T18636] binder: 18633:18636 transaction failed 29201/-28, size 0-0 line 3147 [ 1160.706555][T18636] binder: 18633:18636 ioctl c0306201 20000040 returned -14 03:47:58 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x8, 0xffffffffffffffff) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/fscreate\x00', 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000240)="c1be47f05cde738ee8a53a0342ae9e5e85399af8c1ad6075392e1b19aa427fffcd2273ac32cc237a36d9d01defddfc64102229322d515a1476cd05571a0f26e53bd5addade3cf726de247ff24d0d4b16519a889e60fd8f67900423c7bf59511d03506c75", 0x64) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xf496, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000140)={0x68c, 0x0, 0x2, 0x3f}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x6}) 03:47:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfdfdffff00000000, 0x0, 0x0}) [ 1160.749875][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 [ 1160.881493][T18710] binder: 18702:18710 transaction failed 29201/-28, size 0-0 line 3147 [ 1160.929587][T18710] binder: 18702:18710 ioctl c0306201 20000040 returned -14 03:47:58 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x2, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x5, 0x4f6, 0x0, 0x0, @tick, {}, {}, @control}], 0x273) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = gettid() capget(&(0x7f0000000000)={0x19980330, r4}, &(0x7f0000000040)) r5 = geteuid() lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x800002, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x1ff0000000000000}}], [{@euid_eq={'euid', 0x3d, r3}}, {@euid_gt={'euid>', r5}}, {@uid_lt={'uid<', r6}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@fsmagic={'fsmagic', 0x3d, 0x28d2}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}}) 03:47:58 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1160.977343][T18710] binder: 18702:18710 transaction failed 29201/-28, size 0-0 line 3147 [ 1160.998461][T18710] binder: 18702:18710 ioctl c0306201 20000040 returned -14 [ 1161.005910][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 [ 1161.029290][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:47:58 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) getresuid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000000640)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {}, [{0x2, 0x6, r2}, {0x2, 0x2, r3}, {0x2, 0x4, r4}, {0x2, 0x0, r5}], {0x4, 0x1}, [{0x8, 0x1, r6}], {0x10, 0x6}, {0x20, 0x5}}, 0x4c, 0x0) write$binfmt_misc(r0, &(0x7f0000000a00)={'syz1', "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"}, 0x1004) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xe0, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x67b4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c0) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000040)=0xe8) 03:47:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x8, 0x0}) [ 1161.334526][T18978] binder: 18936:18978 transaction failed 29201/-28, size 0-0 line 3147 [ 1161.361759][T18978] binder: 18936:18978 transaction failed 29201/-28, size 0-0 line 3147 [ 1161.389058][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 1161.398991][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 1161.637879][ C0] net_ratelimit: 22 callbacks suppressed [ 1161.637893][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1161.649493][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:47:59 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1161.939492][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1161.946176][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:59 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mremap(&(0x7f0000e6b000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x204080, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) 03:47:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x12, 0x0}) 03:47:59 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x5, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x30}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r0, 0x0, 0x7, &(0x7f0000000040)='cpuset\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r2, 0x4) socket$key(0xf, 0x3, 0x2) 03:47:59 executing program 0: r0 = open(&(0x7f0000000000)='\x00', 0x1, 0x40) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140)=0x10000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffe, 0x14107c) ioctl$TIOCCBRK(r0, 0x5428) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) 03:47:59 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) [ 1162.211331][T19378] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1162.232390][T19385] binder: 19376:19385 transaction failed 29201/-28, size 0-0 line 3147 03:47:59 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:47:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1200, 0x0}) [ 1162.264026][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:47:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x3ffffd) r1 = accept4(r0, &(0x7f0000000040)=@sco, &(0x7f0000000100)=0x80, 0x800) socket$vsock_dgram(0x28, 0x2, 0x0) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x42, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000140)={r1, 0x3}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) 03:47:59 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xff, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x16c, r1, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x78, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="734f24014243336bf672261438350343"}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f7e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff80000000}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x16c}}, 0x4048055) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000800)) [ 1162.410701][T19592] binder: 19589:19592 transaction failed 29201/-28, size 0-0 line 3147 [ 1162.427978][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1162.433799][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:00 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1162.489485][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:48:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 03:48:00 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x40000000016, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000f2ffffffffffffff000500007110b000000000009500000000000000c413411419995a045782849e53dfc55c259f5ea990d0f64ed00bbe702684f884a74e262081cd7529a963313f76114cbaeaac972be72124bff756cedbd12bf060aaca733c82ce64466c4efbd7898101ab45aea78b29ebf4288d40425d63e686a006d03d732997946e22dae91c1ff000"], &(0x7f0000f6bffb)='GPL\x1d', 0x80, 0x4e1, &(0x7f00001a7f05)=""/251}, 0x48) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x13) 03:48:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x8000000, 0x0}) [ 1162.655865][T19883] binder: 19816:19883 transaction failed 29201/-28, size 0-0 line 3147 [ 1162.677773][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:48:00 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:00 executing program 0: r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x100) tee(r1, r2, 0x1, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x1, 0x80000) accept4$tipc(r3, &(0x7f0000000040)=@id, &(0x7f0000000100)=0x10, 0x80000) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f00000002c0)=""/4096) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000000c0)=""/8) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000200)={0x9, 0x0, 0x1, 0x8, 0x3ff, 0x900000000}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000140)=0x1000, 0x4) 03:48:00 executing program 4: socket$rxrpc(0x21, 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x8000, 0x0) r0 = creat(0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000000000412d1fbc00000003000600000000190200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9832845814e95069c"], 0x60}}, 0x0) r2 = semget$private(0x0, 0x4, 0x20) semctl$IPC_RMID(r2, 0x0, 0x0) exit(0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x100000001, @mcast2, 0x10000}}, [0xffff, 0x1, 0xffffffffffff0001, 0xffffffffffff714b, 0x8001, 0x1, 0xbb05, 0x1, 0x7ff, 0x1, 0x3, 0x7d, 0x9, 0x7, 0x4]}, &(0x7f0000000080)=0x100) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f00000005c0)=0xe8) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='bpf\x00', 0x22880, &(0x7f0000000600)={[{@mode={'mode', 0x3d, 0xffffffffffffff5c}}], [{@uid_lt={'uid<', r4}}, {@obj_user={'obj_user', 0x3d, 'eth1.security'}}, {@euid_lt={'euid<', r5}}, {@smackfstransmute={'smackfstransmute'}}, {@dont_hash='dont_hash'}, {@subj_type={'subj_type', 0x3d, ':'}}]}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r3, 0xffffffff}, &(0x7f0000000340)=0x8) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) 03:48:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:00 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x81, 0x200000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffce0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000000000000cd5eb385"], 0x14}}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x1) ptrace$setregs(0xd, r2, 0x9, &(0x7f00000001c0)="5dc68921d8d015148943f50aca8fd45b4d8445dbd9e414021a42987d80be20cb7a44efea1c7d1272fe4a94a1c5a127ce6192e21035faaf4cc55cdf8be5d55e1d6046f355b3d3eb901f7d95846b33bab31777bae61613ca5fc49423564ad62c002a52a62a3df6c9f0468568546c9a37d7cd1493a370388f9e7b03348784671291049e44d52a7ae81668d3f1dda6e83af270a3a188f105acd4a78bca91e0ab73596f610e99b1966127ca483f461e") 03:48:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x12000000, 0x0}) 03:48:00 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:00 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6488]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfdfdffff, 0x0}) 03:48:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x140) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14, 0x800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000400)={0x0, 0x6, 0x101}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000480)={r3, 0xb6, "32d311ae6691f60a532aae95a3dd90baa8eef3c6810e9eea8f36b09e8168e11f77dfcb240def978ad66f2f33cc9e3e7f6dca6cde0fb63b6417dfa803e325a329de0ddbc028443c71e025524d64ab1a78f3c93cb331c4aad95bd231e70a4f9286ca88e8304da4f1b5d58111a42c5f0fa53d23033cebdd2f81a0d08755c38c68526d9828c08f553c2099be146681d28759a4ddd378c896ac268da9b8eecf3d5a97a8db90b43bb02d20376072e4c02303341b0f17e760a3"}, &(0x7f0000000540)=0xbe) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={@remote, 0x64, r2}) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000200)={0x9, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @empty}}}, 0x108) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000340)={[0x31d, 0x401, 0x3, 0x9, 0x7fff, 0xf9, 0x66, 0x0, 0x4, 0xfffffffffffffffe, 0x4, 0x5, 0x1000, 0x2, 0x8, 0x2], 0x1000, 0x50}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:00 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x100040100000015, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bcsf0\x00', &(0x7f0000000040)=@ethtool_rx_ntuple={0x35, {0xd, @esp_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x9, 0x7}, @hdata="8b994f2b0e835659d6f3e06f8f7a13113c2665abc47a87c9bee81a34423b2d01d984a79b1d512ca7b938282d8f78576ec2de70bc577df8382397c1aafcab5ca75930d4bd8723aa17", 0xa5a, 0x100, 0x5, 0x7f, 0xffffffffffffffff}}}) getsockopt(r0, 0x114, 0x2714, 0x0, &(0x7f0000000000)) 03:48:00 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1163.217972][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1163.218016][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1163.223896][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1163.229675][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:48:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfffffdfd, 0x0}) 03:48:00 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x100000000000000, 0x0}) 03:48:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:01 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={0x0, 0xde}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r2, 0x5b}, 0x8) write$FUSE_POLL(r1, &(0x7f0000000200)={0x18, 0x0, 0x3, {0x6a}}, 0x18) preadv(r1, &(0x7f0000000140), 0x27f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) 03:48:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000140)=0x100, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x41, 0x110) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f00000000c0)=""/111) syz_emit_ethernet(0x207843, &(0x7f0000000000)={@local, @empty=[0x4, 0x0, 0x0, 0x5], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300030, 0x88, 0x0, @ipv4={[0x207835], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = getegid() clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x6, 0x3ff, 0xfffffffffffffffc, 0x9, 0x86, 0x4, 0x4, 0x82a}, &(0x7f0000000040)={0x1, 0xffffffff, 0x5, 0x36b, 0x3ff, 0x6, 0x5, 0x1}, &(0x7f0000000100)={0x4, 0x7ff, 0x1ff, 0x6, 0x8, 0x200, 0x1}, &(0x7f0000000200)={r2, r3/1000+30000}) setgid(r1) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:01 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x800000000000000, 0x0}) 03:48:01 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1200000000000000, 0x0}) 03:48:01 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1, 0x101000) r1 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="c2fa184ad8f3", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x73, 0x0, @initdev, @local}, @igmp}}}}, 0x0) 03:48:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000200)={{r0, r1/1000+10000}, {0x0, 0x7530}}, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20000, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000100)={0x1, {r3, r4+10000000}, 0x1, 0x7fff}) 03:48:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x16000, 0x0) accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={r2, 0x1, 0x6, @random="83f865a0832a"}, 0x10) ioctl$RTC_AIE_OFF(r1, 0x7002) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x3, @loopback={0xf00000000000000}}]}}}]}, 0x48}}, 0x0) [ 1164.421557][T21067] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:48:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:02 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfdfdffff00000000, 0x0}) 03:48:02 executing program 4: syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r0 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0xc, @sliced}) 03:48:02 executing program 0: r0 = eventfd2(0x101, 0x80000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)=0x100000001) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:02 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x515d, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x100000000, 0x3, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) setrlimit(0x8, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0xffffffffffffffff, 0x6) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f66696c65302076626f786e657430747275737465bf642747504cd72373797374656d707070305c2e2b242073797a31000a9bdf5c9a2d476e16e8b8f7bfd8d25fddf1c0a7442aa75a52366fe476c77946db6bf9a6661ff76a5954ee6a1e7a9ac501deb149393d5a5e1257ab4fe4eebcaf9b"], 0x76) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$evdev(&(0x7f00000005c0)='/dev/input/event#\x00', 0x0, 0x400000) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000280)=r2, 0x29a60c4281d054e5) r4 = socket(0x40000000015, 0x5, 0x0) fcntl$getflags(r3, 0x401) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r4, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r4, &(0x7f0000000a00)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef443394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9", 0x241, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f00000003c0)='\aoj9\xbc\xf6u=w\x0e\xecuWOA\xe8\x85\x02^;\x8f\x9c\xd2a\xc1c\x1f8h\x84\x9ej2#\xe3g\xdd\x13\xedI\xdc\xa1\xfc1\xe5\x01VZ.\xfbD\x7f.\xbb\x99\xdb\xb7\xef\xbe\x1c\xc9\xb6\x17g\xff\xec\xf4\xe8lD{\xa8\x04\x0f\x8f\b\x8e\xf9ln\x90\xca\xf1\x97\xb6[\x14})\v\xeeU\x14o\x1b1fV\xbf\r\xa51zhq\x10\v\xf5\xb1g\x9c\x1c\x83b\xd3\xa3\xd7\xb9\xeb\xf9\xc0\xd1\x15\xf1\xa3\x8a^\xbe\x12\x97\xc8lf\x95\x9e \x00\x00\x00\x00\x00\x00\x00\x0er\x05\x1d\xd8\xaa\xf5\xd4\xc0\xd0\x80,\x05V\xe46/9x\xd5P\xd1v\'?\x1d|\xe5\xe2\xe9\x7fy|\x1f\xb47d\x10\x8c\xcc\x91\x82\x925\xeb\xe8\x88\"\x96B\xec\x9c\xa8\xa7\x7fr$\xb4\xa0', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x5, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) readahead(r1, 0xffffffff, 0x4) mq_timedsend(r5, &(0x7f0000000040), 0x0, 0x0, 0x0) 03:48:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000140)=ANY=[@ANYBLOB="1a680000030100000900000002000200"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x602) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@remote, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000280)=0x8, 0x4) 03:48:02 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x150, r1, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x99}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffff81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x35}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe9}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 03:48:02 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x115000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000280)={{0xffffffffffffffff, 0x0, 0x5, 0x3, 0x1}, 0x1000, 0xda9, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0xfffffffffffffff8, 0x206, 0xde5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 03:48:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x100000001, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) [ 1165.021598][T21612] binder_transaction: 12 callbacks suppressed [ 1165.021619][T21612] binder: 21584:21612 transaction failed 29201/-28, size 0-0 line 3147 [ 1165.069339][ T22] binder_release_work: 12 callbacks suppressed [ 1165.069347][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:48:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:02 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x5, 0xfffffffffffffffe) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/8) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x10000, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x3c, 0x0, @in6={0xa, 0x4e21, 0x0, @local, 0x10001}}}, 0x90) 03:48:02 executing program 3: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x4000000000000000) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400000, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080), 0x4) fcntl$setstatus(r0, 0x4, 0x2000) 03:48:02 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x400000, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000002c0)={0x4, 0xb, 0x4, 0x400, {}, {0x4, 0x1, 0xfffffffffffffc01, 0xffffffffffffffe0, 0x6, 0x0, "df18cad2"}, 0x4, 0x2, @planes=&(0x7f0000000140)={0x4, 0x80000000, @mem_offset=0x7}, 0x4}) r2 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001540)=ANY=[@ANYBLOB], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r2, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r3 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="acb9"], 0x2) ftruncate(r3, 0x10099b7) sendfile(r0, r3, 0x0, 0x88000fbfffffc) 03:48:02 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x30000, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0x3, 0x7f, 0x6, 0x1000, 0xfffffffffffffffa, 0x7}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') fremovexattr(r1, &(0x7f0000000340)=@random={'osx.', '\'selinuxnodevproc)\x00'}) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="439429bd7000fedbdf250900000914000200080002000700000004000400040c0400"], 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(0x0, 0x8, 0x40000000084201) accept$netrom(r3, 0x0, &(0x7f0000000240)) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl(r4, 0xfffffbfffff3ffa7, &(0x7f0000000140)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x220000, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000100)=[0x5, 0x6a6a]) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000380)={0x2, 0x3, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1}}) perf_event_open(0x0, 0x0, 0x0, r3, 0x2) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, 0x0) 03:48:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000020000030000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000001700000000000000000000000000000000000000000000005800f73e516b9a70f7000000000000"], 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='!vmnet1vboxnet1procvmnet1\x00', 0xffffffffffffffff}, 0x30) getpriority(0x1, r1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x10000, 0x0) link(&(0x7f00000004c0)='./file0\x00', &(0x7f0000001700)='./file0\x00') ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x0, 0x4, @scatter={0x6, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000140)=""/90, 0x5a}, {&(0x7f00000001c0)=""/154, 0x9a}, {&(0x7f0000000280)=""/17, 0x11}, {&(0x7f00000002c0)=""/139, 0x8b}, {&(0x7f0000000380)=""/135, 0x87}]}, &(0x7f00000004c0), &(0x7f0000000500)=""/106, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000580)}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001740)={{{@in=@multicast1, @in=@broadcast}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000001840)=0xe8) exit(0x3f) 03:48:02 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:03 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x9, 0xffffffff, 0x100000001, 0x100, 0x0, 0x2, 0x0, 0x2, 0x9, 0x5b0, 0x199fc365, 0x0, 0x6, 0x3, 0x3, 0x7, 0x6, 0x3, 0x1, 0x4, 0x9, 0x7fffffff, 0x81, 0x23, 0xfffffffffffffff5, 0x74, 0xffff, 0xa7, 0x7, 0x9, 0x24b6, 0x40, 0x3, 0xffffffff00000000, 0x100, 0x62c8, 0x0, 0x2, 0x5, @perf_config_ext={0x8001, 0x1}, 0x20, 0x9, 0x6, 0x6, 0x40, 0x3, 0x1000}, r1, 0x2, 0xffffffffffffff9c, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/8) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) statx(r2, &(0x7f0000000100)='./file0\x00', 0x0, 0x40, &(0x7f0000000200)) [ 1165.565061][T22061] binder: 22012:22061 transaction failed 29201/-28, size 71776119061217280-0 line 3147 03:48:03 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:03 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) 03:48:03 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:03 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:03 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000017740)=ANY=[@ANYBLOB='!\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="04000200"], 0x20}}, 0x0) 03:48:03 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:03 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDDELIO(r0, 0x4b35, 0xb) [ 1166.339696][T22150] binder: 22012:22150 transaction failed 29201/-28, size 71776119061217280-0 line 3147 03:48:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0xff, &(0x7f0000000080)=""/62) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdf646846661b7485cc05edbd29747bd03067074d0c3566b0255cca0376ac70b419464d6acb7ec38714fd466d9471172aa645f40a0e96b14d060e646394a4d4c210dff3c147f066402823a660108a30de8b3ac73f7ef7769470eb8b1"], 0x0, 0x0, 0x0}) 03:48:03 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:03 executing program 1: 03:48:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000200)={0x3, 0x100000000, 0x0, 0x22, [], [], [], 0x74dbde3e, 0x0, 0x0, 0x4, "0e8ad81b73c06e8df0e50c8daffc9770"}) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:03 executing program 4: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x400000, 0x0) sendfile(r0, r1, 0x0, 0x666d) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0xa198) [ 1166.445535][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 [ 1166.453092][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:48:04 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13b}}, 0x1f) close(r2) r3 = accept(0xffffffffffffff9c, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80) connect$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0x2, {0x5, 0x8, 0x80000000, 0x2, 0x1, 0xfea6}, 0x1, 0x9}, 0xe) signalfd4(r4, &(0x7f0000000c00)={0x1d9600000}, 0x8, 0x838401e50c07235a) r5 = dup2(r1, r0) write$9p(r5, &(0x7f0000000c40)="2891614983998f3520c2a2f25bbd35684f50f22da0447fa17d0efc9507f532bf27a4f8d6763d8617fe5189ce943b520706f954b2a3ac80660d81fc5baa3b53481a55f7f0801ca01fbefbbd57519d5c368cafbf8ec72f109de61b9b53043189de62bbffbdf7f23d696f05046b6cf3640bf4d746159be4323748e93e4591b6a695ef60c765715f874f76d73ea7ce9f86a4c37657097989dde6ff747ecbcf07b243669da2ba8ed516fa311e92f559ba7ecf0c917dd2b3428265af8b94f61199faf349b2ed0bf52db213890e754b2d9ab44a5bdc5b7116e4cb5ebed5f5d040eafef4120b3e62c877b9b103a0f156e60f7328bbb7b1f8d6711adf676de173358b4c2c92852f23a2fb7af80d9cd9de0d4d70517f40c737c51a74db9359623e01db143c2448b9e250187c4c7df8f7b6f9d183038ebcb185c7bf13e081c0f8b807d461add6ad188479584d971679512d7bb7fd0088d9215d63cda9e8e9741bff1a8147aadcb542f0a3d2d6def9ce67362e802da9d53d799a6b2f67dc57451d25f864e7e5468e4a3f941a1e3678834fc5e41b24ff560f4cf2295dd391dfa46eec54d8f1e222e9145003cd5a88574ab412bb3723c7eba10c47d25b95dd2ed397b2eccfee143b75db790a87140b3bef50d7ef091bb4ba643661b914697f6e0a05f8974f93783a040d68ad53b6e5db07a193c78a7692c9d2e6c9701598ac39deacaa83e8e3dfe47d50e92042bc85ffb86a9267f679592d52a6dcc534cca8ee135a882004b52428cc6c1240ae32df4183389358d133531949b55b1f138073af8a7a450222a90adf8dd494a599d714135310800ffe7e45e9b721846e645a5fb1d8023413e82a2691ea22a4f6f302c9ab8c6776bd50ea97facfe3e235227353edf5646f2b603f544ecd13efd8f146662de113b1614a6beedf9a40edeb15812bb774dffa0138643e554effcc0ec97d928c9dfbc089b00e7e92e178db7f136a41a4f39eb84445158583eb5f043a0fc504e2323f04a650dbe2eb828a775d3dbf5cf47935e18e969e0b1481caa7c04163df57adb1d4971ef357ef910e87f18a39b65959d3719b79cedd2f6b8d749e8610c9cbccd3056502b7ef706250032ba3a76c1193ae7c2c61e9c20c1a5e9b09784856b7645f8822d54f1001833e83f60b0cf0b43753797d57c5455e58ab7dd3d9c48313a1e16155754b64c29186ab05bf783e82f4c7450c5b2b11cb18dbc480e95c67fc8bb60f818439a9675921e8bf6bce96230dcb6951d18c0ee0b3b133fab26ef14ce4ac5d40af64cd11ff52daaeebd2c82625991b86c3f7429bf81fba4639ac97a508a25bb2ff38ec1876ab639ab7b26707a79c1541d15aea34d5d21bad56f2640f0b29cc3971eeebc3fc86ca33a2eb1d49005837688e36217135c11e927c7337e0443f19fdb396f51a6073f30594d24283c59905ac8801154103e211544c1391010d6c8ea8bf41b97f3cb35fd034633e9d627fc0d55316f3654cdb5b8a40aee25b616b9e854815a326427c17af72f8b760bd5cf7d7b64d89150febecd6adf1e7f756cb1b03f4e98e1845211b926b85fe62c04b654a385430e1127aa7edc24577f6ec872e3c85b5586371f5a1f84d914b7b5614d71437a96175d36b6196f14a0f1a5ba0243a8525a657950fd1477b251e7bc72aaf80e9ba445be694f8738500e61c37a6a81a0408e0f9bc7c8d1ea0995e6fa73db543dc26cad63b1ba2569c815df36f1e59652b6955b917b7083e21aadf5a747a552d78c53cb8d6eb5ebc7a0819fe5db2b982d47c15bbb223ad3413a82aabc03f415261f2eb44192d82bd82275fdf7f8523b6bb0793f7b9de6225bf8db7859fc6b0d4be45c4a4de40ee6e96384670dc662510b0360175efc439984a9da25c9143fa3524532a24f0ea3d5812524f641291f315ca0e3c1b2396dd7710644a41cbc76694d2d219faa5b9c0a1a23550ca36c6b1670128c5923115a64a942e570ba569b4902548c173c10dfe1941a449afdbdf37ad6448aae5b456616da3e1fe476dd41e7b00ca83fe0312e2aa0cfe39bf5d287f25cb4d7cd5e29199b8ecc482dbe37db3034616d3f9d580fd767b0895e926b6bf3a7d858d23f823da0d2533a46bbfd86f2bf23949086b4bb2baad12f7c307d1bb059146d73c0bb09a4a8f422f3f9779387c7916180dda6c69e7e0ab4d334e1cf1408b4d0a61ef7cc8396fe92f077c95c7f511a63b68cad58cb917249dc3ae6bff21c2a908c02ba974905ab38246c914ceb447d2a737370e56b50c817de79cab40aecb1a6e8b98e4efd22b55d615fd183e7c16e04f3ffe34eb298aa26558ad5a7026d68c5155ae058af405e0d3b24af69c047ef48d126d8da0e6f8778ab97743eefda5c86e04f0d9bd7112f804070bd2b6edfaed5db9d0a02d0f5e8ad9551289d813648fe3c8201ea54d2f0a61f90bc272b879fb2f8e50897f5cfd63ba6f6312b938b89e7945ee76794b08c684ecfefecbf6e3dffb608e59bacb58354d000ce313f4519891de183c922de0cb8ebeedb652a4bfd5a2bdd004241f4a755e67e53f943d855a10d48a688a0a803e1bf4710360ce665524467d92d364bbccdd9f25d6fbf25e665f5320d313ae64f67f113e049978e6ff62deac8965ee9874b1e0f98396a3315c8d595be442695d372d3e26ddfda2a0b65e87b91aa172fa8a35569b21cefa83aad8081e6159aab74227051f5d2e2e6b9a3130969c74202d4b51af1970074d3a7f6a7dd6a725ea849bd41bfc72781350d0ed5fee2d32d0c4615d1799ffe780fc3709804fae173d73a9cba41c781dabe57e898982e0c0488380d597c0bc2a74e03f8e61a4f7d3148a556f60d818a2df807a123b52ed90bbef52755fcb35ac2f3e8ec4afb7f0c75dac567cbad52b5e13bfd49695f1fae79f2c198bebe76cdc1df23cab844f6abc10e3cd5142e49843da535953e55588df0612152842ab303edd53f3791c6a579ff89760389d789502ed2ca76fcb9ed28ec0c05bba86e3f9092abfbe3c6d8f46d3f431c8b34959320010b9496a68c5c4cb2314ab6b7b5a181d88efab184e048154105c2a91b1eb6216dfa0be13a3ddab1a71cf5406d6711f7ef0d7735b5cd90a2ccfd4b0921bc4e8244e1fe2b7a18c2c5d326b018270c73d20442dbe5b8643de005d259a775b2fd77bfe614b7708b43bd7a2dfd90278fe8c9ff33737d3378e0dd5c5295633208e5cc1a8696e51fcee44decc8b150ee7a3c71548a7ef7f0214105fa2b4f45981318123a61d9b479550e4ff26e885ac8e44ae3ec3a2a39db6b3974817a98d1296ae5a24551922cbfc0ecec6ba749e3db5549ed1fb78cd9e425ccfd3e7cc97012640762621bc4f5408762423f72de56044808b8a5385bd86870731ff6e8b4e1aa73d359ec900627b0d72b3661e6a902f9988ee70856aca1ef5d150cf4c61309fdc7fbae684de14f195e0d8e610dd39c9b688e654744500113376f1597e674e6644da0a9765f0395107e53ef9c54386908b9e5b8b55abac3c1286ce96bb699940a94dc4dfc1fa8c4615a1e451fbe75bf1127cfed2fea8395495690ee58ee507de21d62cbb0a8e686769d3022e02117a064c9095a9fb28d4ec27a3142e62675f300b591cda6618954e6e3046e02304110bf28019021fdd261c9743682173cfb32ac907625924422c2c209774dfcb977f25d353d8ce0595a7846ff3e2e2510fe4fe16cdf67d52768b09f130ec8ac33942f6cd5beca565b080ff0bf83d82d04ea9a0356fdf9f49281c527881eed02c87173a011419539006abe7cb782ec44aecbcd21331cbc8c3debeaf747db056e2628a724b0dbd97397858305bed80d07e7015d6414b8ad4811cb4cbb00604b119da21d44a3de43457232da7e04db9332a8df7cfeabe9e6b459f161502d651f1ab66d4159ac16b4dcf6c13da4b96f5f4ad25780cdc7592dd72bcbbdc3240837fb4e3ebdd4f40541d927de9c5407400d202b2a495cb34b5e4c8dedf75785400469a64e9d0f84979610824741c924c31a406be7c6c3bcafb17636b542ed1d31b0a014dd12c2856a656915b1664bb2d6c3a0922cb9fb33014813874e6a372b3d2ae6e661ecba2dde23f2541f58d1d018f8f3eb892c4284e7f93c201f8164feff8636a56fb38e4e4ada341ecc5d2060fc9057aba9aade85b386f6db3d1a8f5993ee939e8297127b203c741917d000c435197237964b0b3c134df5489cc60a7801178fe63d05a57cdd5dd593ea23bd3e105733d68f4c9127fdbae34b99f3a1994b4d89dbbbd9058d82e23d60fbd0be652a69e53db06b19454a7ef2ce45da8bb237c05d2e6ee2e95c3ca062373ceef53239902e7034a2fb859d8ba0ecccef1ab7f6dc61588432f3426c00b90751af1fb47eabbaf34a4931dbd293a5b946b8abd779e2c8b61af8fe9399cf9c09dbfea98dfb8aaef082bf2035511b0e4f9c38038be5c6f4c8328172f49d910aa0c600e4787e23415ce972a24bfb84857bb9063bd64e2b2944fc4854442509e71e91d8f59b8116c331e80c43f463dd2e56e19e6697bef959df9df6d01c12a3e041537419cd77c90f81de73f3e1e2f553dcc9a6f30f9cd15d1666f310ca067998fd489d759e402e1c6a80306c9376d1f0576911abdc2b232fa54a3f5dd2bd26cb4e0a06ab24859fec55a8ed1c223a0f20294be318997a98800dd4d51be52ece1678514b9963bf4fb76e7bd307a1f984b23d83e7ff557d5b3dc09d7946c9d8e2fde3b74af3f64b297540d582dedd29205aaa68b1cc84d39952284493e54880af8a76f6eb720b26b4b51036e8c047b170fb67c7af22a1c5f6d8edbe67b335772a42dcebf03f438905e22f019f34ce42ea2ee8981d96247cd7c98ff9e8f739e20c06dccd722b0ee08e97110bcff4f4059b409c618ee6375c212b9054ba81ae69ccf2dfbd2d514d6b6f8b76899939d154263b2ebb9a9f46e86eaf617e88a1d205d5497335ab870bf880ccd642a987f8b332a9a87ebd9c752486d37c1e0e7ea77daae0ccb48982a87c82cec94028b51169b401f86889604f13192e6eecbb583c5ebe1838095ca75db2ecc01648e0013f231406a34e5bc39a7b3f35e464114fe4ffcf18ac5141260fbcb131cd1d3e914484bc2e97d758e44f33d5052119db0051cf6681468b2726f6eec8c702836de93fb7837dc041729db9db83e3140320350cf823a82856bcd16c41e4770d80a9ed50b128071fcbf6a8361ffa6e765204e190df0be18097b7d204d037db03d92bc4c9cd97c54d95694994e1b944a209fa539eb3a1a52c9b0b0ce1b1fb21be4f84efd2c9680c9f07c0a937045027ce080c8dc7725ec6f13fa0031d6a39cb98d410d49d569b50f2796171d53721d5b92e96fdad02aa514b8174591d8be7c8cb886202d2849c01d26b1b2141a1c6626cb02034d7b54a05556c7256e80812aafce2e09d4b21b28ae1eefc5c342f0003271969ba07b8cc115f30c3fa03c887a9b614d0b4c6b6f02671ce0d1d5132dc568bfc6b015e7b400a389e827d79df102aae1e260d3a60ef9fdd39a3b0918f7ec6abe7af4307fdce0bcf1bdae65d0982e26ef71ac22e81aa513c1046125ec78fb51486d773b633bf0bbe5acfece35f953b33f920e20ac129a64a32644ca59e22602fa7be645579580ebc290774705996c97b9aca42150fbf196ccbcdbcc2d89ad8d02602ba670d0c44e88f4704323ce67f296d3cdad0b191476f1ec5d48fe533c9b571db5ac6a95d681e64a4706263ce32e189239af3485346b2ca67aba53eb7881d861a006c9f777bceffbc589ca12d4cebf5fa0188fdf078b0e00bc", 0x1000) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$read(0x0, &(0x7f0000000380)=""/109, 0x6d) ioctl$NBD_SET_SIZE_BLOCKS(r5, 0xab07, 0x6) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$NBD_SET_SOCK(r5, 0xab00, r5) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000400)={0x0, 0x8, 0x30, 0xfa24, 0x81}, &(0x7f0000000440)=0x18) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r8, 0xe79b, 0x9}, 0xffffffffffffff26) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000080)={0x20000000200000}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000001c0)=0x679, 0x220) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0xaf8a, 0x4) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000300)={r6}) setsockopt$sock_timeval(r9, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x200003, 0x7ff}, 0x10) [ 1166.534054][ T26] audit: type=1800 audit(2000000884.007:201): pid=23084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17233 res=0 [ 1166.569138][T23087] binder: 23050:23087 transaction failed 29201/-28, size 0-0 line 3147 03:48:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) [ 1166.622146][T23176] binder: 23050:23176 transaction failed 29201/-28, size 0-0 line 3147 [ 1166.669883][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 [ 1166.673466][ T26] audit: type=1804 audit(2000000884.027:202): pid=23084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir895149559/syzkaller.Qqz0OD/1572/file0" dev="sda1" ino=17233 res=1 [ 1166.687988][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:48:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x101, 0x4) 03:48:04 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8060000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000040)={0x6, 0xc0}) 03:48:04 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000100)='user\x00', &(0x7f00000006c0), &(0x7f00000001c0)='\xd1?\xf3\xd7v', 0x0) socket$nl_crypto(0x10, 0x3, 0x15) fstat(r2, &(0x7f0000000000)) [ 1166.881965][T23398] binder: 23361:23398 transaction failed 29201/-28, size 0-0 line 3147 03:48:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x4002, 0x0) write(r1, &(0x7f0000000080)="4975f8ea95a3c250735b4dd45029296d26559518d4bbf70b56eb6f9b1e7cda13c4dfb3ec6208f21b14d3655803164a2bab98509e22d588628f6fc00c3f60b2ded61e1c80788b0409168feac71892f94620b4ce35f242a22c", 0x58) io_setup(0x5b3, &(0x7f0000000040)=0x0) munmap(&(0x7f0000364000/0x2000)=nil, 0x2000) io_submit(r3, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x20000, 0x40000000, 0xf0000000000000, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) 03:48:04 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1166.965777][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:48:04 executing program 3: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x4000, 0x0) 03:48:04 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0x42d, 0xd3c, 0x7f, 0xade, 0x55, 0x69}, 0xfffffffffffffff7}, 0xa) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000100)={0x4, 0x7b7f02f6, 0x101}) sched_yield() ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000140)={0x8494, 0x8, 0x7, 0x5f, 0x8, 0x7fff}) 03:48:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x89, 0x0, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)={r1}) personality(0x5000002) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x5) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x5) 03:48:04 executing program 4: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) sendmsg$nl_netfilter(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10011000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x144, 0xd, 0x5, 0x210, 0x70bd29, 0x25dfdbfd, {0xe, 0x0, 0x1}, [@nested={0x14, 0x28, [@typed={0x8, 0x67, @pid=r0}, @typed={0x8, 0xf, @str='\xc8\x00'}]}, @nested={0x11c, 0x36, [@generic="82ad13dd3258799ef7804fe3a5f764a1417dffe065517b53789d33d4ec956ddc2bc8d34851ad18c0be4dcc2ef0b972c48570a86a4c6ed44d37bb826d874e0cd9e7993d86e56b2b98446216eedd29eefc2c469d970a9ee2ae201e80bba065d3ccbc4a60f7dd6401779e12356051448d54a69c41eb51f81bd4a30f341e61b4beafdfc95d01b19c69c3bc5a13bb29d6f93c39929582dba196fb16e290dfeeeb6c9449e3721c0d5a7a1d8927107893de6b93665a96c1316d47691f8af1043e008bb578ec167e263446a9d14252fbce93ab874347036251", @generic="483cc35942318ab4c37162a38b9ec497a7ab60fd2a1b799345cbfa0735c9301af622a633b1e4e18538d4464142a772bf8a9aa2bed2a741a8c9444040ea1b73efa3e9"]}]}, 0x144}, 0x1, 0x0, 0x0, 0x40}, 0x4004) prctl$PR_SET_TSC(0x1a, 0x3) read(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x1004000000016) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 1167.332556][T23776] binder: 23748:23776 unknown command 0 [ 1167.363927][T23776] binder: 23748:23776 ioctl c0306201 20000040 returned -22 [ 1167.378033][ C1] net_ratelimit: 20 callbacks suppressed [ 1167.378041][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1167.378196][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1167.383939][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1167.389648][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1167.406990][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1167.412855][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1167.412902][T23776] binder: 23748:23776 ioctl 40086607 20000080 returned -22 03:48:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:04 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1167.456223][T23776] binder: 23748:23776 unknown command 0 03:48:04 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x5, 0xffff, 0x568bae28, 0x7ff, 0x0, 0xcf, 0x800, 0x2, 0x5, 0xffffffff, 0x9, 0x6, 0x5, 0x9f2, 0x6, 0x8001, 0x48e6, 0x10000, 0x101, 0xe0, 0x8000, 0x1, 0x3, 0xfff, 0xa6b1, 0x6d756a7f, 0x8, 0x10001, 0x1, 0x80, 0x3f, 0xbd, 0x7fffffff, 0x7, 0x45be, 0x10000, 0x0, 0xfb, 0x1, @perf_config_ext={0x7ff, 0x7787}, 0x20080, 0x4, 0x3, 0x4, 0x6, 0x80000000, 0x1}, r1, 0x0, r2, 0x8) r3 = dup(r0) pwritev(r3, &(0x7f00000001c0)=[{&(0x7f0000000380)="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", 0x1000}], 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) getsockopt$inet_int(r3, 0x0, 0x3, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x3, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="0000eb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000169c43d34700dbafa928b30d7ce502fbb826cec03c000000000000"], 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000000), &(0x7f0000000100)=0x4) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe) [ 1167.504567][T23776] binder: 23748:23776 ioctl c0306201 20000040 returned -22 03:48:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)={0x350, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}, @TIPC_NLA_LINK={0xb0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaf6f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9849}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c0dcd6b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x572}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc8f}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf000000000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9f16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff4}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x4804}, 0x840) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r2, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000023c0)=""/49, 0xf}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 03:48:05 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4000, 0x0) r1 = add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r2 = request_key(&(0x7f0000000280)='cifs.idmap\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='/dev/input/event#\x00', 0xffffffffffffffff) keyctl$reject(0x13, r1, 0x2, 0xe0, r2) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000140)=""/13) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f00000000c0)=""/8) ftruncate(r3, 0xffffffffffffffcf) r5 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x40000) setsockopt$inet_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000040), 0x4) 03:48:05 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0}) 03:48:05 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:05 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x1, 0x594e, 0x9, 0x8, 0x6, 0x82, 0x1, 0xfffffffffffffe01, 0xffffffffffffffff, 0x6, 0x0, 0x200, 0x6, 0x4, 0xf02c, 0x2, 0x3, 0xff, 0x4, 0x2, 0x80000000, 0x0, 0x101, 0x3, 0x3, 0x6, 0x6, 0x4, 0x100, 0x0, 0x80000000, 0x2, @perf_config_ext={0x533f, 0xff}, 0x20004, 0x3, 0x8, 0x6, 0x6, 0x105d80b7, 0xa7}, r0, 0x10, r1, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1167.857994][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1167.863910][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:05 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x2000000000, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) r2 = socket$l2tp(0x18, 0x1, 0x1) fsetxattr$security_smack_entry(r2, &(0x7f0000000000)='security.SMACK64\x00', &(0x7f0000000040)='!wlan1\\\x00', 0x8, 0x3) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000018050000000000000000000002000000000800010400000008000500ac141400"], 0x24}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000280)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) bind$packet(r3, &(0x7f0000000180)={0x11, 0x6, r4, 0x1, 0x100000000, 0x6, @dev={[], 0x13}}, 0x14) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:48:05 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x62b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000580)) set_thread_area(&(0x7f0000000340)={0x6, 0x20001800, 0x4000, 0x200, 0x10000000000ffff, 0x8000000000000001, 0x4000000080101, 0x2, 0xffffffff, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)='./file0\x00') write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000c40)=ANY=[@ANYBLOB="2a0000000400000000000100000000000000be00000000000000020000000000000000005f79c08e7dae2ed04cf0d1a865f4b79d4c220a60f474029cfb52e4b385bcde7afe2cd90a693cb94c8f6b71fa413c52b3da6fde6bd0e48aa98acaaa9a4b699cb180085b18522e474ec62b789a8c20e8f1c925d60e63cbbf453b9f765b43495f14d127116e58ff4bf10afbb781c62b1dc5a5aa1952517d5ea4e585969f34c163f24e86aab6252f4c37bed0d35d604a47fe78a000ff3666f84a469ca6b83fba5cc2351c4cf0900c0680d034df43098c54d5e6683d8438f61e5f455b98925055cb3cff538e63be5d0ff19d6e2b6e08d641c92c8d0bfc5dd2e84294b919ad06640448b2d6bce749f53877de9d68be5be69229ee36"], 0x116) mount(&(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x820c01, 0x0) mount(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000004c0)='nfsd\x00', 0x2000023, &(0x7f00000006c0)='\x8auU{-\x154\x05-\xab\xc0\xcb\x1an\xd76*5\xec2c\x9f\xcf\xb8\xb6v\x9aA\x06K\x95\xd4dx#\xf8\x90\r\xf1S\xc4\xc2\a\b\x03^\xe6b\x03\xaal)eb,z4\xc9\xe8\x11Y\xacV') mount(&(0x7f0000000d80)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e061019df973b2f53d859e769464fe2a2410d59da45d13169add1c5529ce3628e6153ceb2e151b4c4a2bdac535d60eb398d4d6952a19e3d52a29749828eb1caff4558ca709d9c13c28a2da129717e838eb618c9886828e09a9400003f33827c69c3fbb70d4b5fba995326c48ced38769a4d61afd7207ee4db50c0ec11260778f607660f2b85e3cd0d67bc0cccd8dfba547fe5e36524ef742126514000d7cf7126e2536307a8290af7f78189faa73bfaf8cf0dee8d84a76599366358414b18f32d01f7a3d0b4802a4d706109f913d1821b52fe15f037bb48b6a83508fa846f00ff2db8be9fb7019950446c5fc560da43c8604e21f8c3d50df51e8e1c57327d19a22bb32d08445d6b6c48cc190e889820d901022c79024ecd10850f75f776e527b58a11aa3dcb451f7bef44c48408eb738cd71f7c08d8ef81eb74625cd4278231c100bae6cc9c9f9be7fa0ddb3a7bdd6fabd47c054d82b4f0d2ab404333c42b3668e0c1c9892da497a972e4e26944764bd1ea13ea03f0e0b2"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000a40)=ANY=[@ANYBLOB="3040abf7d58436d7496072d88d9fb924bf91f65251c2210ce6c33f5cf63ee466a17a37b30eb2325bbc9556b9ba20d4df40a9cb69d15d3308712819f3d2f27695155ef2b723bc4fcb5d38c46f71f14089eea8a3bb9dfa1e774fccee35dc618d63aa608e8d3f0421aabde758c08399866dd6f0c9c72140b221ecf2e9"], 0x0, 0x0, 0x80000, 0x0) r4 = dup2(r3, r1) ioctl$TCSBRKP(r3, 0x5425, 0x3) write$FUSE_OPEN(r4, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r2, &(0x7f0000001400), 0x0, 0x2) listen(r4, 0xb6a) ioctl$int_out(r0, 0x5462, &(0x7f00000001c0)) link(&(0x7f0000000600)='./file0\x00', 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) clock_gettime(0x2, &(0x7f0000000700)={0x0, 0x0}) utimes(0x0, &(0x7f0000000780)={{r5, r6/1000+30000}, {0x0, 0x7530}}) 03:48:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0xf000, 0x2000, 0x100000, 0xf000], 0x1, 0x80}) [ 1168.054952][T24487] binder: 24480:24487 transaction failed 29201/-28, size 0-0 line 3147 [ 1168.126409][T24643] binder: 24480:24643 transaction failed 29201/-28, size 0-0 line 3147 03:48:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:05 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1168.179859][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 [ 1168.186130][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 [ 1168.192537][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1168.192602][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:05 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000c80)='[trusted&\x00', 0x0) pwritev(r0, 0x0, 0x0, 0x81806) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usb(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x80000) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000000)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000040)={'bond0\x00\x00\x01\a\x00\x00\x00\x00\x14\x00', @ifru_names='bond_slave_1\x00'}) r2 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x12142, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000102000007) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) 03:48:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x99c8e1970a11afc0, 0x84) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x3, 0x6ad, 0x6, 0x61c}, 0x10) 03:48:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000040)=0x1f) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:05 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1168.351537][T24860] binder: 24844:24860 transaction failed 29201/-28, size 0-0 line 3147 [ 1168.396523][T24860] binder: 24844:24860 transaction failed 29201/-28, size 0-0 line 3147 03:48:05 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x62b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000580)) set_thread_area(&(0x7f0000000340)={0x6, 0x20001800, 0x4000, 0x200, 0x10000000000ffff, 0x8000000000000001, 0x4000000080101, 0x2, 0xffffffff, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)='./file0\x00') write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x116) mount(&(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x820c01, 0x0) mount(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000004c0)='nfsd\x00', 0x2000023, &(0x7f00000006c0)='\x8auU{-\x154\x05-\xab\xc0\xcb\x1an\xd76*5\xec2c\x9f\xcf\xb8\xb6v\x9aA\x06K\x95\xd4dx#\xf8\x90\r\xf1S\xc4\xc2\a\b\x03^\xe6b\x03\xaal)eb,z4\xc9\xe8\x11Y\xacV') mount(&(0x7f0000000d80)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e061019df973b2f53d859e769464fe2a2410d59da45d13169add1c5529ce3628e6153ceb2e151b4c4a2bdac535d60eb398d4d6952a19e3d52a29749828eb1caff4558ca709d9c13c28a2da129717e838eb618c9886828e09a9400003f33827c69c3fbb70d4b5fba995326c48ced38769a4d61afd7207ee4db50c0ec11260778f607660f2b85e3cd0d67bc0cccd8dfba547fe5e36524ef742126514000d7cf7126e2536307a8290af7f78189faa73bfaf8cf0dee8d84a76599366358414b18f32d01f7a3d0b4802a4d706109f913d1821b52fe15f037bb48b6a83508fa846f00ff2db8be9fb7019950446c5fc560da43c8604e21f8c3d50df51e8e1c57327d19a22bb32d08445d6b6c48cc190e889820d901022c79024ecd10850f75f776e527b58a11aa3dcb451f7bef44c48408eb738cd71f7c08d8ef81eb74625cd4278231c100bae6cc9c9f9be7fa0ddb3a7bdd6fabd47c054d82b4f0d2ab404333c42b3668e0c1c9892da497a972e4e26944764bd1ea13ea03f0e0b2"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000a40)=ANY=[@ANYBLOB="3040abf7d58436d7496072d88d9fb924bf91f65251c2210ce6c33f5cf63ee466a17a37b30eb2325bbc9556b9ba20d4df40a9cb69d15d3308712819f3d2f27695155ef2b723bc4fcb5d38c46f71f14089eea8a3bb9dfa1e774fccee35dc618d63aa608e8d3f0421aabde758c08399866dd6f0c9c72140b221ecf2e9"], 0x0, 0x0, 0x80000, 0x0) r4 = dup2(r3, r1) ioctl$TCSBRKP(r3, 0x5425, 0x3) write$FUSE_OPEN(r4, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r2, &(0x7f0000001400), 0x0, 0x2) listen(r4, 0xb6a) ioctl$int_out(r0, 0x5462, &(0x7f00000001c0)) link(&(0x7f0000000600)='./file0\x00', 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) clock_gettime(0x2, &(0x7f0000000700)={0x0, 0x0}) utimes(0x0, &(0x7f0000000780)={{r5, r6/1000+30000}, {0x0, 0x7530}}) 03:48:06 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1168.571204][T24899] device bond_slave_1 entered promiscuous mode 03:48:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:48:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x7fff, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) [ 1168.633210][T24899] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1168.645749][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 1168.652834][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:48:06 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000100)={0x1, 0x1, 0xfffffffffffffffb}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) getpeername(r0, &(0x7f0000000140)=@nfc, &(0x7f00000001c0)=0x80) connect$inet(r1, &(0x7f00000004c0)={0x2, 0x4e20, @empty}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth0_to_team\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) shutdown(r0, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000077000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) 03:48:06 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x58, 0x0, &(0x7f0000000040), 0xfffffffffffffd08, 0x0, 0x0}) 03:48:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) r4 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xa734, 0x200000) setsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000180)=0x44d, 0x4) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="246fed"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) r5 = socket(0x9, 0x5, 0x200) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:48:06 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local}, @in6=@remote}}}, 0xf8}}, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x101, 0x143182) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 03:48:06 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) timer_create(0x1, &(0x7f0000000040)={0x0, 0x30, 0x1}, &(0x7f0000000100)=0x0) timer_gettime(r1, &(0x7f0000000140)) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) tee(r2, r2, 0xffffffff7fffffff, 0x4) [ 1169.116847][T25544] binder: 25535:25544 unknown command 0 03:48:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc67a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20\x00', 0x200001, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x1, 0x0) connect$inet(r0, 0x0, 0x3db) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0)=0x8, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x1}, 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000200)=""/81) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x800) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000140)={0x9}, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x0) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=ANY=[], 0x0) r6 = getuid() ioprio_set$uid(0x3, r6, 0x81) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) [ 1169.160843][T25544] binder: 25535:25544 ioctl c0306201 200000c0 returned -22 03:48:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") timer_create(0x41f62eafc05eb25e, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x4, 0x400) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'bridge0\x00', 0x5000}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x1, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000180)={0x2, 0x40, 0x5, 0x40006}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}}, 0x4000) [ 1169.233066][T25544] binder: 25535:25544 unknown command 0 [ 1169.269290][T25544] binder: 25535:25544 ioctl c0306201 200000c0 returned -22 03:48:06 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000030000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 03:48:06 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x8, 0x40, 0xfffffffffffffff7, 0x1, 0x5}, 0x14) 03:48:07 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) timer_create(0x1, &(0x7f0000000040)={0x0, 0x30, 0x1}, &(0x7f0000000100)=0x0) timer_gettime(r1, &(0x7f0000000140)) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) tee(r2, r2, 0xffffffff7fffffff, 0x4) 03:48:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) r2 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) r3 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x30, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=[@increfs_done={0x40106308, r2, 0x2}, @enter_looper, @acquire_done={0x40106309, r3, 0x2}], 0xc0, 0x0, &(0x7f0000000140)="b888af70795070b10dc69c586acea4540714873e5cb07c60fdc0e95afb179ad8025bc05d0cd05d8f7fa01c0fd98a49c69e0662dc648e37015fa70308e41255fffbf9624ee56079c5e4dd8180e7e7a9875478db9dcb65fb87846ddf2f9e00261d35639075081cfead709e9dfa0eadc983fbcc69e3501aca2f0a01222fff963f9c476e7497d341893d5ede68cab999c18d31601e8b76d5b4912bc467150a050baf7a629da5eff5537463eb25a03debc42f9601a26a6a0165023dc3d2e06e8205d7"}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x6, 0x3f, 0x1}) 03:48:07 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e0000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000080)={0x3}) 03:48:07 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80350000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:07 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) timer_create(0x1, &(0x7f0000000040)={0x0, 0x30, 0x1}, &(0x7f0000000100)=0x0) timer_gettime(r1, &(0x7f0000000140)) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) tee(r2, r2, 0xffffffff7fffffff, 0x4) 03:48:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x3) 03:48:07 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) timer_create(0x1, &(0x7f0000000040)={0x0, 0x30, 0x1}, &(0x7f0000000100)=0x0) timer_gettime(r1, &(0x7f0000000140)) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) tee(r2, r2, 0xffffffff7fffffff, 0x4) 03:48:07 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1170.130779][T26298] binder_transaction: 6 callbacks suppressed [ 1170.130797][T26298] binder: 26297:26298 transaction failed 29201/-28, size 0-0 line 3147 [ 1170.151892][T26298] binder: 26297:26298 transaction failed 29201/-28, size 0-0 line 3147 [ 1170.165047][ T7952] binder_release_work: 6 callbacks suppressed [ 1170.165056][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 [ 1170.224478][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:48:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGETD(r1, 0x541f, &(0x7f0000000180)) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r0}) 03:48:07 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000400)='./file0\x00', 0x182) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000380)) setsockopt$ax25_int(r1, 0x101, 0x9, &(0x7f0000000040)=0x8001, 0x3) r3 = accept4(r1, &(0x7f0000000080)=@l2, &(0x7f0000000000)=0x80, 0x80000) sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)="6671830aec8bb71ff88dafc7ddc6a5e31a16e2cc4f8a86c28adf3d0d82dacf815c4582d1d584384e4f2b210fe8c7fe7bfc1bdcb7c81b42d16bdab20cb62a783d36df47", 0x43}, {&(0x7f0000000200)="64f9304782986256c5d86c7cf6b916b237c9b810ec1c33c86ab503833caeec9637f8d7d3b54d9e5e4f992c52fa3ca5bd03f217346391efede7f111e3cb5a629127fc15143538e157d8ffca9538e9469ebc388a2e40771ead12f23438df59deb32056", 0x62}], 0x2, &(0x7f00000002c0)=[@rights={0x28, 0x1, 0x1, [r1, r1, r1, r1, r1]}], 0x28, 0x80}, 0x4) 03:48:07 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:07 executing program 0: socketpair(0x1f, 0x80006, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'veth0_to_bond\x00', 0x400}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x1, @dev={[], 0xc}, 'hsr0\x00'}}, 0x1e) accept4$x25(r1, &(0x7f0000000140), &(0x7f0000000200)=0x12, 0x80000) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffea4, 0x0, &(0x7f0000000140)=ANY=[], 0xfffffffffffffdc9, 0x0, 0x0}) 03:48:07 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1170.372967][T26467] binder: 26424:26467 unknown command 0 [ 1170.394515][T26467] binder: 26424:26467 ioctl c0306201 20000000 returned -22 [ 1170.422715][T26549] binder: 26424:26549 unknown command 0 03:48:07 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:07 executing program 1: setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000800)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000007c0)={0x4, 0x80000001, 0x1}) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20040000, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, 0x0) setpriority(0x0, r1, 0x10000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000100)=0x6, &(0x7f0000000140)=0x2) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)='trusted.overlay.nlink\x00', &(0x7f00000005c0)={'L+', 0x10001}, 0x28, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000680)={{{@in, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in=@local}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000040)) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000840)=[@in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x1f}, 0x1}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x100000000, @mcast2, 0x1}, @in={0x2, 0x4e24}], 0x58) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f0000000780)=@v2={0x2000000, [{0xe24, 0xffff}]}, 0x14, 0x1) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000280)={0x8001001, 0x3cb, 0x3}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(0x0, 0x0, 0x0) [ 1170.453998][T26549] binder: 26424:26549 ioctl c0306201 20000000 returned -22 03:48:08 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000001040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000027c0)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f00000028c0)=0xe8) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000003980)={&(0x7f0000000000)=[0x4, 0x6488, 0x1, 0x8, 0x9], 0x5, 0x0, 0x9, 0x9a7, 0x6, 0x1, {0x3, 0x4, 0x2, 0x6, 0x5, 0x80f, 0x7f, 0x5, 0x401, 0x7, 0x800, 0x400, 0x101, 0x9, "8ff5c95dd0416b196fc60c606818022c258013249615a5ec4149ee943d9256bb"}}) getgroups(0x2, &(0x7f0000000040)=[0xee01, 0xffffffffffffffff]) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() r7 = getegid() getgroups(0x4, &(0x7f0000000240)=[r4, r5, r6, r7]) fstat(r0, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000002a40)=[0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff]) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000fc0)=0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003840)=[{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000000380)="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", 0xbc9}, {0x0}], 0x2, 0x0, 0x0, 0x4000}, {&(0x7f00000025c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002740), 0x0, &(0x7f0000002a80)=[@cred={0x20, 0x1, 0x2, 0x0, r3, r9}, @cred={0x20, 0x1, 0x2, 0x0, r10, r11}], 0x40, 0x4000}, {&(0x7f0000002ac0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4800}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000003100)=[@rights={0x28, 0x1, 0x1, [r1, r0, r2, r2, r2]}, @cred={0x20, 0x1, 0x2, 0x0, r8}, @cred={0x20, 0x1, 0x2, 0x0, r3}, @cred={0x20, 0x1, 0x2, 0x0, r8, r9}], 0x88}], 0x4, 0x41) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0x4008af03, &(0x7f0000000100)=0x40) r12 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="da6f96a8d59da3638f4bc4818381da77625f1c46b8529f6d4daeb15a587662612ca88ba4b4e1f74b10a37fa33b52f62a005c8e", 0x33, 0xfffffffffffffffd) r13 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000f80)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$link(0x8, r12, r13) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000001000)={@loopback, @broadcast, 0x1, 0x3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1]}, 0x1c) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:48:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x9008000) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000140)=""/187, &(0x7f0000000200)=0xbb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x41, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:48:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/8) [ 1170.755415][T26701] binder: 26628:26701 transaction failed 29201/-28, size 0-0 line 3147 [ 1170.801996][T26826] binder: 26628:26826 transaction failed 29201/-28, size 0-0 line 3147 [ 1170.845776][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 [ 1170.857749][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:48:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:08 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88640000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r1, 0x29, 0x3b, &(0x7f00000000c0)={0x5, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @rand_addr="88992b198bd4eca6c26023b303207c45"}}}, 0x108) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000040)={{0x84, @empty, 0x4e21, 0x2, 'wlc\x00', 0x3f, 0x6, 0x49}, {@multicast1, 0x4e20, 0x12003, 0x3, 0x0, 0x80}}, 0x44) close(r1) 03:48:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x153, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000e38e50b13fc19b3300000000000000000000000000000000000000006340400000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000059bb1c"], 0x0, 0x0, 0x0}) r1 = geteuid() r2 = socket(0x7, 0x5, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x82}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000280)={r3, 0x2a1}, 0x8) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x20000, &(0x7f0000000140)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport='privport'}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@appraise_type='appraise_type=imasig'}, {@dont_measure='dont_measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/binder#\x00'}}, {@obj_type={'obj_type', 0x3d, 'lo^vmnet1'}}, {@appraise='appraise'}, {@uid_gt={'uid>', r1}}]}}) prctl$PR_SET_SECUREBITS(0x1c, 0x1) 03:48:08 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) clock_nanosleep(0x67a0573bca6572ea, 0x5, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x87, 0x3f, 0x8, 0x6, 0xce, 0x800, 0x6446, 0x3}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_team\x00', 0x8}, 0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)=ANY=[@ANYBLOB="000000b57a76ff315b781b3ed4252842c98cf1000000"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001540)=ANY=[], 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000000040)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000027c0), 0x0, &(0x7f00000029c0)}, 0x800) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) openat$pfkey(0xffffffffffffff9c, &(0x7f00000019c0)='/proc/self/net/pfkey\x00', 0x100, 0x0) r1 = open(0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x2004e20}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r4 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) ftruncate(r3, 0x4) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@dev, @in=@remote}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) sendmsg$rds(r5, &(0x7f0000001c00)={&(0x7f0000000080), 0x10, 0x0, 0x0, &(0x7f0000001b40), 0x0, 0xffffffffffffffff}, 0x0) r6 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x401, 0x480) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f0000000080)=""/21) 03:48:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x10001, 0x2000) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000040)=0xffff) 03:48:08 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1171.051533][T27041] binder: 27038:27041 transaction failed 29201/-28, size 0-5804826558866653184 line 3147 [ 1171.151707][T27041] binder: 27038:27041 transaction failed 29201/-28, size 0-5804826558866653184 line 3147 03:48:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x19a, &(0x7f0000000000)={0x0, 0x132}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x32c, 0x2a000) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x7f, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x20, 0xaff, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 03:48:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a324cd015ce04a741bba4634b9ea26d394bd401598e4bd8a6b54aa149cf04876463a095b800b2e504c206303d8773d109451913afa11f5988ff1551c"], 0x0, 0x0, 0x0}) [ 1171.347036][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 [ 1171.354657][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:48:08 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1171.521437][T27507] binder: 27412:27507 transaction failed 29201/-28, size 0-0 line 3147 03:48:09 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000280)=0xfffffffffffffffb, 0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x800, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000040)=0x1, 0x4) signalfd4(r0, &(0x7f0000000080)={0x2}, 0x8, 0x80000) [ 1171.742199][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:48:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:48:09 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89060000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) [ 1171.911904][T27876] binder: 27862:27876 transaction failed 29201/-28, size 0-0 line 3147 [ 1171.970279][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:48:09 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x66c, 0x80000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10, 0x80800) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x1, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) 03:48:09 executing program 4: socketpair$unix(0x1, 0x200000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'eql\x00', 0x2001}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10000000339) dup2(r0, r1) 03:48:09 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89ffffff]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:09 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000140)="6469db2042d70b85b0737a13e5bfb29deec7ba5790d893ba1436c97761cd8d68cee632219c912b0fb417b91b9af4cffb92fe69f95370d2172369dd4bbdae889bc2977ea05217d406872ad7b1554634b42a134151fe2bf09b9cab5b6e4aeac4ee876dae04fbd3ad0afe059e8939fb833aae63192d00045d89ccec2f7a94061e59d3344c3287599863e16042003a9bb9d3eaf3bb6fc2c07ace3b0dd9355bef10bc47778f7efbc7b4", 0xa7) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x5) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 03:48:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000400)=""/228) [ 1172.315077][T28002] binder: 27991:28002 transaction failed 29201/-28, size 0-0 line 3147 03:48:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:48:09 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x54, 0x0, &(0x7f0000000080)=[@acquire_done={0x40106309, r1, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2a5, 0x0, 0x0}) 03:48:10 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1172.559443][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:48:10 executing program 4: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171b", 0x53) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$audion(0x0, 0x0, 0x0) ftruncate(r0, 0x6) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000380)={@mcast2, 0x0}, &(0x7f0000000740)=0xffffffffffffffb2) r5 = getuid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@remote, @in=@multicast2, 0x4e24, 0x0, 0x0, 0xfffffffffffffff9, 0xa, 0x0, 0x80, 0x3a, r4, r5}, {0x10001, 0x0, 0x9, 0x0, 0x3, 0xffffffffffffff80, 0x0, 0xffffffffffff7fff}, {0x4, 0x1000, 0x10000, 0x6}, 0xffffffff, 0x0, 0x3, 0x1, 0x1, 0x3}, {{@in=@remote, 0x4d6, 0xff}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x28}, 0x3500, 0x1, 0x1, 0x10001, 0x9, 0x1, 0xb0}}, 0xe8) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) fcntl$getownex(r2, 0x10, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x30, 0x7, 0x0, 0x7, 0x3f, 0x1f, 0x10001, 0x401}, 0x0) write$tun(r6, &(0x7f0000000640)=ANY=[], 0x0) r7 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) write(r6, &(0x7f0000000400)="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", 0x200) linkat(0xffffffffffffffff, 0x0, r7, &(0x7f0000000300)='./file0\x00', 0x1400) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000040)={0xea, "771a0329bd6259a55b7884fbc95e4dc1d5dc80ef0f30febbc15b83f8dda502fa", 0x1, 0x1}) sendfile(r6, r7, 0x0, 0xc7000000) 03:48:10 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x48, 0x0, 0x0, 0x15}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040), 0x4) 03:48:10 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdd86]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1172.735492][T28646] binder: 28610:28646 BC_ACQUIRE_DONE u0000000000000000 no match [ 1172.810605][T28646] binder: 28610:28646 ioctl c0306201 20000040 returned -14 [ 1172.828010][ C0] net_ratelimit: 22 callbacks suppressed [ 1172.828018][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1172.839661][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1172.866627][T28742] binder: 28610:28742 BC_ACQUIRE_DONE u0000000000000000 no match [ 1172.918210][T28742] binder: 28610:28742 ioctl c0306201 20000040 returned -14 [ 1172.935682][ T26] audit: type=1800 audit(2000000890.407:203): pid=28751 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17524 res=0 03:48:10 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000004c0)='./file0/file0\x00', 0x200200, 0x42) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000500)=0x40, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) r4 = getuid() mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x8000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xd000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@seclabel='seclabel'}, {@dont_measure='dont_measure'}, {@smackfstransmute={'smackfstransmute', 0x3d, '/'}}, {@subj_user={'subj_user', 0x3d, 'ppp0'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsdef={'smackfsdef', 0x3d, 'proc'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_measure='dont_measure'}]}}) r5 = syz_open_dev$evdev(&(0x7f00000005c0)='/dev/input/event#\x00', 0x0, 0x40000) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:10 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1172.991784][ T7952] binder_thread_release: 2 callbacks suppressed [ 1172.991795][ T7952] binder: release 28610:28742 transaction 455 out, still active [ 1173.017022][ T7952] binder_release_work: 56 callbacks suppressed [ 1173.017029][ T7952] binder: undelivered TRANSACTION_COMPLETE 03:48:10 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) r2 = getpid() lsetxattr$security_smack_entry(0x0, &(0x7f0000000400)='security.SMACK64EXEC\x00', &(0x7f0000000680)='#cgroup:\x88Ftrusted\x00', 0x12, 0x1) sched_setscheduler(r2, 0x5, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000700)) futimesat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x5) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB=',\"']) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fe"]) r3 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000780)) chdir(0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x2, 0xc4000) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000440)={0x0, 0xfb, 0xe6, 0x3, 0x8, "99cf6838d36306d80c1b02424e392620", "f91a96a6a6e99ebc98498b4b76300a8b07dd7d681c15d64d092056c59036462b37415910b865ff81f6223dc0745820ee6cd3d448fc7217f0b02c547cdb6e41d31198b967eb0e649029817aa29bb461c2e43d87d943ec374f261f8018c7dfc332a4809ae7ea104c625e22119590646a9752ffffae899e57336a7111fafa3c08b715193bb6a0b3bd6c5de5ed766ee114a15a8363d4bd2c09d78734337880c6bf76c1774a820c21cdaa9b1bfb7ae28c1421405495e1dd8463e850e006dab0b3b1fa079a0f5032cdd9a8a2bed3629c2a6a120a"}, 0xe6, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000580)={r0, r3, 0x8000, 0x26, &(0x7f0000000340)="c282fe412acbc9f96601b5d4c0e357e65b3b62d5435242cb41292bce25d9003341e571403cc9", 0xfffffffffffff000, 0xffffffffffffffff, 0x8001, 0x7f, 0xa2, 0x3, 0x632, 'syz1\x00'}) fchdir(r4) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r6, 0x0) syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0) 03:48:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0x1, &(0x7f0000000080)=0x4) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 1173.123314][ T26] audit: type=1804 audit(2000000890.437:204): pid=28751 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir895149559/syzkaller.Qqz0OD/1591/file0" dev="sda1" ino=17524 res=1 [ 1173.150549][ T7952] binder: release 28610:28646 transaction 454 out, still active [ 1173.241883][ T7952] binder: undelivered TRANSACTION_COMPLETE 03:48:10 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff89]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1173.292905][T28866] binder: 28834:28866 transaction failed 29201/-28, size 0-0 line 3147 [ 1173.367132][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:48:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:11 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:48:11 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1173.617998][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1173.618566][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1173.623836][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1173.623915][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1173.629773][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1173.635473][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1173.723683][T28851] overlayfs: failed to resolve './file1': -2 03:48:11 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0xfffffffffffffffe, 0xf000}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0xab0, 0x5, 0x88, &(0x7f0000ffb000/0x4000)=nil, 0xd834}) 03:48:11 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x80, 0x800) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000001c0)=0x4, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, 0x0) 03:48:11 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xffffffffffffff8d, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0}) [ 1174.097977][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1174.103837][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:11 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:11 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000340)='wlan1\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xfffffffffffffdea, &(0x7f0000000240)='wlan1\x00', r0}, 0xe2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000180)='net/udp\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000040), 0x0) timer_create(0x0, &(0x7f0000044000), 0x0) socketpair(0x10000000000001, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000400)={@multicast1, @dev, 0x0}, &(0x7f00000004c0)=0xc) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000740)={&(0x7f0000000500)={0x1d, r5}, 0x10, &(0x7f0000000580)={&(0x7f00000006c0)={0x2, 0x211, 0xfc, {0x0, 0x2710}, {r6, r7/1000+30000}, {0x1, 0x3, 0xfffffffffffffffe, 0x48}, 0x1, @canfd={{0x2, 0x2, 0x84, 0x8000}, 0x22, 0x2, 0x0, 0x0, "74eed6fc8180afcb9f567bdd733982570390c390ab9e10ba4aa107faa3ea263b596a401e3f45ad19c0913b01532b4b02bb55c4cc36dc83f7ee826970b5f131f3"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$cgroup_int(r4, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x101113, r2, 0x180000000) r8 = syz_open_procfs(r1, &(0x7f0000000440)='net/softn~\x1e\x99Q\x89vet') getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000280)={0x0, 0xfcaf, 0x1f, 0x6}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=r9, @ANYBLOB="dc0000009dab02f74227dbc9dba3fe98a9e762331f12d79297dfa4e7313703000000283cb677582e3e92f758ffca1dd5c161de38a420fa736d4e4a5a1f11419de28b5326be530b660e0575b010608aac8d05113e5dcf7913934a988ba5c81284f43e49211e2a2c8a9e0f670a3cb0cae2e4881d54bb08a7080a84d76426a917705ed9384c57325427f6eb006622d369c7151e658b12b7bfa26c92638e5618fd9a94e010a20507ecc2a50fdc2fd382615567b58485d0f6da751db595f784e1ae489a9f843678a5540dcb77707461d40251a0ddd2d84522c8da4244613515dd8a0ecaf34c3a3b"], 0x0) preadv(r8, &(0x7f0000000480)=[{&(0x7f0000000080)=""/103, 0x67}], 0x1000000000000189, 0x0) 03:48:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) connect(r1, &(0x7f0000000000)=@isdn={0x22, 0x2, 0xffffffffffffff83, 0xf1, 0x10001}, 0x80) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20\x00', 0x20001, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc, &(0x7f00000001c0)="6aacead9520b9600377f774ee90d0ab9746dc021bac0a8cc66d87b8c6fc9517eaf4b76b1a32550289c8a9bcef56f4d1bb6476e4b0208294ed9785bfce95f0fa05b12f156d01bfe8036c00037861efb92baddf9bef50402fb1fbd4e58b6e5a87baaa5ffeb4983194d388704ca47ea465e1804c85afe0eb2d16adeb56b35b7b5d208ba53bfdce3dcb20b890988e5a5c05d35f9e2ba10abf26fb1026388527899cdae5f177a48b54e9106f2683a1576f564d2d435fdea2773c752d21bcaef7775662b347b79b5bee267b314a75ecb5f0aa3267bc85c348aabeaaad815d858a4", 0xde) ioctl$BLKPG(r1, 0x1269, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000180)) fsetxattr$security_ima(r1, &(0x7f0000000480)='security.ima\x00', &(0x7f00000004c0)=@ng={0x4, 0x3, "f2c5f4c9bd7ba2c55aa90d2b82462f9c"}, 0x12, 0x2) r2 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x0, 0x400) listen(r2, 0x5) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) stat(0x0, &(0x7f0000000400)) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000500)=0x3, &(0x7f00000003c0)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xfb) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) accept4$ax25(r2, &(0x7f0000000640)={{0x3, @netrom}, [@bcast, @remote, @rose, @netrom, @default, @remote, @default, @rose]}, 0x0, 0x800) clone(0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000003000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006340400000000000000000000000000000000000000000000300000000001e00000000000000000000000000000000000000000000000000000000000000000000000068e141c9ab0c5badf2c044a35198b599d8fdcf6d6ff6d96aba2cf779f292edd11311b8cfe7776df459feb20832263fe332bfd810b2ca6d4cb9ae097af4a5b3633b2999f65aaad72bb30b3b866eeb9cdfa698524fb1bc95d101118548c41f6990b480fe71563435e902"], 0x0, 0x0, 0x0}) 03:48:11 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:12 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73ca67775c5418889206ea56e9136a3d0d056b00040ef732487b928b2271c1b13dd766b0553ef8ca6a6e75734a703000000bab8fd86c7"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="311a898784de05a52047be67ad08c0d1f87408a10e744d5cacaf6863c0f7bd57af32ae46a531b4113c803d73c323c0d7e6") ptrace$cont(0x7, r0, 0x0, 0x0) 03:48:12 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:12 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) r2 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3, 0x20000) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x1, 0x0, [0x0]}) recvfrom$x25(r1, &(0x7f00000002c0)=""/168, 0xa8, 0x40, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) 03:48:12 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:12 executing program 1: openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) syz_open_dev$vcsn(0x0, 0x0, 0x0) 03:48:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3f, 0x101080) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 03:48:12 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8000, 0x100) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000080)) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4000000000000, 0x2) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:12 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1176.009635][T29696] 8021q: adding VLAN 0 to HW filter on device bond0 03:48:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000634040000000000000000000000000000000f7ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 03:48:13 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x200000041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$getsig(0x2, r1, 0xffffffffff600003, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 03:48:13 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:13 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:13 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x200000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="2e0000002e008183ad5de0713c444d000700000010000340c00e00000000000037153e370000000060000000d1bd", 0x2e}], 0x1}, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)=0x0) fcntl$setownex(r1, 0xf, &(0x7f00000001c0)={0x2, r2}) connect$caif(r0, &(0x7f0000000200)=@util={0x25, "062a0454295d2b0520afe6aa961f5ad3"}, 0x18) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xb2d, 0x40000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x4000, &(0x7f0000000000), 0xe, r3, 0x1}) 03:48:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:13 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1176.198867][T30605] binder_transaction: 1 callbacks suppressed [ 1176.198885][T30605] binder: 30535:30605 transaction failed 29201/-28, size 0-0 line 3147 03:48:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000), 0x4) 03:48:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x9, 0x209e1e, 0x408000000001}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x2}, 0x2c) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x47, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000ffc000/0x2000)=nil}) accept4$netrom(r0, &(0x7f0000000140)={{0x3, @rose}, [@default, @null, @remote, @remote, @null, @rose, @remote, @netrom]}, &(0x7f00000000c0)=0x48, 0x800) 03:48:13 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:13 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e23, @loopback}}) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x1, 0x2) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000200)=""/93, 0x5d) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x46) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000280)=""/76, &(0x7f0000000300)=0x4c) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x5) 03:48:13 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x78, "1965045fa344028691111860d852b0f7dfae431a225358f513091fc72bbc6c8e9f17a5aa1390e01bd7170ca65ef1bc302125c1c74080c9b73cbfd3324619575bc3496a48de55a2dafe49353fb803cc8f14f43d98271147a7c6966797d9d1aa81c53f5f92b8d8707a9e337f736a2d23a06200696c37c8de44"}, &(0x7f00000001c0)=0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x78, &(0x7f0000000200)=[@in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e20, 0x40, @mcast2, 0x9}, @in6={0xa, 0x4e21, 0xfff, @empty, 0x1000}]}, &(0x7f0000000700)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={r2, 0x2, 0x800}, 0xc) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000680)={0x6, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}]}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000006c0)={'ipddp0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) [ 1176.427019][T30841] binder: 30830:30841 transaction failed 29201/-28, size 0-0 line 3147 [ 1176.448686][ T7952] binder_release_work: 1 callbacks suppressed [ 1176.448693][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 [ 1176.495951][T30841] binder: 30830:30841 transaction failed 29201/-28, size 0-0 line 3147 03:48:14 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2900000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:14 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write(r0, &(0x7f0000000280)="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", 0x4c2) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xfb3f) fallocate(r0, 0x3, 0x7fff, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsync(r1) 03:48:14 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b00000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000640)=[@acquire={0x40046305, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1176.757632][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 1176.766153][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:48:14 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x498200, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) getsockopt(r0, 0x7fff, 0x4, &(0x7f0000000300)=""/116, &(0x7f0000000380)=0x74) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x80040) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40004}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@bridge_getneigh={0x60, 0x1e, 0x200, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x84, 0x20044}, [@IFLA_PHYS_PORT_ID={0x8, 0x22, "3b01"}, @IFLA_LINKINFO={0x20, 0x12, @bond_slave={{0x10, 0x1, 'bond_slave\x00'}, {0xc, 0x5, @IFLA_BOND_SLAVE_QUEUE_ID={0x8, 0x5, 0x5f}}}}, @IFLA_EVENT={0x8, 0x2c, 0x5}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x8000}, @IFLA_WEIGHT={0x8, 0xf, 0x7f}]}, 0x60}}, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) [ 1176.840472][ T26] audit: type=1804 audit(2000000894.317:205): pid=31256 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir895149559/syzkaller.Qqz0OD/1597/file0" dev="sda1" ino=17531 res=1 [ 1176.902687][T31326] binder: 31306:31326 Acquire 1 refcount change on invalid ref 3 ret -22 [ 1176.949072][ T26] audit: type=1804 audit(2000000894.397:206): pid=31256 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir895149559/syzkaller.Qqz0OD/1597/file0" dev="sda1" ino=17531 res=1 [ 1176.976911][ T22] binder: release 31306:31326 transaction 461 out, still active 03:48:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:14 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x14}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000240)) fcntl$setstatus(r0, 0x4, 0xc00) socket$rds(0x15, 0x5, 0x0) r2 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000180)) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000200)=0x200000000005) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100027bd7000fbdbdf250c0000001c0009000800010009000000080002000100000008000200010000002400020004000400040004000800010004000000080001000400000008000100030000000c0009000800020001000000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) 03:48:14 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x1c}}, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000480)=""/195}, 0x48) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0x2, 0x0}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f938a9c348f18f45890e60f3ba3884667ce1461429d0000000000000000000000ca1d0673f264e7235def4bae089ec5f570ad522b0e2d977a1c9f30c5e13710a11c9a0bf6000deea1cf1617889508bb957a143908a5ac2e4d85926e4cce59bf9fdb66fd4a237eed88cdf7c969d38458f7b776d43df6412733d9aef9bc9c4b8136f0ce821ff60d4c9e1cba4136693491"], 0x0, 0x0, 0x0}) [ 1177.020898][ T22] binder: undelivered TRANSACTION_COMPLETE 03:48:14 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") recvmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000100)=""/251, 0xfb}, {&(0x7f0000000280)=""/200, 0xc8}, {&(0x7f0000000380)=""/242, 0xf2}, {&(0x7f0000000480)=""/234, 0xea}, {&(0x7f0000000580)=""/113, 0x71}, {&(0x7f0000000600)=""/103, 0x67}, {&(0x7f0000000680)=""/234, 0xea}], 0x7, &(0x7f0000000800)=""/179, 0xb3}, 0x0) fcntl$getown(r0, 0x9) dup3(r1, r0, 0x0) fchdir(r1) 03:48:14 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1177.172591][T31579] binder: 31564:31579 transaction failed 29201/-28, size 0-0 line 3147 [ 1177.185165][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 03:48:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) 03:48:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x40, 0x200) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x20020, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x480000, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) chdir(&(0x7f0000000100)='./file0\x00') 03:48:14 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x803) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x10001}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={r2, 0x66, "b95f8021f4bad836cd6ddaaef7549778eef2a1167c4566855f824f4a501a7eaa39a24a5f2dc4a3ae1dbc3f42cd0a408331a86ddd9ce24057fec2affd90547b5078a7d68acb04c78ada9df610689a1a3fc32b98a73332c35e2476bbdde5140159200dc936c0e4"}, &(0x7f00000001c0)=0x6e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000200)={0x30, "bbb5643580318cb72ce2dc2eb4f5c9de35ea645a054d253435db1d98cd397ce74901941fdcad5721797c0621cb38c58d53748e0eadd39d4366e3dbf214cce253cb5e4d70c447083d0e5b7efee23871397a50f9f1f3a5a56804af82d4e4bc64abe7b0c75aefb72f230a3f433105e28fc2ef4251fecb80938d181972b98c1bae17"}) 03:48:14 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000000)={0x3ff, 0xfffffffffffffff9, 0x31, 0x11}) preadv(r0, &(0x7f0000001300)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x40002) 03:48:15 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000f2c187f8ef97b2b00000000"], &(0x7f00000002c0)='\x19\xb7G>b\xc6\x05eA\x94\xed\b\xce\'\xf1\xeabu*aJ\xd68v\xa9\x01\xcb\xde\xf6\xde5O]\xf8\xd9\x8f\x86\b3\xcf\x95Mr*\x19\x18Y\xca\xe7\x87^\x9d40\x9e\xca\x91&5\x1b\x1c\xcac}\x15&\x06O\x9e\xe1\x85/\x02\x1a\xff\x90\x04\xab\x11\xae\x96h\xc3\xcf\x17\x17\xce\xe0\xd3\x9e\xdagk\xb7C?\xd9\xd0}\xd8\v\x1e(\xe4\x8c\xb3+g[\xdb\x03\x1d\x8f\x11\x9e'}, 0xffffff34) r1 = dup3(r0, r0, 0x80000) accept4(r1, &(0x7f00000000c0)=@rc, &(0x7f0000000140)=0x80, 0x800) ioctl$KDSKBLED(r1, 0x4b65, 0x3f) [ 1177.560335][T31869] binder: 31838:31869 transaction failed 29189/-22, size 0-0 line 2994 [ 1177.626058][T31916] binder: 31838:31916 transaction failed 29189/-22, size 0-0 line 2994 [ 1177.658371][ T7952] binder: undelivered TRANSACTION_ERROR: 29189 [ 1177.674710][ T7952] binder: undelivered TRANSACTION_ERROR: 29189 03:48:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:15 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:48:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) ioctl$FIONREAD(r0, 0x5437, 0x0) r1 = socket(0x5, 0x800, 0x8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4, 0x4) 03:48:15 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x600002, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000280)="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") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) sched_setparam(r2, &(0x7f0000000240)=0x101) [ 1177.808608][T32170] binder: 32161:32170 transaction failed 29189/-22, size 0-0 line 2994 [ 1177.828510][ T7952] binder: undelivered TRANSACTION_ERROR: 29189 03:48:15 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:15 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp6\x00') syz_init_net_socket$llc(0x1a, 0x1, 0x0) capset(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x4000, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) msgget(0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xffffffff994eff27, 0x80000) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048000}, 0x0) pipe(0x0) close(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') preadv(r3, &(0x7f0000000000), 0x0, 0x0) [ 1177.966626][T32355] binder: 32308:32355 transaction failed 29201/-28, size 0-0 line 3147 03:48:15 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040)=0x4a, 0xffffffffffffff35) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0xfffffe91) sendmmsg(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) openat$rfkill(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x40, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000380)={@local}) syz_open_pts(r0, 0x203) flock(0xffffffffffffffff, 0x4) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback, 0x0, 0x0, 0x0, 0x500}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 1178.030026][T32355] binder: 32308:32355 transaction failed 29201/-28, size 0-0 line 3147 [ 1178.068279][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:48:15 executing program 0: lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x30fe}, {0x4, 0x80000001}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x20000, 0x0) [ 1178.084178][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:48:15 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000030000000000000000000000004009000000000084fa000000000000000000d408000000000000001900000000006340400000000000000000000000000000f1ffffff000000ffa90000000037e1dee2bde4a22e981d95186900000000000000000100000800100000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x292000, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x2, &(0x7f0000000240)=0x4) accept4(r0, &(0x7f0000000440)=@ethernet, &(0x7f00000004c0)=0x80, 0x80800) sendto$llc(r1, &(0x7f0000000280)="32b981371939940c9a55ed3f06fb6f5af9829c30c1c398e18e9cbb29cebf58998e4f50ef6ea5dc8873c6d343a704a351adba0bcda2155702d740a8db19d15cd5ae4206b2d72a6da7b68890aab890f07b94e2a2e533e21cb8efd00ecc33bdf5bdfcfab515cdab3c3c946d311c6bcfd8bc493a9be6b30880e95dfa3f93ebbe3623e8a752fcb5c17a5b0e652da30c5f46e426a0b17e3651eeefb186b90c7803e9736474001da55b3e6ddfc0fa0f08b581e4415c3ce555b09a6d9a", 0xb9, 0x20000000, &(0x7f0000000340)={0x1a, 0x332, 0x3, 0x4000000000000, 0x7, 0x100, @remote}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r1, 0x28, &(0x7f0000000500)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={r2, 0x5dd, 0x18}, 0xc) accept4$unix(r1, &(0x7f00000005c0)=@abs, &(0x7f0000000640)=0x6e, 0x80000) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000140)=""/213, &(0x7f0000000080)=0xd5) [ 1178.258567][ C0] net_ratelimit: 23 callbacks suppressed [ 1178.258577][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1178.270111][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1178.327137][T32558] binder: 32507:32558 transaction failed 29201/-28, size 606208-64132 line 3147 [ 1178.413684][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:48:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:16 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:16 executing program 1: r0 = socket$inet(0x2, 0x2, 0x3) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x36d, &(0x7f0000000240)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={r1, @local, @empty}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000359fd5)={@link_local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 03:48:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x9, 0x80) getsockopt$inet6_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000140)=""/158, &(0x7f00000000c0)=0x9e) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000200)) 03:48:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x5, 0x100) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) [ 1178.578013][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1178.583908][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1163484000000000000000000000000000d6f8a3aa775056850000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x24000, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x7f, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e21, 0x3, 'ovf\x00', 0x24, 0x3, 0x38}, {@remote, 0x4e22, 0x10000, 0x3, 0x6e7, 0x401}}, 0x44) syncfs(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000140)={0x4}) 03:48:16 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0xfffffffffffffffd, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae05, &(0x7f0000000080)={0x50, [0x0]}) 03:48:16 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000200)=0xd, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_init_net_socket$rose(0xb, 0x5, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x2, r3}) mkdirat(r2, &(0x7f0000000140)='./file0\x00', 0x186) 03:48:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0xb1b, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008010}, 0x40800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) flock(r0, 0xc) 03:48:16 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1179.058024][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1179.063878][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f00000000c0)=0x3f) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) keyctl$setperm(0x5, 0x0, 0x8000000) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0xc) prctl$PR_CAPBSET_READ(0x17, 0x1000017) [ 1179.109372][ T602] binder: 597:602 unknown command 0 [ 1179.137249][ T602] binder: 597:602 ioctl c0306201 20000040 returned -22 03:48:16 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_SET_PIT2(r1, 0xae64, 0x0) r2 = syz_open_dev$dspn(&(0x7f00000003c0)='/dev/dsp#\x00', 0x7, 0x100) accept4$tipc(r2, 0x0, &(0x7f0000000400), 0x80800) 03:48:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e21, 0x3ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7f6}}}, &(0x7f0000000200)=0x84) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:48:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0x9, 0x0) dup3(r1, r0, 0x0) [ 1179.324030][ T7952] binder: release 597:602 transaction 474 out, still active [ 1179.331805][ T7952] binder: undelivered TRANSACTION_COMPLETE 03:48:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xd8a4, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000100)={r2, 0x75e}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:16 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000140)={0x8001005, 0x80, 0x2}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x88000, 0x0) flistxattr(r0, &(0x7f0000000700)=""/4096, 0x1000) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000080)) [ 1179.560695][ T1159] QAT: Invalid ioctl 03:48:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000100), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xca) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x1) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000140)=0x4) getsockopt$inet6_tcp_buf(r0, 0x11a, 0x1, &(0x7f0000000680)=""/4096, &(0x7f0000000180)=0x3ae) 03:48:17 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) connect$tipc(r1, &(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x10) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={r2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:48:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0x9, 0x0) dup3(r1, r0, 0x0) 03:48:17 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff00000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x660001, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x17}, @multicast2, r2}, 0xc) [ 1179.857971][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1179.858000][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1179.863853][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1179.875467][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:48:17 executing program 1: r0 = socket$inet(0x2, 0x800000002, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @empty}}, [0xfffffffffffffcf2, 0x5, 0xff, 0x8, 0xfffffffffffffff7, 0xfffffffffffffffd, 0x9, 0x3f, 0xad0, 0x2, 0xffffffffffffff57, 0xc4e0, 0x3, 0x2, 0x2]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={r1, 0x5d, "406ccd7c6e14b49db1406301f63b54587c4c3c8e151ff7ce53b1cb446dc8a67fa963bf111e95562cdab07c312b45e0a4aa80d37e2aa3cebaf028ca7f2eed7da5b0cf83e5d1c5ee6cfaa4b63464a06ecb131f833c2b9148340e260a99bb"}, &(0x7f0000000240)=0x65) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14}, 0x14}}, 0x4004800) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x6, 0x4) recvfrom$inet(r0, &(0x7f0000002100)=""/90, 0x5a, 0x3, 0x0, 0x0) 03:48:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:17 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000200)=""/230) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x0, 0x91810, r0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x200, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f00000001c0)="050300000300000000000000c52cf7c21975e697b02f00066b2b2ff0dac8897c6b11876d886b6621d8d217ccd51cc5471d130a6632a88161a6fd8f24286a07d057c3be255b33142fdd95208f", 0x4c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000240)=""/201, 0xc9}], 0x1}}], 0x4000000000001fb, 0x0, 0x0) 03:48:17 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x401}, &(0x7f0000000100)=0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) bind$packet(r1, &(0x7f0000000380)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r2, @in={{0x2, 0x4e20, @local}}, 0xffff, 0x1, 0x1, 0x5, 0x90}, 0x98) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x3, 0x10200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:48:17 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0}) 03:48:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) fcntl$getflags(r0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/109, 0x6d}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000300)=""/77, 0x4d}], 0x3, &(0x7f0000000380)=""/111, 0x6f}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000100)={@dev, r1}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0x40, "ae074e40cb2946c978849fddb3d5ae00179aaa8fda601b98424211366912a8041de6577ae5b40bc24a04adc45f2ea0913ec8796ddb3fb6ddaedd8263ca808c20"}, &(0x7f0000000500)=0x48) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000540)={0x4, 0x8, 0x7f, 0x0, r3}, 0x10) sendto$inet6(r0, &(0x7f0000000140)="faa044af092cf808801c87e953b254692187c78febad791c6e01da6c00757920c033b0c6680f4a506f105010594eebbdfbac8ffa7f641bba802dad26e0570103283b292ed8593e38b370f5dae57c5ec3eb6c0732dfea4106b71e7625389efe692d917c66309ee85337a3b7c82b7984b7871ca16edddf990cd32a6cddd5dfb7b635e81c477fe3ed3cde8732e9d2", 0x8d, 0x20040000, 0x0, 0x0) 03:48:17 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x1, 0xf17f, 0x401}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:48:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x101000) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000240)) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000200)=""/8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x105, @time={0x77359400}, 0x80000000, {0x1, 0x10000}, 0x3ff, 0x2, 0x3}) 03:48:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@updsa={0x104, 0x1a, 0x205, 0x0, 0x0, {{@in6=@mcast1, @in=@loopback}, {@in=@remote, 0x0, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@dev}]}, 0x104}}, 0x0) [ 1180.677283][ T1986] mip6: mip6_destopt_init_state: state's mode is not 2: 0 03:48:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:18 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10c01) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000002c0)=""/186) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffd000/0x1000)=nil) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 03:48:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) close(r0) close(r1) 03:48:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)={0x14, 0x20, 0x301}, 0x14}}, 0x0) 03:48:18 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x4082, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000300)={0x0, 0x5, 0x6, [], &(0x7f00000002c0)=0x1}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000200)=""/110, &(0x7f0000000080)=0x6e) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7fff, 0x40000) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000040)=""/6) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000280)=0x80000001) ioctl$int_out(r1, 0x5460, &(0x7f0000000340)) r3 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x200000) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:18 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff00000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:18 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) rt_sigqueueinfo(r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) 03:48:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) write$9p(r1, &(0x7f0000000140)="238acaa0f5b68a65b1f3874ee01b9a6f5d3b14d5f13ab241e5eb44296d3cfc8283fa2bd53bc4e8d7a050432a387658855abcd26443367d63c58cf6e6f690bd01df7ccfac3546aaf156389ee5455e7e36fed7778580e9a5f3b9f104c0ae7fed9ea0cfd51b4b884b76a1a2ed63df11d7c8f3af634ac10a62ab793c892fcfc421c40baf1443e87d75fae9e21e6f6dd598a5019837d0e5d51a2453a90bc127585e550c88b509337c6f3bc512d840f51f4e7275f998", 0xb3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = epoll_create(0x2e308396) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685) 03:48:18 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:18 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x1e4}}], 0x1, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0), 0x2000000000000148) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000005780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) 03:48:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000100)={r2, 0x4}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='eql\x00', 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:48:18 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89ffffff00000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:18 executing program 1: accept$alg(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) lstat(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:48:18 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@multicast1, @local, 0x1, 0x1, [@empty]}, 0x14) 03:48:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x226880, 0x0) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) [ 1181.564167][ T2786] binder_transaction: 19 callbacks suppressed [ 1181.564186][ T2786] binder: 2781:2786 transaction failed 29201/-28, size 0-0 line 3147 03:48:19 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1181.614246][ T2786] binder: 2781:2786 transaction failed 29201/-28, size 0-0 line 3147 03:48:19 executing program 4: [ 1181.686758][ T22] binder_release_work: 19 callbacks suppressed [ 1181.686766][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:48:19 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1181.738688][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:48:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8f, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="11634840000000000000008d264907cfd8275eb0b13536cd0000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000f10000000000000000000000006340400000000000000000000000000000000000000000000700000000000000f9ffffffffffffff00000000000000000000000000"], 0x0, 0x0, 0x0}) r1 = add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000100)="5c2fef3aaed572f8a042f94347b11445f6f2ede3cae774571aa671d91288e379a3472ddc9b266ca3ea11ce02dbf9d1f73c631091ba1937bd4612cf961043160e9628f7cbd37fe486d82293df8df5c2e2fa72cd370d992aa7916586e14d5cacdbef3f32417493333a9a6e1bca14b14ab1fad38cf342f6caf1a1395c451630d41f5856501521e151843c395286da6667f41c542a514d5c1488acf5c21a205aceab3a21721c843c9b2017c7d9eb654b2492d261f00ec30a7c1e69206f9ec99dd51483c553ab70020c68d275947db500d922d19a3076d83c3fb3d75c01634927c0e3a7a1145e286ea357db608cf0", 0xec, 0xfffffffffffffffa) keyctl$assume_authority(0x10, r1) 03:48:19 executing program 1: 03:48:19 executing program 4: [ 1181.934809][ T3115] binder: 3113:3115 got transaction with invalid data ptr [ 1181.964904][ T3115] binder: 3113:3115 transaction failed 29201/-14, size 768-0 line 3179 [ 1181.995446][ T3115] binder: 3113:3115 got transaction with invalid data ptr [ 1182.026103][T19475] binder: undelivered TRANSACTION_ERROR: 29201 [ 1182.046517][ T3115] binder: 3113:3115 transaction failed 29201/-14, size 768-0 line 3179 [ 1182.095135][T19475] binder: undelivered TRANSACTION_ERROR: 29201 03:48:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:19 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000140)=0xe8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0x2}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0xa7f, 0x8, 0x3, 0x3, r3}, &(0x7f0000000580)=0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@broadcast, @multicast2, 0x0}, &(0x7f0000000480)=0xffffffffffffff24) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd2c91853d02fe93f}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="9ab9e97b57950c70a4c8cae51da2c18f00000079df048e296bf9e3510e7eb5db9e4cb6b52f4629667a399b0ccf50679095888ffa7ef5b03d584dc22662c9662e1e64a05b18", @ANYRES16=r1, @ANYBLOB="000126bd7000fedbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="bc00020044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b7570000000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400fe81000008000100", @ANYRES32=r4, @ANYBLOB="3c0002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r5], 0x11c}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:19 executing program 4: 03:48:19 executing program 1: 03:48:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 03:48:19 executing program 4: 03:48:19 executing program 1: 03:48:19 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1182.230514][ T3262] binder: 3259:3262 transaction failed 29201/-28, size 0-0 line 3147 [ 1182.290897][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:48:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:48:19 executing program 4: 03:48:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2040c1004111, &(0x7f0000000100)) [ 1182.469266][ T3390] binder: 3389:3390 transaction failed 29189/-22, size 0-0 line 2994 [ 1182.544427][T19475] binder: undelivered TRANSACTION_ERROR: 29189 03:48:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:20 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:20 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, '/h\x00'}}], [{@dont_measure='dont_measure'}]}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) 03:48:20 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x1) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000300)=""/8) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x240000, 0x0) mkdirat(r2, &(0x7f0000000100)='./file0\x00', 0x82) 03:48:20 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0xfffffffffffffd9d, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fstat(0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) write$binfmt_elf32(r2, 0x0, 0x0) 03:48:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000000000000000000000000000000000000000000000000465fbd6de70000000000000000000000000000000000000000000000c7ccad096d70699c993606f9a074471b7f1ab49b7ef6365ea7b57f2f7524df5e11617ad52729145fb2b7892095b38f8f7600000000000000000000"], 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000000)) [ 1182.804078][ T3607] binder: 3602:3607 transaction failed 29201/-28, size 0-0 line 3147 [ 1182.825506][ T3607] binder: 3602:3607 transaction failed 29201/-28, size 0-0 line 3147 03:48:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000300000000000000000000000000000000000000fffffff600000000000000000000000100000000000000000000000000000000006340400de8d5462f11fbdb02264c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 03:48:20 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1182.848921][T19475] binder: undelivered TRANSACTION_ERROR: 29201 [ 1182.856918][T19475] binder: undelivered TRANSACTION_ERROR: 29201 03:48:20 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000000)) 03:48:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0xd01) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000300)=""/239) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) [ 1183.024021][ T3859] binder: 3843:3859 transaction failed 29201/-28, size 0-4143972351 line 3147 [ 1183.042150][ T3859] binder: 3843:3859 transaction failed 29201/-28, size 0-4143972351 line 3147 [ 1183.053675][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 1183.063419][ T22] binder: undelivered TRANSACTION_ERROR: 29201 03:48:20 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x17, 0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x107200) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000280)={@default, @bcast, 0xfffffffffffffffd, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f00000000c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@remote, @in=@local}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) [ 1183.394966][ T3992] binder: 3971:3992 unknown command 808464432 [ 1183.417042][ T3992] binder: 3971:3992 ioctl c0306201 20000000 returned -22 03:48:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820000000000000000a5ddf7006c210244343a0f", 0x18) sendmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000002240)="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", 0xd18}], 0x1}, 0x4801) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xffffff9a, 0x0, 0x0, 0xffffffffffffff28) 03:48:21 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:21 executing program 1: prctl$PR_GET_SECUREBITS(0x1b) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x2000, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x6800, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="af350200b46e68d7e5f445c06219e913", 0x10) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0404309, &(0x7f0000000180)={0x0, 0x0}) [ 1183.488788][ T3992] binder: 3971:3992 unknown command 808464432 [ 1183.498029][ T3992] binder: 3971:3992 ioctl c0306201 20000000 returned -22 03:48:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0x4000, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/244, 0xf4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2ca400, 0x0) inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x40) 03:48:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x4000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x84, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x4}, @decrefs={0x40046307, 0x4}, @reply_sg={0x40486312, {{0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000140)=[@ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x4, 0x1b}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x1, 0x3, 0x20}, @fda={0x66646185, 0x6, 0x1, 0x10}], &(0x7f00000001c0)=[0x0, 0x58, 0x0]}, 0x8001}}, @increfs, @acquire={0x40046305, 0x2}, @request_death], 0x39, 0x0, &(0x7f00000002c0)="3ea5b9a33cbe71683b8850080637b48440d127fb958e4b26e632ed659bfac2f913d93e416d2badadbc855dba6cf456f6e29b386b90060b367d"}) 03:48:21 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x33, &(0x7f0000000040), &(0x7f0000000000)) 03:48:21 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) 03:48:21 executing program 1: socketpair(0x8000000000001e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000236fc8)=[{0x0, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000100)="8434cda77cb38270ed1e155ec69436f44f51cb17ee6c0d1a28b727d71f8d959df49f13e6ec50c855190d876da628d6be32963f985fc57355938d269803f9c689633adef2981eb2f6c8a396c8859602adb9f1cbd79bdea22f73ffe608b0c7b2a395ace05a1050275a15789fb85bb38524025f445e7a1b7ca678f4be64448734a8c375896a3f27ff0779d87fb2ddbccf10ae7b014a5098000000000000", 0xffffffffffffff72) 03:48:21 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x50, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)=r0, 0x4) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000100)={0x3, 0x1, @start={0x43, 0x537b8bd1df2d5c28}}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x24000) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000000c0)=""/8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, r1, 0x0, 0x1, &(0x7f0000000000)='\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)=r3, 0x4) 03:48:21 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xb, 0x40, 0xa9, 0x100000a37, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000180), 0x0}, 0x20) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="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", 0xfc, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) [ 1184.017985][ C1] net_ratelimit: 19 callbacks suppressed [ 1184.017994][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1184.018264][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1184.023835][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1184.029591][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1184.046929][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1184.052776][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:21 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:48:21 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x1000000000101040, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000000c0)={0x80000000000007, 0x5, 0x0, 0x0, '\x00', 0x3}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000007000)={0x8004}) ioctl$UFFDIO_REGISTER(r1, 0x8010aa02, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x4000}}) 03:48:21 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) 03:48:22 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket(0x17, 0x6, 0x40) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0xffffffa4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1184.497975][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1184.503867][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:22 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x10000, 0x10000) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x55, 0x0, 0x1c, {0x3}, {}, @rumble}) syz_extract_tcp_res(&(0x7f00000001c0), 0x0, 0x2) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x100000000) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x331}}, 0x0) [ 1184.817973][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1184.823841][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1184.864098][ T5325] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.4'. 03:48:22 executing program 1: gettid() timer_create(0xffffffffbffffffc, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f00000003c0)="ae3939548f5dba4b715e9bde4f5585fe073d4343cf996352cf747beb8ca27f9328bf5864c2331ad9e0de167340fecc863e4d0c206274b5f7aa332b91e1db1b800c9f1ded4c43737b5a34a903f4f5a7c11b02b7d0250f3bee8805b33c550dc3ba8c6630b085428f0faac71b39fabfa25a6bd4ab882c52a5f66287fdcd34545b6022cfa528c3b30f1513040073337ed5700638181177673dec16b89df1d478dc079d74bf49abdb87f62c2c35261183a1d35c257f894714d323f535db21534e6c97b6ea20e99516ad0ec0a52c466f", &(0x7f00000004c0)="70339488bf2da91dfcd8fab8d11923f49606833e06543cd48a89a6295cd422d0363d3755cb682ac3a954349e3d2417a9837130824b002577dc2de72605292826d0a700c3b7ca3cace48f10927452023fefd314df2171c8d652b57d2b57400bcd93ef0b1d9a9a98c68b8374c2539a0e1cad986385c01bd0687dcf358ad63f5636fcb31711acb087fbaf0361d5be5d5a27c3479d7e00e4c623261d9389202ad13844f6a6589af8bc678f5ca4d8090b6e1e5bb52544330297e8e145608ba8e937"}}, &(0x7f0000000380)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getdents64(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f00000005c0)=0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {r2, r3+10000000}}, 0x0) socketpair(0x1, 0x8000b, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$P9_RWSTAT(r1, &(0x7f0000000240)={0x7, 0x7f, 0x1}, 0x7) getpid() write$cgroup_int(r6, &(0x7f0000000980)=0x1000000000000000, 0xfffffc73) recvmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x97}], 0x1}, 0x3f00) fadvise64(r5, 0x0, 0x5, 0x2) timer_settime(r0, 0x1, &(0x7f0000000600)={{0x77359400}, {0x77359400}}, &(0x7f0000000640)) r7 = syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0xca98, 0x272103) ioctl$VHOST_GET_VRING_BASE(r7, 0xc008af12, &(0x7f0000000280)) accept$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) timer_settime(r0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)) 03:48:22 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:22 executing program 0: syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0xfffffffffffffffe) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$setpipe(r0, 0x407, 0xae) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x20000) clock_gettime(0x0, &(0x7f00000020c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/130, 0x82}, {&(0x7f0000000280)=""/131, 0x83}, {&(0x7f0000000340)=""/69, 0x45}, {&(0x7f00000003c0)=""/118, 0x76}], 0x5, &(0x7f00000004c0)=""/245, 0xf5}}, {{&(0x7f00000005c0)=@un=@abs, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000700)=""/198, 0xc6}, {&(0x7f0000000800)=""/4, 0x4}, {&(0x7f0000000840)=""/246, 0xf6}, {&(0x7f0000000940)=""/234, 0xea}, {&(0x7f0000000a40)=""/127, 0x7f}, {&(0x7f0000000ac0)=""/252, 0xfc}, {&(0x7f0000000bc0)=""/103, 0x67}], 0x7, &(0x7f0000000cc0)=""/206, 0xce}, 0x3f}, {{&(0x7f0000000dc0)=@xdp, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000e40)=""/93, 0x5d}, {&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/87, 0x57}], 0x3, &(0x7f0000001f80)=""/112, 0x70}, 0x8000}], 0x3, 0x2002, &(0x7f0000002100)={r2, r3+30000000}) 03:48:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x10001, @mcast1, 0xfffffffffffffc01}, {0xa, 0x4e20, 0x70, @rand_addr="4d35205b9be5ecf747b7df0840a0ce81", 0x9}, r2, 0x8}}, 0x48) r3 = memfd_create(&(0x7f0000000280)='\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x80000000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x14) dup2(r4, r4) 03:48:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:23 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:23 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:48:23 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x10}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(r1, &(0x7f0000000000)={0x92eb}, 0x8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'lapb0\x00', @ifru_addrs=@hci={0x1f, 0x0, 0x3}}}) r4 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x9, 0x40201) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x4, r3, 0x2f, r4}, 0x10) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@loopback}, 0x14) getsockopt$sock_int(r2, 0x1, 0x1f, &(0x7f0000000200), &(0x7f0000000280)=0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) request_key(&(0x7f0000000300)='id_resolver\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)='{/wlan0+\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x20000008004, 0x148) recvfrom$llc(r4, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000340)={0x1a, 0x30f, 0x5, 0x3, 0xffffffff, 0x9, @remote}, 0x10) 03:48:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x20000, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:23 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x100000242, 0x0) r2 = socket$kcm(0x10, 0x3fffffffff, 0x10) futex(&(0x7f0000000200)=0x2, 0x0, 0x1, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280), 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000002b00812de45ae087185082cf0124b0eba06ec4000600000000000014000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) syz_open_dev$amidi(0x0, 0x0, 0x0) 03:48:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x804) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cpuset\x00') ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="116348400000000000000000000000d5a600000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018b9c6ae9fd84ee5bd3b000003000000000063404000000000000000000000000000000000000000000000000000000000000000000000000000001a000074ec07c044a00000000000000000000000000000000000399a809ed955d4cd14686336f1ddefd413d8090000001262d5ea2a10c42a370a54dab38d36dbea9e92bd5d1eab2d6b6a8eea3380cd422ed4e269c430dfb6"], 0x0, 0x0, 0x0}) 03:48:23 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000400)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x9c, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xa8d28c2debfe48d5, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000000)=[@dead_binder_done, @increfs, @increfs_done={0x40106308, r3, 0x1}], 0xe0, 0x0, &(0x7f0000000140)="b74ab4657ed26eb2bcbd0fbf313aa70b36b2154b1b0ec5cd58dee709b173bd5b12c1f1151d6de7085fdb5cad5ccf35fab79c4564055ac28c50edc8f43306b3b6b1c888e3f3535e92c1fe9febfe15339086c911be39543edfa637121c081a46b642e6baee8b8f030d08e4bb28e83242d2ffc1183d9f8439a40b938788d2df9a0a88d8f84754cd6cc37a65cb0bd818ff7f9e90a878fc61935821435c5b8a9e7233a9c8bb02f97d613bacda77e1f720f543b10827fd607dbaa0056c90b427976a6333e2fd9b3a991d8a9ea639ab2705932de8eadec4e787cfaa105e61f3fd42a3a1"}) r4 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x6334, 0x8000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r5, 0x100, 0x70bd2b, 0xc000, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 03:48:23 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setrlimit(0x8004004000000002, &(0x7f0000000040)={0x9c, 0x7}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 03:48:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x0}], 0x300, 0x0) 03:48:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x4) 03:48:23 executing program 1: r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0xdcf6, 0x7fffffff, 0x7, 0x2, 0x73, 0x2, 0x0, 0x10001, 0x116, 0x38, 0x1de, 0x1, 0x6bb, 0x20, 0x2, 0xbab6, 0x2, 0x2}, [{0x4, 0x2, 0x0, 0xa9, 0x8, 0x2, 0x9, 0x2f54}, {0x70000000, 0xff, 0xe26, 0xffff, 0x2607, 0x7, 0x81, 0x8}], "17724e8f6b28b5eefd8d42f7abc164c36112416625ce7fe5332832854ece8b5cc1a68efa600ef33652024c82b976fe3c064bff4768604ce4b47ac96ba557b22aa33fad4f721968ab52c67cba832a969b5080415c294c413386639b6e8692250c4e9a4c8e35c0217d7fa26b8ed51ab8e906da989752c2e3da", [[], [], [], [], [], []]}, 0x6f0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e23, @empty}, {0x1}, 0x50, {0x2, 0x4e20, @broadcast}, 'veth1_to_bridge\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f00000000c0)={0x1, 0x0, 0x100, 0x0, {0xffffffff, 0xfffffffffffffff8, 0x1, 0x7f}}) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x178, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xf}]}}}]}, 0x3c}}, 0x0) 03:48:23 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) write$UHID_CREATE2(r0, &(0x7f0000000200)={0xb, 'syz0\x00', 'syz0\x00', 'syz1\x00', 0x9e, 0x2, 0xfffffffffffffc01, 0x1, 0x7, 0x80000001, "74c1e8a92c18c52bff34aabfb129a8f6d2285b5bdb7bc4bd0a780e0072ab6a904afdeebaf91fdc50cf7e29baaf630724a3a97118db8696f2550c8893ee41744215eedf5c0215d1008350e8dc14065175c46da05099267508f76a77d5bd17f00c5564e573f7fc84fe25b2fbdc767b3e646c171e25b88ee3787c46fa95fae2fdaec7f1eaa62fe3ca4675a40223f2cabc60b00a0feeec3bd7875f66fb32b757"}, 0x1b6) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) sendto$ax25(r1, &(0x7f0000000140)="5e9d953dde9cd561ffac6a8ac367fd97a0f98f75fc125b806cf0e1f78774e972cc4ded3a96201c05de79cbb85739cffa16edfe7075c9818cf6f930683caa54861104fe415a83243c7f1e7ecfb8ff9e5bf2ea516a61d485f854ce297e94135cc31a389bfc26546694f8c517a9358bdb28c7bc8624edb5bbc0c4deab9e312bca81b2cb0d73b09e1ac0a0a844c1ebdba7584ef0343d3e2acbe9d2b7d1ea2a2c9642844841e97aec34d24282", 0xaa, 0x4000000, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @null]}, 0x48) 03:48:23 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@remote, 0x0, r1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 03:48:23 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1186.424680][ T6402] device bridge_slave_0 entered promiscuous mode 03:48:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0x20, 0x7, 0x4, 0x2, 0x1, [{0x1000, 0x2, 0x3, 0x0, 0x0, 0x1}]}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:24 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x543]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x4, &(0x7f00000000c0)={0x2}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x400, 0x0) dup3(r0, r2, 0x80000) 03:48:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000040)=0x7) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) dup3(r0, r1, 0x0) 03:48:24 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000012c0)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/229, 0xe5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980)={0x8, "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", 0xfe65}, 0x10a9) getresuid(0x0, 0x0, 0x0) truncate(0x0, 0x200) sendmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000002c0)='./bus\x00') sendfile(r2, r2, &(0x7f00000000c0), 0x808100000000) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) dup2(r3, r4) r5 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000380)="188fa24336a899ab21a88c79095222c66ce933ff4e4c0fd95932c8b8f3e92901069c2f97c10aa72d2aeab1c195e0fabc084a7694c05ec1f6ef85d302dd48c7e41d9f6861830bcc2544711fc600ec71ed87fa289453ebc3f87b21fb1a003405befdcce441327afb25c18c16235005c98534164a42a5414439a7127c675d31be41a66f2885d94748dfac55e2152434af9973803201625d54ede894c36a8e0db7328ad20319f356ba68871963aa5b3d4169b2c1c9cc8a1f079f43398086c1163df6b80ec3e38080755ed6c3fdb308658d19faf2f45361b2b3cc005e3f55da6e8e136909eabfee22e1601ff48928904ce854a6", 0xf1, 0xffffffffffffffff) keyctl$instantiate(0xc, r5, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000003300)=""/4096, 0xffffffffffffffc6) [ 1186.773877][ T6749] binder_transaction: 11 callbacks suppressed [ 1186.773896][ T6749] binder: 6727:6749 transaction failed 29201/-28, size 0-0 line 3147 [ 1186.847862][ T6749] binder: 6727:6749 transaction failed 29201/-28, size 0-0 line 3147 [ 1186.852229][T31387] binder_release_work: 9 callbacks suppressed [ 1186.852237][T31387] binder: undelivered TRANSACTION_ERROR: 29201 [ 1186.913846][T31387] binder: undelivered TRANSACTION_ERROR: 29201 03:48:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x2, 0x0) 03:48:24 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x81) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', r2}) lookup_dcookie(0x9, &(0x7f0000000000), 0x0) 03:48:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x200000) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000100)=0x10e) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:24 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x200000) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), 0x4) ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f00000041c0)="24b29525fa2fe78b9d12fcd19f653803a2e67652f5a3fd9c5d96bac93cae767f530c8171b20c3090e239044454d1429b415fdf1a1fff4efcc23d8434c0767a64dbd245eb813f42134da959b314a7adf624ebf20610a5f369ec4cb227f13a9c1fd79d696dd996bf85fea97497f3ded0df94875832378ad3aabd01e7cb2281edb33a9fb71431ff24b0af7ea4100b07507f3130369d589d3de4d52e158dc5ef2477ae59e62cc573f853c9d5a36d39741c40072ea3ea952239b59e33249cc324936989dfce13a606142f52d333df7443f1f16b6bff76a9a05ad3d32bc4ec41da93902b1040ec510e753f965c4000ffc1350126d9f603abac0104deb5794e08ede25633d378b728c8b6840345326c3a15a3a9d581733cb3f590f67ed365fe1d211faf02deedc1523c0c5de9424a3593a854ce317eafc11f027f49f98d8bcac10f556d32dcb05f5b7b289a3df6c4e8d02efc0c8ae721df380f750335ca29fb1fa37cc7ae0df1cd9ea7f7b54dc760a05d975d66a5507219fb422fad420ae07194695b31053496def0c8c05f9783abd20076449e6b2d7a54c309ed920a712bd8d851c203776e99e794f3f87320975cdbe2e912360470c3832cd8c68fe6d65da4e615db214c04ed481261ff01121f40d7281627c5cfb50e1442549117754324d20c738e2fe8c3f4ae1de9eb36724e9f1d6338ccf4105f6ad0b40ec21d2b6d6a775c8e2d0a05751253d93b60be17f845c54fc9458c7b7435807de4c77ebd859f01f4c7d7f1627b7281a2e391626fcb5fb6f5975c2a30ac59d3c2ab8e24ce9005dfc86bd5b5adc2dbcc56fa2b46c5ba52810256de6584d7c412f011ff889a80fe543daa7821bf1f0d1c0f209b1315329bc86157a61fad2560e6709b44554b08909c4fd417b07226c124262cd311e7464f3542d6059c91e54eb5dd3fc4839c1cb86b487bdb2070b118fc94061d3b3c6425407f8547e7ee6974a98d885de4c0d2be4e167f08e9d46edd9c19ec5ec4395a6d5182b6f470a8a53624d3e60bbd03faeb635815ca626486c93f13670540951a532fda5df2bf601e604c4c5bcec06488dc650d87b07a4df78c2f44ac628bf2cedba4eb78ce3539a860a77613f0fff13b9408e9e232cf6c4a87dc8691141952f1641344e6b9435c61f21b22fcb7648d34b8a0918927883b7099abe138ea25800e9004a0fd6cfc8fa3c6877858fe09fb3f095b6fe5ac1138fc8feddaa69503ceccec396ae1534ea3325bc0119f161ae67b31b9ea8106a9fe9ae6b3227df92d98963e2345a3a3482e22e8e027a575cc9e72111044974437794144aa3005da017961048999458865089191510b09095305665f44e3fc4cf6f5df371351853eaaac20731ce573e5ad3a4688d9df489aa0ce19cb02bbdde8faa43e8327ed9345a341aeccecd99db3368fdfdb8d4901fa0fb2c1f22b809d606a2ef905f54044ceee57c164be4f20beb5eb117ab9070a3b48625073c2b9c7991b3a26f072087614031e3212bd1f11a801847a5eca3017a98a5d77c47187d216a106511010050d3329b32d511bd95d7d38e7a5414eb9a4551692eb86ec92ce087272a1f79fc2d917150140045824b57128856e7c0cd2a22553886dcde10041d2b6ca15b4fea4a20285e54531265047ac3656576ea95eb1a1c7bd9d75068f1a59500b0aef3fdb52eb3b86f1f4136722fcc80f3e5435bb2f8e748278b642331267478416ada071a61c1f85a12ec19b8a1cfa1b56c6a7af95da8ab23dbdc2f1fd2458d4fb6bae05b35981e71e4e0ed9c07a79dff3f36167b116e2c0f9191567b4be24e7a8db6f93663c3673d80172b0c8854ed4a3a2927e9e298ec1160f7a3d570a9323c9ae94a666cf75a3d0a2f679ad3742c0704bc358143317fd09966bd3e9730c884dba723236583fa4b0a79fce7a9276bf679e5c6bd3cd98b18f935fa389d8cb3074d485fa1c3048e56e8f71656103421ad2496eb2b3d809519649ee3a5784dd720d4b039ee6bb7844ed8111c7b9852f17bc30d6fb5b0790ba9ee6c3af77cfe7a7ef034fe249d622d64ea11604fb17e9f4d1916897d95be77a8f4d64f8133435c59e2b2edb51335c406fb1212387600a7ae0d6bf4088c0039ab65a1942a2331a950209e925a8c37320f06002669445527bbcdc92547b7ff8f4f82f93a51df8f4ba249e236741b39043c583b35bf01ac7b678f9e6799cb9429cd31ce56ffdbe7a2e0bb7f418bc48d5ae3433f4ed230444d9aba28ddc40079d8e6ed25dd461a8dc80449838579eb875c5caf56f09871f03eb63da03732c450b0196db273d2fe4c16fc55cdfa139c12559164de27f623ec3dcab2ddc903664939959304939ff7c3d680b4552e5c7b7f63b635368ffe3590958d1d87b1b487019ef085f08e4de5b8b8128cd35e42e84bbbd0cb9bf212db0b78de83ebdf43860690e5c3a34e40d6d898bec715441aeef5d287fe872196a3cb9a342abfed101a4bcca0e50b263f63d2a1f2ede7a62420da649ccddaa60eed9897203ab679ac770811096f7ef1dc0e5515c6afbb7e53fb606eae80c96b5a2e508320e595a53f5b53508fa07b6c5c2379edd64186b8d96bc3fe3cb94b86f8bf8dad1f4b3668af246fa126cf724f2117cd93f455aa74136c2eebcdd7cab1e4eda87d073a5ffea6e80786edfdf5d24c7ab07abc7d36e6ab063b9e303088cf0c27db8641258da7dcac8823b68908b3989f5618c8a3fd3435fab07643b4fa9f671413daeb3cf9d6719deb500d1cf275173efe15712430ab1748714c996a72d8277541af220843808b1c6364a516b5d48f9f8e02b616e38d9248145d79ece9f95e74f885bd55b240819b740f3716d23c99e47afc7ee4549e48c79e8a94c1f186ce82655e74f05d9d669d2c8452f8f8d2230d6807975538db171ea47cfb2acfbeb34aada23eed2939140273196374d04aaead7aaa65e3d35ab8752f6a4ba1b2b3e26ccb17fb42359f34e9956f63ee4d75ba3a68edcdaddd80f4d6667eb736e5eb93764f7961cd7ae23c02eb6e6eb7022c9174295ac6e970c409dfec43df1923a4d3e8e627fa5ae4c0b24f2008d00e8778aaf3dabc31b067097c6a077b76e5d7eae3ecdcf0d2f181b144afd3a763699230a9e4dc18146ec263b1f8ea47ff641d8ae7176db443116b737f77f88aba5bee45c6738c3e04fff2572cad7204c9833eabf87bcd58b583eff6f3db81a9e07e7079e1225b794a02740ebc00ff3a447d96d0622a79f809f6a609255a669f1095504f6c773a87eb485e9075b2590d4feefb0bad2e76369b83248c612dbf9a30ae7900859be35c694431341809e4fb07ea9666ee7a47bec515c0e364f431d04f56d7e227c50ebe05d2f859b01f5e322d3e845c6342d1992884278a080cf77fee2638b1e9e89c16292d3bdeedac7189ff38126c4ae1f74a406c8ea02f6d307be45a857fd85dd6cc698103be3c763d6cc22b9580382890ea077829063dec0b3e3ae934f902a180d1468d75951d638b917f3e2b771e4261d342746d694bc97fc845f5366a0597821a218a080679ab1638cb332aea7da1f9dd538297df03a4d1388dd246d73b55e1b451c56eeb1de78e04fd46b633e8e59ca7510c5736e2be1f504feb2c4aa1cd4196a6fff9936d87b4ae265c803ed8d9bce9170e13f5c38aab3b313c5d8f00c6c4757b29772aa7c7858e1190b22b84b2df9c191c01ea17205b6966b6a329b419bb037ed69230dd96648d2383be63705ef6ec93a13b2600b769cb5a78fe516f3ea8ac79f29aadd4fc0c978adb0342565fd150b5d4fecf72c109c59c6d3e23b747154ec77c1d970e77dc9375c20e9f1038a7d1d5914b0fa14fba91165e87e4f91ddc945ab26520c4c87f522ae29ec16fa1a808d1fa58715acceb47ad28ccb3386739380d5ee169aa1a52fbcf8c75064aba45a9b3e63742abd5de485e3b9dba8c14390b20581e65cd2ac4184f67978e640cb5c55bb53ef11bb7dc6a1d11a588a7aade76ef506064c1c9d57d14930c87be11454a21515be7e933fb40ec2b5c8285f5872eede0815291bbf67883e6b03d720492561f6ba7f79498f9e1076ba3263a40b3dec65d99a8ba895ac56170bd5932d96411929f6bf2804a1d9f150edc0d03f6015ff9d3902631bdd5d001f5fc22ddc05c5836aaa103be6a87eff3f41f34866e69c65bcdcf9536613b41845182ff172c3b472f06d2f579264ceb518ba4f6f8d057f60402dfdf6c04928c3a3ed2af6f011ad40438e8add2beb11b68440fda905d5e1982d1227adda5aed291ed855b6357d469a3e1b976e9726829b8290d78c4872083067611dcc2d3fe7f3265b3b6b0c9f044396b41535ecfdc44e985e50d2371704166daf36a683a0a3e4d6f8612e1f3645e4f355596dec7616797461d049e27cc6b72ec8476d256d5f52e3fade46199aa68577bc2d829dd1a8b1e8099785367b8f41b8e56b5df229de727cd9f9c1bc6e814db1d947c66d9e99ab08dbb5f2674701b119c22d97a44e843fb953da4e6b0df285e0dc953a0dce9071c5f750ce9a235d771bdc548db43e8a980a62fa3f755fa72d26da7e6b581da9208377b4708d22fba2dc147a09bedb3607f0fef1555ffcceb973f38e086c5dffcf5288031ee07ad84c6aee6bd99ef564be67b96562a71be03fe8190a53be76b3b4fc0014c9278a69be5c188c7fec615edfbb6c82db17c5906245185b32c7d7514cdba4abcd49d5e5b06ae8c162bde11f727884754becb8a423bcf4c4e275371a7670a12be7a2b2b71bd309effb121b320e40c5c67bee3d17041ba3f304cb0af3430bbfa3a08aa94dab075d18ff2edf559f2a60efd85192d14b94a7f627dbb9caaf8dd463746ea4dd7753b8266463c56fe3dcd1579706bcea16c6d740c0d7585c46f4827c3aa6defcd18ef506b1f97456cfdcc9ceb018bf8554329b569e1c534f00533cc59f4bb34c0d07c06626010574c12b580be107cf3c24989b3d7faa97cc87f4b0ce30b574fb6bf37656a9e6ca5d1e2f14b6e024a5fe43f67b2a52821cf4a4005a02cc4943809d1be16d7166728ff9cc2cf1868ddcfc5a2c8b701fe3bb1676990bdc0fe09626d08f430e1b7cf09af43a069b9bdff716293ef4c6ec4dce98a4b3752e7a20ce50d135e3a29e3c6361394fc6586165e94df6366b77872195b7b59e18520eeef66e7e66386f2144b2fd1a9e472baf3f8eede35f1d9305fdf22eeefe7a3227ef55a93efaca4e79c87e9da1a8ee0383abb489d0ccad2513db793ee444ad1a3a13cc7319df0e45652e36aa4041d3c895d44d64738dbb78a482a2263fd9744f042ca7013d399df949c7fbc5cbda4dfd810dcc00fde74f86d3c49bb17c9ce14b7229098055e7c633e1cd2fd786dbcfff3a3ea8fadc4888b06477773b23157fe35103821d1a204b09df910cb5fe06fa99782cf071a677994dc58e10931271809c7ea9897fd86fa7942efa1ac207748b613b0bae5099c31d4c7b797bc0ed7c3e257c16b8438117aacd64e2b18c005e18d8d595010d39eb40366015f0175e39639080eccfa8a90fc2ea64e97f74732120f369d47e59b497c16b37f995ffd9be49147585243f58cb207f51e71d65a67273c61fe094786533beacc3b1e2f50e42d4d6a53662cf5cd9bca8382e0e877fa90b2908772bd18fbcd313106f227ab500e573523f21f86cd1a6bba684d841509fc94ca097fdf295e430c5d40292ab539f3ec16c26ea4354b50db3ea98347e8d4ef479522f141f472d27860a392a75cc085709a6183a7988d14f39aad9ce4618ede32ffb1188d74fb577e92532e00d093b000000000000") r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40200010}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x608, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x9) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) 03:48:24 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x608]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1187.108275][ T7095] binder: 7068:7095 transaction failed 29201/-28, size 0-0 line 3147 [ 1187.173239][ T7095] binder: 7068:7095 transaction failed 29201/-28, size 0-0 line 3147 03:48:24 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:24 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000500)='reiserfs\x00', &(0x7f0000000540)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB='jqold,\x00\x00\x00\x00\x00\x00\x00\x00']) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x90620}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x410, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 03:48:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x3, 0x0) 03:48:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) socket$isdn_base(0x22, 0x3, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x4001) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) 03:48:24 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x0, 0x1000}}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socketpair(0x1b, 0x805, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r2, &(0x7f0000000140)="36922542930a7dd24ababdb69f15ff6b533d43fc57b050864f6426ddb909ccb7b3027ab0d698595f245f656639e33bfb0d10ad9ab5a03ef8e836db8c8256e621933ed8e0c504e74c541dcddb4a038b5ac6f80e5f61055813565f2b9af402680b23c1a3222bf15dff7b1c0fc1963dc8634f2585393dbc16a2e1e910a72879817d2b5aecc368d114ac60bbfeb1a40904748fa9b31402965c05", 0x98, 0x850, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) [ 1187.455677][T31387] binder: undelivered TRANSACTION_ERROR: 29201 [ 1187.469205][T31387] binder: undelivered TRANSACTION_ERROR: 29201 03:48:25 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:25 executing program 4: prctl$PR_GET_DUMPABLE(0x3) r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00\x00\x00\x00\x00`\x00\x00\x00\x00\x00\x00H\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x0, 0x0, 'bridge0\x00', 'vlan0\x00', 'sit0\x00', 'teql0\x00', @empty, [], @link_local, [], 0x8b8, 0x8b8, 0x930, [@among={'among\x00', 0x414, {{0x414}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c77"}}}}]}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0xa38) 03:48:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) link(0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getegid() ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000040)={0x6, 0xa6d3, 0x4}) ioctl$sock_netdev_private(r0, 0x89f4, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x140) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x4000, 0x0) mq_notify(r2, &(0x7f0000000200)={0x0, 0x31, 0x4, @thr={&(0x7f0000000140)="e5f46c9b4d7d4c910dcc1f80c2181ba1eee6ed3066ae48d55de926131c44d49b353b8f835906c85143cacde6c42698fb1917ffe5aa38c72cf458c36d3c18fd2b94b2e12d05588965abb899b2c63fcad2f13cf5403bed6032aa8d", &(0x7f00000001c0)="5341a2c16c21afbb0f01db208f63d718c33b692e8d1fa22dff56728db541e46bb79fd1eddef37dae064349f4bc4cff0e208d3c"}}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) mknod$loop(0x0, 0x0, 0x0) [ 1187.622026][ T7722] binder: 7667:7722 transaction failed 29201/-28, size 0-0 line 3147 03:48:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x4, 0x0) 03:48:25 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe80]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1187.723401][ T7722] binder: 7667:7722 transaction failed 29201/-28, size 0-0 line 3147 03:48:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x66, 0x0, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRES32=r0]], 0xffffffffffffffe1, 0x0, 0x0}) write$binfmt_misc(r0, &(0x7f0000000180)={'syz0', "fbaadf8174de131db5395c9c76e4f2a5d7407268d28ad08dae47b9af83adc96d04b90f837d95eeec89f6c301a2ac5eade565ffc8467a3c3c27c9031e24bb3611550393df250127cb02236095e1276412b1e0e0e0cd45cebaccc23d2989e38bcd170266c2c23dcbe0608a4f9a154852f0c982bc8c2364d701988464681762eb31a76b55893aef4772444271a3da01edf94de2b0068e445e4d000913502a06f0e8db346f48fbbe6a8c32fe527094537da0b7dc599aff38654cb98737363f50a2c8ea15daa894fe841995c78cc5c17494efe834ff1cce611c9ef050d3a8a169782f2c5da2672632d5f82f98d2f2f2e7d2e92d2a1b363e14e9e525f04c27b108d7"}, 0x103) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) [ 1187.767843][T19475] binder: undelivered TRANSACTION_ERROR: 29201 [ 1187.779709][T19475] binder: undelivered TRANSACTION_ERROR: 29201 03:48:25 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x44e5, 0x10000) r3 = getuid() ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff2000/0xc000)=nil, 0x4000, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000200)) sendmsg$nl_netfilter(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4410000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="44010000140f00002cbd7000ffdbdf2505000005580083008c40eef5ab28261c4e181805d7a52c0e5d20c8e4e8e2377990a8ff132559c6a5be582f9c727f825540fc65365fe4810463da5ae81b8fb1ea03307c167887d6e57961fffef641bf015d8166f1e52b633c3cdb22000c003e00090000000000000014007200ff0100000000000000000000000000011c8900e9d60008001300", @ANYRES32=r3, @ANYBLOB="0c7758dc63ec96c58029a732ae951084394ebd454ba752c2ab86e5cf828e735303cf344e0cedfbc1fd31c6c1fc1bfb5a44a42b7922ed3e20a719df87b1e10b4f8dd7ac90e71331e13e87057da6def5718eda918b25b1133f9079dd0d2b74b69843b289d636937709076862bd057b701e1143f0da1394491365620aee457dfa90c920d7adf39c02f849301473a8cbaee953d281db93e7d33f498aada92925c708004f00", @ANYRES32=r0, @ANYBLOB="00f90054ee4d40af"], 0x144}, 0x1, 0x0, 0x0, 0x40000c4}, 0x4000005) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:25 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:25 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L='version=9p2000.L'}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid', 0x3d, r2}}], [{@obj_type={'obj_type', 0x3d, 'system{.'}}, {@dont_hash='dont_hash'}, {@dont_hash='dont_hash'}, {@subj_role={'subj_role', 0x3d, 'eth1keyring'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'rfdno'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ubi_ctrl\x00', 0x402, 0x0) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000480)) [ 1187.951658][ T8091] binder: 8041:8091 unknown command 536871040 [ 1187.968137][ T8091] binder: 8041:8091 ioctl c0306201 20000040 returned -22 [ 1187.984365][ T8091] binder: 8041:8091 unknown command 536871040 [ 1188.011315][ T8091] binder: 8041:8091 ioctl c0306201 20000040 returned -22 03:48:25 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2900]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x5, 0x0) 03:48:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) 03:48:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x442) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x14, 0x4}}, 0x14) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/8) 03:48:25 executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x8000) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r1 = syz_open_dev$usb(0x0, 0x1000007ff, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000140)) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@dev, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) getresgid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380)) write$FUSE_CREATE_OPEN(r0, &(0x7f00000003c0)={0xa0, 0xfffffffffffffffe, 0x8, {{0x5, 0x0, 0x7, 0x1, 0x401, 0x0, {0x6, 0x9, 0x9, 0x7, 0xc02b, 0xfffffffffffffffa, 0x0, 0x6, 0x554d7c66, 0x1, 0x9, r2, r3, 0x20, 0x200}}}}, 0xa0) r4 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x1000000e000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) ioctl$TUNGETIFF(r1, 0x800454d2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r6 = getgid() setgid(r6) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r4) 03:48:25 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b00]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_proto_private(r1, 0x89ea, &(0x7f0000000000)="3ca06016f188c16b69a52d9a26451f2ee55273d9b852b9655e3fe3e1a4054aa68950dd932f0c3bcc90ada0cf") getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) getpgrp(r2) 03:48:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x6, 0x0) [ 1188.445820][ T8637] binder: 8581:8637 transaction failed 29189/-22, size 0-0 line 2994 03:48:25 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x406, r1) socketpair(0x3, 0x0, 0x3, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000100)={r4}) [ 1188.501136][ T8637] binder: 8581:8637 transaction failed 29189/-22, size 0-0 line 2994 03:48:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/8) 03:48:26 executing program 1: r0 = socket(0x10, 0x20000000802, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) futex(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x1) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x18000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000f40)={0x449, 0x4, [], {0x0, @bt={0x1, 0x6fb, 0x0, 0x2, 0x1, 0x100000001, 0x2, 0x100000000, 0x9, 0x7f, 0x7, 0x3, 0x6, 0x71, 0x0, 0x20}}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000006c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000d40)={{{@in6=@local, @in6=@ipv4={[], [], @dev}}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000700)=0xe8) r5 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000e40)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000a40)=0xe8) fchown(0xffffffffffffffff, r6, r5) delete_module(&(0x7f00000000c0)='vfat\x00', 0x0) r7 = eventfd2(0x0, 0x0) r8 = eventfd(0x1000000006) recvmsg(r0, &(0x7f00000009c0)={&(0x7f0000001000)=@in, 0x80, &(0x7f0000000940)=[{&(0x7f0000000240)=""/54, 0x36}, {&(0x7f0000000500)=""/119, 0x77}, {&(0x7f0000000740)=""/160, 0xff12}, {&(0x7f0000000800)=""/15, 0x2f}, {&(0x7f0000000840)=""/238, 0xd2}], 0x5, 0x0, 0x0, 0x2}, 0x10000) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000003c0)=0x400000) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/zero\x00', 0x40041, 0x0) setns(r7, 0x8000014000000) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x3, &(0x7f00000000c0), 0x0, r7}) ioctl$int_in(r3, 0x5452, &(0x7f0000000a00)) getsockname$llc(r0, &(0x7f0000000c40)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000c80)=0x10) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r9, 0x111, 0x5, 0x1, 0x6dd4de39ef7daba1) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000680)) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x400002, 0x0) setsockopt$RDS_GET_MR(r10, 0x114, 0x2, &(0x7f0000000c00)={{&(0x7f0000000ac0)=""/219, 0xdb}, &(0x7f0000000bc0), 0x2}, 0x20) write(r0, &(0x7f00000002c0)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) 03:48:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000080)=[@increfs_done={0x40106308, r1, 0x4}], 0xc, 0x0, &(0x7f00000000c0)="7a4b7e836f09441504577c6d"}) 03:48:26 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1188.678532][T19475] binder: undelivered TRANSACTION_ERROR: 29189 [ 1188.699099][T19475] binder: undelivered TRANSACTION_ERROR: 29189 03:48:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x7, 0x0) [ 1188.861505][ T9186] binder: 9083:9186 transaction failed 29201/-28, size 0-0 line 3147 [ 1188.873180][ T9186] binder: 9083:9186 transaction failed 29201/-28, size 0-0 line 3147 03:48:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x81, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) select(0x40, &(0x7f00000000c0)={0x8, 0x2, 0x5, 0xb60, 0xa, 0x0, 0xd816, 0x7}, &(0x7f0000000100)={0x314018d, 0x3, 0x937f, 0x2, 0x7fff, 0xfffffffeffffffff, 0xff, 0x8004}, &(0x7f0000000240)={0x4, 0xb83, 0x2, 0x6e, 0x8, 0x8, 0x8000, 0x61f}, &(0x7f0000000300)={0x0, 0x2710}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000740)={0xfffffffffffffffa, 0x0, 'client0\x00', 0x1, "e1d256d452222d65", "a7071dd3bfac2c919a1784718102c63ed6241a19fe23a5f46acf6241f7a00bbb", 0x0, 0x8}) setsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000000)=0xff, 0x4) read(r3, &(0x7f0000000380)=""/245, 0xfffffffffffffdff) r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x200041) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000640)=0x400) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f00000004c0)) getsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000840)={@local, @empty}, &(0x7f0000000880)=0xc) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000800)=0x4084000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x3, 0x0, [0x9, 0x8, 0x4009, 0xffffffffffff14af, 0x10000, 0x8, 0xff, 0xffff]}) linkat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x1400) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000940)) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000180)=0x20000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0x8001) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)) syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x201) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0912ddc4f3f532934b6dd63afdaffd486a2ebf47eb6d8744a3453ff8fd69a7bf678fc208adfde401322c5eb9ca04a788b920ed79222298d4c25fce635c32c215d7a1f2624159a39d7998d51b99cca5822c7b23ca526aa40b911043bbef079b4f2b4c2cd0d7d4fa85b922720a986fd44058d08c9e7dc7157af4d5663d0500a5b406e59641e5803bf114ed1af7ba272ba8cdc95b16af866f84063614a685d9858ce832264b1548be824d7a7b00420299acbf4715c583d48dcfa1c19fb7691128d3269a74fea2be1ae58a19baeb8ef1154a146a3c7a2ff9"], 0x1}}, 0x20004000) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000980)={r5, 0x9b6, 0x8000, 0x80000000, 0x8, 0xffff, 0x8, 0x2, {r5, @in={{0x2, 0x4e20, @multicast2}}, 0x100, 0x4, 0x1ff, 0x5, 0x800}}, &(0x7f0000000280)=0xb0) [ 1188.945652][ T9199] binder: 9083:9199 BC_INCREFS_DONE u0000000000000000 no match [ 1188.946265][T31387] binder: undelivered TRANSACTION_ERROR: 29201 03:48:26 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3580]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1188.990622][T31387] binder: undelivered TRANSACTION_ERROR: 29201 03:48:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) 03:48:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(&(0x7f0000000140)=[{r0}], 0x2000000000000075, 0x0, 0x0, 0x0) 03:48:26 executing program 1: r0 = socket$inet6(0xa, 0x100000000000002, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x3a) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000040)=0x1, 0x4) 03:48:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x8, 0x0) 03:48:26 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1189.174612][ T9468] binder: BINDER_SET_CONTEXT_MGR already set [ 1189.188642][ T9468] binder: 9449:9468 ioctl 40046207 0 returned -16 03:48:26 executing program 4: setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x90) sched_setaffinity(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000780)={{{@in=@remote, @in6}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000380)=0xc) getgroups(0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="100081000002000000000000000000"], 0x1, 0x3) r2 = getpgrp(r1) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) readlink(0x0, &(0x7f00000008c0)=""/16, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480), &(0x7f0000000ac0)) 03:48:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYRES16=r0, @ANYRES64, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYPTR64, @ANYRESOCT, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESHEX=r0]], @ANYRESDEC=r0, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="380000000000000070000000000000002000d5170b79318a7548687e2c9ed38e130000480000000000000048000000000000f103b44a8e85d724c4eda0000000000000"]], 0x82, 0x0, 0x0}) 03:48:26 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:26 executing program 1: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x100000004e22, 0x1, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) r3 = request_key(&(0x7f0000000240)='.dead\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000300)='/dev/kvm\x00', 0xfffffffffffffff8) accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r3, r4) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x2, 0x4100) sendmmsg(r2, &(0x7f00000002c0), 0x400000000000174, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x8, @mcast2, 0x3}, 0x1c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r6, 0x4080aea2, &(0x7f0000000180)={[], 0x0, 0x40}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) 03:48:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x9, 0x0) [ 1189.414978][ T9768] binder: 9754:9768 unknown command 536871552 [ 1189.427003][ T9768] binder: 9754:9768 ioctl c0306201 20000300 returned -22 [ 1189.440449][ T9768] binder: 9754:9768 unknown command 536871552 [ 1189.447871][ T9768] binder: 9754:9768 ioctl c0306201 20000300 returned -22 [ 1189.458714][ C0] net_ratelimit: 23 callbacks suppressed [ 1189.458742][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1189.470084][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:27 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:48:27 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e650a4210587f1b815b7e292144d5a869d72b2cd8a33ed0ba7f95e2bb1ff2b8d89115729357835fa5069dbea2ecceeaa1ec9c580867a42393da9161728195f5219786c5fc16b32972c04f0ce9bee6d79746bbd322ee06613065"], 0x0, 0x0, 0x0}) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r2 = getpgrp(0xffffffffffffffff) ptrace$getregs(0xc, r2, 0x400, &(0x7f0000000240)=""/29) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) fcntl$getflags(r0, 0x40a) 03:48:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0xa, 0x0) 03:48:27 executing program 4: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) tkill(r0, 0xe) r1 = socket$packet(0x11, 0x0, 0x300) ptrace$setregset(0x4205, r0, 0x201, &(0x7f0000001000)={&(0x7f0000000000)="78bc3dfa40ea635a1b658258ff27465b12cb1d5e01085e0302a4f6ecae1765f4e29d6dea6f3b0388220dc39f630b33bf6b7a65eaea2855e2e68dfdbb448326a427a695ed7282f203769e3cdef77a7643fb4ad8e8b1441cebfd5611491709d12eaa8c3705e008584c825cc928fb1dc0bae33bed27de38a86542a446ef059e19bac6917c160e2fe1efdb57ff4e3e43bb4b5e2dd7f449f47156af9326be2f7c43271d36ec1d54417e7adfd4b1d46e9eddab8c0bd31d3782df6003e04becbd25481c05637b13dcba3a2d0ac03946c13af8c92cdf5e6d73a8060d84207d877ed6682aceaea577885346191c17cbea9a9b8819265386e59daa4b111ffe2dcd69991e6f5bd7f87ee2ee521ff93c7e9ee7701b93c86026f542243756f0f4c07da3c733d264c382d3c0bd5cabf82b783886b68b466bfb8ad35719c7be36414aa8e08f2350983732c1a3453623253cfb7237beda5628a8ea5a82950225ea3e762e8583694ece699a960944bed341a2da876e1b9f706611134c7cbb1d8a7e2ecade9a7ea270ba5c81e7b8be6b976de2f38de964318eea19542c1e44784671969c900fc99b946a0ae18aee34f3b63548a1f24cbb49216e13ac1cbf402bbc2dfead7188f01a06e50c36bcb1735881c51d8391b3efd383987b7174f0585d78b965fc0d9cb035bffff7a51704a936ef0b59a8e62222d523c7923230fd72e25a1ba6b6a69be0ee298a2599af88d5892628831cfdfd29016632c464ba5210ffa4b6a8aa814ac0df6dfa4c9a37532d4203ef6173b534e177b022b39dcbd9c0222f4ab72ffd472aa464a665e19b029144e92f0070d93c36af44e14e94a9f385072aae6eeb263bf63a521366a22a44e6f01e8b6c967656cbdf7b19ecc79b9f6748c178378f899fd410820dd4fc82887f433f9842cd2eeacd3e0deb1f476b100ea151256b9d38110f0858357f07c7ae1147eee5ad75930a850c96df42f293cf0a20f00d4792b9fc1de9f4aea6188c25178cae19f726a88f49abfd41d33415f55ad99a260b0d8830cda99a15159180a3d24839d0b9b43b5057fc93ecd6ebef0b75ffe5823217d8636549f25ab3af86727bedc12ecd7a2445788b7a345d42d13168358d067470d923454506caadd741758c3e0a65f0ee6cbc42890c4d59ba0edf593bc6236ce9f18b9d0c465fc72a261f1fd93e4616a1c998d043cab82d4a7f464da263e75dceda735aa60a1bdacd769846a500672c0dd296578902b3395be54f7b3ce0134bea393d8a9d433e9bbf8859fc1340ecf06f15402a1b7b7d97a7539c503e7981e2eaaebe0d1dd6451de1eab14631c68d20ded5f6eb6631011fd9895cb036322d5cdcfa1673d3db0079d9fbd78dde6193e8cf01d49c8e4f05c1f3954743a10bdce3d5c02631b9655ac2baecd360f2477d1999f7ed615b94b46941b0c51b18b9d06c49c304ebec669dce61da23fe2c352d23246493ac87b80506cf6fc79d381bbfdc3e03155f7f70876b1af44489eafaaa8a0624c8f7c9de813b21c899d305f86f61fd8b1cf2028803f370beb71549471fcc530c1460c0d3d991f827980179f5e5fcbd3caa87facdef51ddd354d074cae7045acc0374c0d8ce80951f8797eb5ba811ae579376c4844f4e70ae13917e2c4286011f1bb53bc0f6dc6799487b2b5df81cedb73fe48fc1e05f33a9e4e03a6d7af2bb26e56d52ff25d9c6d56fb871df35794619cc313e7998a34a1d6f4dcfc29fc3d233c6f6efedc7c8157862204f579822726ed5e41e9b2401437c158b82394daa12c08e643fa485a12ecbfa75b217b21a51aa06f6ba9113bb30efc10d0afe66450054491082cba9906230e543ef3a7cbfdd21827ca0355e1e92f487534b5112e684ce4cc05dc043bb800f4f1d241006b81236f17291def313bcc49ae10dd5b1239c4ee31886ee5feee27b34b7facb7937a4b7715d531a8688186ba385c3a8c2602102b535012f2a32220e3b895d7a3f57dd7e11497a8a85a6c10aacc5a1504c977e6b9a1d8212de0a5c50084e58a2982c788cbc28fb9a88210286b821ba717499e5868882af48ef2ade7af7864321cb48cc2f818b776dd9f2505e1b14b8d80c434bdd715634f2b3f3889a99ab2de20e89fd10bd63392e8987506e7575603b470837b299f0609c33cb55dfcc5404041c3858d0ceac3a85c2668bdf112c3b403890f047966d27bbb0ed458da0f83f375b423f17c81deb8245838b3abec4a582224cc0b2bd10cca6f652b3da38295f2835e8a7aaff0525b783fea854704165a12a9faf00984c06464834c381e0b39bdd42fbe6a139cf7f24bdc0c9057a61ec28ef9e9c3764f815582056f8df08dba183840163366235a6899b4527679826830805457ba675db27fcc6a76f5bddb1bd11b249229a5d9ca685054fc914655195776eec388ced7cfbd42c80499b883216a06d31d68f0d83509f99ccfd334a6b512a252614cfa3416446ee6f12d8f6077061eaba9bdf5336da834023a29b2c18d770680fa918c5f923300af02098eaa0d3585835c0769729b240fc677539c006c27ff6d85f3d3d20ab605f893bfb97830b71b97faabc78d5e6bf5ffb0ab4da6fbadffb2e75050db70ab34a5afcee5a0d1b3da594ba9696dcacf0a83acec965bb63acd247a8350f3faaab59b2c9a3c9235917bc7b4ab6f652dd1a017923858febb20122424f30b2bc9a28b41ff1ae496a9b69e8cdbf1fb4052e7476b34b7f33542db36909cfaff6c0f6ea451c547685bd3789c0187b6d1907b91a10836c093dea866f344f9705b3e48b0574e7cafecc601d0faf12a3a9e94097825d45ebec214bdbd9008e338cc50fb37bd2bcda39bca8e6918203a426191ecceaedaf79be9d9857bcf8682536fcd548b98e9d73abea84ba709ce19c6540c194ab520d77d9baa41147f23dbb48f94771a26bdbe16cbf03288dc7c207e0c9b58e8552afe75710505b17b4055c1b12adc799b3e796a4600851c969f83e336946e5933a9ac97164ba496246dc475487f779dfbcfd199b1d6abf7fe42a1777e14ac46d12e491dbcf056391a7acc3e1231d0e8e074606c47dcf220d446159174d9d3edfac4059af72eeecbeb5a97f7c2f80ab24c62a8e83a8927c639b11b3cfb51c7779e8ed70c5b8ea5f61296f1814b9204d014ed4044dbdd8c7c86a1bf0d1d5330849c63ded455fb8880dad4b4a07a2ff99b8d85624f4c8c2cf60db64c596c16c994ec0f923736040b1ebd6feaa1901401b92915c0a576f5ba90a061b0383d3a25a4d0857b1d9fd80fc295dd46d89e23c95c02c9ba8ff0bd1447f78c9cdc9cc49e60b6e690e2cd8112e4eb3dc92ab222dfb7cf46487de5e81b146d24fe4af51ed3108bd5683c2bc3878bad81211032c8d77ef845b33b3113813a1970653df7e3a3775463236d9a2dfe9b557446855988daa23f64ee0295edb761d1052693cb60add6d8a12fbe13438ae1d3bba6766ce5851883aa82fb3bd8d2c915370401658db71545e95f3f43e0b3f4fab4446c20f60c8d12cb2913ae811021bdd74260e66973a4f7b725994386fdaea0ab94ba28d6f5cbd68b7ec37affb2271db6c6afe0cd1740f6b23d55849f6753869ab13bb56b756de6a1570a93097c97103526bc320bb5a2b15fe664742f6cbde599e20b7675fa8cf35d3567d391b8fab3c017e57ca79bff3051888ca4be7aa450eac5693d97fc5b9c749a2cad4bea2b1525703abc9ee18e82c6d232577b63ea9aff885e1849aa6bfa531016e4777a9149b757851c5c039c9fcfb34ee58237f05df534f4c26efdca350279ef6ddca6cb1775e24310a2712fdd3dea6f179baf22b226d6d7ce97ea4905420b65bea8501181679edd1adb4ec8c230419936e06f0736e9ac5c70dd1bb2e527831105efd8a2479c3bb280cd4cddab5bd8e60404ca2a9c8a055492c742641968137d7635b7c1e4c64d19940cc4f08fdc2675f269cb9d81a5ae99a7eb8f53b3afaa77eeac559104a1d7bc9d8ce313eccdbda28938ff9f3e11b6625e36ebda9ff1a4b232009bf35f94a70f6ea6fa86f0c2218b536c2293df786082157633198492a0c508c1a4786a9d34317ff72cd85b2ebbc020a85aa78b0fc7105ebe581a94537c4928120c144c4b27b5884dfe7ae17570bfeee43a006e909fe5a8e5a816664a5fb3fbf9ca2f8ceac1d1b960dfb4b0c5e5377070c191f8e0909465f06a307615bbc05722a01c57a071cbf691a8661e7d8e373936240da2a277d1a5f24a370e757b72bcb81a88879c17a4302454701608952d3ef48b2e268e11854b6b7f8c32896e7ec3bb669b3fb32dc0c5309e2b05491636b0f1178b8d8b3caa0f291548ab02c7625ec522e0d495a704276f00d54d02eeee58a2a14045591df8a29a09f5ef15d16c33995abd667072acdbd1dbd381c59ae8393faf4caef45ecfe65462d1127f959c8b0593404aa628415f2cb739dbc1f8255460253b031bd8f99cf5551389b2395ed9ad4f7adcb1bbf92c0461096a8ab7f06894dff1be3e569e3b82cae1d816dd545197defdd076860c9d34e4e877eec6f47266ae2b1a52440f79b5cc6c394af292836aabd6b7791b4d33477efd074848133bcb0d4b0bd00e9a1590fd92b93e8462bea3c77db50a27942db98eda06c1b45104e4b8787dbc90ea133dee89729ff7f2f9e5cfa2a408d13227bc8b4cba1ce8760a72ee28c2069aec58af79a37d10bec4df111298e31c6857754de1d788ecac0e42bddc59ca80e227e13321e5fcd013e4de3154e8ec710b9ec5ff67a551b7fbe560fdc3f7477bc515642e35f53ba533011de1018402ec1df2dcab54e2ad38e587f646a324e5e93fd03cee806ad97639d6d1b9f139dceac87676801941e13754b287d94c7d9c93141a3007ef010b1f3ce9f104882f86553db5453609bbb3f9a220c0743bbe7631089b82c04e697b28b3dfc626ef08b85e83c3f6a69e179ae51b233ade0236e68e897a0b8b5213407391703547df5996239596d8141bef0839ee7356e8b4361e54efd079d5cff5246685a05acf1445634f9e5a4ae2e29f5f67d76873cb77c88344ad373291fcf16275ed4fa8aa8f45d943d2917df1059810fb57e80b031ec54b6afe1e49bf74e04cf46f58c66d4653f5d225224c35a337fe91fd52e9595f7b670df6570a357baa3ec026cfa0d79903ba653c8a55f2494b4e41dbf402357c8f1f4f861d1be1f40ff574ab445d292777ba9cfd574f4dc3dd7db8549279830a4682ead37b007075f857c293985be286b2ee1f3fffec1bdb70c6a607761990512723e5251419a8072c2b49962d3663b47654ae8267c839fa1a2b735e183feb51f224914820c94bba17c9d433e4c07a58eee89287a58e6c94cc9df8640a0505398d97fcc1c119a305e405e58e301b35e684ac94618d055ebe47d3fb5af81708fa2ea7b74f0800075f1bea41fa5ac32fa23f31ae81d08ea18f0449ba89190ab5f58b15e7ddf8327b93ced6a56e068bd270d3cf72ff1bd7c8998ba20155644d8ed5b41096bc38503acf25d7e694f738b90c037438402e13957225b7273631329ef05b1a55419539cfa5b66bfd16bb0514de6fab87970b5afdc97cfc9172ee022982f1f8acc4de9a6123c0ad81ad32c3ce6bf6c79e89a96a7825c7b043a7f4962fe9de2eb324941e2211171609a725671b24540341e7f1bf7e8aa46510c19c73e988aa5f848ecf5648a4d380554a2fd231153edced07cea0e28dab4f2e96cbbe1cf7e5720cbcb7bd6d6dafebdae2551e9d34cfe2c5a206f7236eb9edb8165eb446e46cc5b52fe44d43c8396097cb111ef601b27d2b7b35ae9e2efa0", 0x1000}) r2 = dup(r1) getresuid(&(0x7f0000001040)=0x0, &(0x7f0000001080), &(0x7f00000010c0)) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000001100)={0x3, @default, r3}) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0) ptrace$cont(0x21, r0, 0x0, 0x7) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001140)={0x0, 0x2d, "a1e8dbf4f18b2b0718f48217f72b01096d4ab9466eeebc1d4c9aefce6cf963f67c6a1b3d521be13ea29ca99a5d"}, &(0x7f0000001180)=0x35) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000011c0)={r4, @in={{0x2, 0x4e21, @multicast2}}, 0x80000001, 0x4}, &(0x7f0000001280)=0x90) 03:48:27 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:27 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000050000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0x4) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, 0x0) 03:48:27 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000080)={{0x8, 0x2}, {0x4, 0xffffffffffffffa6}, 0x4, 0x4, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1190.258006][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1190.263918][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1190.268699][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1190.269841][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1190.275877][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1190.281252][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1190.737998][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1190.743908][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:28 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ff0000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x143, 0x0, 0x0, 0x5d0) 03:48:28 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x1, 0x349}) 03:48:28 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) write$P9_RLOCK(r2, &(0x7f00000001c0)={0x8, 0x35, 0x1, 0x2}, 0x8) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000180), 0x7, 0x2, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf}, 0x2c) fadvise64(r3, 0x0, 0x20000002, 0x4) 03:48:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0xb, 0x0) 03:48:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 1191.203677][T10427] binder_alloc: 3294: binder_alloc_buf size 28360 failed, no address space 03:48:28 executing program 0: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) recvfrom$rxrpc(r0, &(0x7f0000000180)=""/171, 0xab, 0x2100, &(0x7f0000000040)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @mcast1, 0xfffffffffffffffe}}, 0x24) 03:48:28 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:28 executing program 4: r0 = shmget(0x1, 0x4000, 0x1002, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) getgroups(0x1, &(0x7f0000000080)=[r2]) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x9, 0x8000) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @bt={0x2, 0x1, 0x80, 0x1, 0x68525e5a, 0x5, 0x4, 0xc}}) shmget(0x2, 0x4000, 0x90, &(0x7f0000ff8000/0x4000)=nil) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb8, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x229}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x72c9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000380)={0x1, 0x0, 0x3, 0x6, {0x6e, 0xff, 0x100000001, 0x55a}}) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000003c0)=""/4096) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/capi/capi20ncci\x00', 0x200100, 0x0) r6 = semget(0x1, 0x2, 0x2) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000001400)={{0x96e8, r1, r2, r1, r2, 0x44, 0x9}, 0x10001, 0x200, 0x7}) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001480)='/dev/cachefiles\x00', 0x200100, 0x0) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f00000014c0)={0x6, 0x1401700, "bb9e32e3ba45d0b962032f167a5d5e6f374c4b9a11cbe106", {0x8, 0x6}, 0x3f}) ioctl$VIDIOC_S_PRIORITY(r7, 0x40045644, 0x1) write$binfmt_elf64(r3, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x453, 0x4d73, 0x1, 0x3, 0x2, 0x7, 0x7, 0x295, 0x40, 0x2ce, 0x81, 0x1000, 0x38, 0x2, 0xfffffffffffffff9, 0xabf3, 0x4a1e65f0}, [{0x70000007, 0x3ff, 0x7fcdf4ca, 0x4, 0x0, 0x81, 0xff, 0x6}], "f4256e636520b51cf940de4983227f84de2973b9cc0fa73961ef99f5abfb6e123c2f3b009de45364294a40b5cd49bbdf8d2df0d615eac4bb668b0f996c8a34bc58c02b89bf39a16577df8a8af9f85d1d1aaa538fa56f4f8eb8ad792303119f84a4303f1a60bb0da42694a6a3899bd546548d198cbeb2e80c4dc3b5451c564b737a62ff99fc0a4e06ecf5782a59a0e61ffd784eea4b3f56fdb7887438d6aac53e0f1edfe58f317595c24e0961f4bf57a0d1cf9156089948c35449a926660069415db6a5dde1870018068a33e64ccdf072891f5a3828a8d23db6793672c2e92018e86850f8745682a79fffadc4cb05212d09ccf2e042802bd2d87bf3b6a57001116851e434ba546f6e9d3c536cd304748ebbc3c00207004a00c84b4572ae36534b5d80a0a7c5febe8ac8cfd8beb6c6f8bf48f56e0e728e24a5db7a55c5de45bb1f9d0dffd11c8ff458950a9c4b68f22edb8e013667453cfaa3eff43b2137ee2105c25292ec58a3055327fe91660fb11179fa5db7980d390008408069d41b7675ac2cba02f77a4e9bb5c7ebf599ff612704d57d9115135968bd3e3941133b2582ecadffa3bf40bd63317a4ff9add19b4aca0e1897f506ed4f889a4252553c073645997c4953f10cf4c0a28019eaa22f63fdef62ff104801b2faea20a1e451d2ffce6999d453d624e2eead73cdd06e1f003995d93a4b35f989588f2cfaeab08a22a2ffcd3f7c6b6e1894f79f662b7b083567b0d18faa573e94fed256a48c28e9daea9d54d195ce929d0551c688a5bc271dfae5f201e87e335a2bbdd479efabf1648f16ff32a05091d64123c0f64496071b78a324190a41474d5e20806d04837d042201fd659c87fa58f4e3ce3ebf43b773002e350b5efcffdd6642c0f33c627dc44ea8365e547d609d2a538135371ed75603d91c9018e23f0a0240d6856223341e80c40106514fb5bfdf9dc8c43b0b99439c96018f482f904b1cdff472fcbe7020effa4d32f8b11391761c40e5dbf0124d8ad2b2090805da18418357c53640eea2dd5feffbfb1a96089fef634bfb8537f1fc47b78320922d22997722aca37b335e0f5874bfc97caa8e4ba6988eefaa082af37191244816b3316ddea0c5cc2ce54a931d55af713158569b89053cf05a195b6309f88df93da0cf537e88384b8fdc40056235ea763e00daf92b6a9844f4cd1f6d5c09df74207c64aebd17769bb5981884ca8758d35fb0b5ea9a74ec4008f80bbfe6c1006c9cd2fb203f2940ecf59703d080ceddd15dba8aa6351a7faa025a3d0c431744d0e3a10678a4a946147cd9f6f310d9eeada7d697a00cdc22ed555110ac81fb684c8d4a58aed4d9eafb292d9e05ef28ede7eb34e3721b705a82aecfea1b4db1e64031b11cd2f78615005165be7945d5aa8356a18fe02c79f0c59767f3785bf0040f55835446d83176862007239ffcea77c4ddf65f9ce970cf7d3fc6fe6c27ef6ac6b6cc33298ef8edcaf6e04ec370bbe415540a73d3edf78a68fc8fe239f51c66f773e45241bc2aea8ec359e7c4fdde4b631e208e7dc64c59a76b8f15d5de9c812070c8596926255549ce176f1f3b9c854ae239105c4e2343f2a4eaffc8555a31b011f4af87403f01152ae2e2a913b757ceff39d74ce7c8cffc131292e8c382b75c04b7e6477aaf0a2b9c67ea540c75b79562b9e32a399beedd1b9852991829e42ff4f435b72079e0a66a597311aae797f047e53e3c7c12982eb39c2ecd3bfa87e9e6c99b25330fadbcff721d9251ab0664a0cfdb70532cbd33d7a7699896d6ed8cc361a3cfb6b1db13f9b6e7b879624153c41463f20f9c6c822064a4baa08b32a75428123e915c6d8eee5fb5f8ba5ae81bda48424f6a73d3dedd436b207579c4eaf06c4cf72bb32dcb569f6d4128f118818d7b8342a407256fc5b4552f7c81fedd9040b906a073efd4dbc99f6d4a9e66fdcaff140002b415ff52f90be1b05fe49cfe14a6eefc14f070d7ee7e1c1e04cb6308688f388d7d305c2e8546eca1a1b0956fcf8d56d520135ed85317f41eaef8f65ddeb011b213f4fff8bcd4465debead811c768a041af37a375341c1d2171fd43e0aadecf2c0cbae99e761959d3aa5434c242067e65bdff8dc5b66daf9b19cbe4a4706fd13fb2b9b0163d7f61aa967be905a748801a9a41390dce9b7972848395625a01b0acd99f30640a6269b3e2aece9e1dc338cbf99895afbf6993e38e721edc379b2dafebde1b5dd87a02aaa19a1acdf71b39d57f7425449cbdb1f61ffd1a8b7f4c79701b78c5334a17c9322d016e04e2c15c731a8e4676e9545219f345dbd4f0dda2766ff02e9ad935c65db5641ccafe28a2f9f07e0be0a0bc7b9d947539a672e894e6877dec00ba27733985fc3e485ba94b62770bf3b6164a43caed04cfb5fe4d54a22ec77eeeee29f6909fce68beb648d637075dc21668db10e3e336cd112123b6c385a2db8e74fd717753210e378f321f0f2d21e5cb811f2d112a79546e9a8fed4634b9139f579e30315275d09c8ab8ea804ade561701918cd7612bdda3e8d1811b08775dd16068b3a356b478899811212a8d7f0a8ad81c0c514ad3f6b4dc59404a63274b32de8ca58d6a7859e7775dce3c5da7dd8e7b6bccaeb0053be9a9686f6693b34ccdad345387e4abc07c2f4f032b4c2e727c1b02912b7481c68368d4d0f9e09daeaa1aa3f5dd4b9a9904e62e6efee4fede8e50d1ef2146d13e650d4d9216cdce5c4f4bc132f5617e65a6f36913471352d48c6dfc506552068abacc9d4d5287e7d1a70b45c6c4c9cb950f6f04edc79102a2478d5c7394f69d9967d2b64b8a4c07afbb21498b6fc87f34e2b70f20cbb3f57ac90c901c7643b62a77c7c7bf9d3f8a506a126dc1cec2bfe823fbf0640d5a939266b74cbcdf2a49d3af4c9b6afd7449d612ec48ee78c23a3ca50b89123152abed92ee7d8924a09a942268683e2ee5761e80a432efb7a67f9639ba5abffd4af0ed029f8d27be594f1cca56489c81f60dbe1b0ddd1562299a0be2322a8209a8cdc01b6826a6d70b790e1a7de0fcddca7d937cde85b574da421fe346a09fca92754c6d14ad8783506a76d19f14de59ddff5cb709527c91bb609e36804623118af212f80cfcb751f27b0ae5f26cda2fbfd9861ea4362e7e66c00a6c7b281168e0ce5dbafc5e5fb909a49f85ec117b5db8c09c7b7d54b928f91367979075b03b0957e74f789de620e50126a7cb4bf5a748a0f534f180caa17382ff8520122937a9324067b55538afd39175e771509293d5d881808faddd5cad920789f723d3725a375f3feefc2bd2ae8f4b5ec8c24c98d42d39618f60f5dc46afd1235487776c50ca429fa0d1431a30faed30c8a7a1f3b75d9045a1d0be7a342aeba68240c8e65f4c24bfac99b4778d073ef3b3b3458a81059e20831ccafd8c8302a72c9f0a895cd4086b98ebd60047d0f7fc3d87ea03f1dea82bf9b93bf2fba951ee2e6e513b01bb8dd722d5012c96f749489eefadb7c5d6bfc02d60849cfdb3f83935f697265d3255a1203562a2002d4372414c22f1058f78785ef13bab54a3a986b45b105f5b964fed4d6d75fffa387974e5228b7d0a66a73310aa93479f4ba71910de9309fa1c2c633142e51ca7fd3ccb236d65b11e7ada4cac7b1a017a69a0e4eb5e17249577200edd0342d3f947fada4043ae1f7909f38189796cf351e372036ee88d008e4ef746f2abd73993702699eb1425b6f6a035540d61a005da191ee8212db5fb8649c447915eafe8c307d93842ed3e3d30365f11089b1176b1caac497cc6e598356e978c9e0d416a9720a66a0f6bcdf0007b55ac9d88a37c7fdd09b157fc8435f4dee048b8217895411873a836cbef4748c0d69bb437372ac7a1d97c7220f9558485f128e7d4388f150cce751931d362a4f1af3426d6aa3de51f108a12e116b46752fc8d26e5758b15cb74499a92b5ed5fb74d5840c9fe3160996ef9bb0934156f1c5eb42fc8fc85c3a9309a86eb0d53e3803ad09a5fc04cddb26ab8f434d546807c34d6aa0b3524a619ef8df667bccfe532f39d63962c3be761df8a50f07eb87761596b1f6f9a51f5788a3d4f6490d5a08483e8c6bc4d4abb92f646ab154ccee83607eaaa451073974f008f38b3c18bd407ca54f56eba5d7bcb91d15c166099748f754d0d336dc006fd28750bc95eb9c66fcf27ed93ea87196944fbf286d71ebb421bf57de1a2d3776c0ed259f8f03c9285238118769cadbf2dbff6e9ffb24f946d80823569afc53205958d30b8aa7a5a23a67545b1d1c41318b3fa1424ba3036ac5c4820fdd7f10ddc1c4e11fde408920f7df64662d7713466baa2b7ebceb6a8ed8f702d41f69428aae10ce968c0f9ec2fdc8b14b464f939bbe266901d126b8539225b06fd02c0792024ab041625dad5f8f492c8e5b68ac74fa0a3e907c71766341f400bd896267360d6c4addb6e881e1f946915b2b7399c9c919b1ce26d8af2cde8b42aacd9f448f75e19b411c76a48c383b466c5468bdc3833ebee50d85603f416a7573742b4a576a6d2140b35daa26711fec77927bfa47800975e99caed08bdb6c2d2c4cd7ef840022f10173dcdbef09728571de77dec95552f000ff3768656ccb5dfc85f60b5986602e4273de285f47e881e47df6090df4f12531551e0e9f2b04583861b68e5b983c265e214baab8b58fad0c37a56cf178e734a9633d9e673573518bff71989a80ff06ea63317777f8944a8656bbd360126542de3be457fde58c4604c4479050731fc97647fb65c356e4932b03ae8e08aab378d1bcb8c2dd2851b773d70cc563c983a369ef427cfb48c5f0a090af7bfe25a91cee1f1dda57dd3c43211387be2cd3617862936510b2d9e8214ebf9b6a6b2af524e895747e77d992dc09be9eca5ccc52a53aa20bd89f692793e847229168400f6c392c3ad3bfcd3306e61ca1c372eb550fbee6e6a718ba67c7f1f0e8811ef86ae455ce52604c6db426d67917eccec248ee3c19ac77e50aac1239a26da2c466ac31844c0b171fa418cbc8c07e55db9545adcb2cf1850b9199dd96d0e35d229b575493d00cffdc680d6db7397f1c3deeae76b3bd2c55e0af470acb56cb746489ff8f020f5c885f701bead572b9ec3cc8e560dd85e186826549d7531105792b90146205195b662b97d8f4609a248c5fcd8bc3572235e9caac8cc7d4faea53310df4f2605559d145f25baa0009e32a1a1ef44fa8fdbde0d8208e778960b7137c533c7359895bc8b2d88a47f17ab72d7cb5eb46973642c3fdc0f62127726b13b456fae311ac287f1a8379d52d5aae68aec49aed2311be2ccd066e9e2269b67b8c9cad132697861385940d029591456806f083abf0cc72ee9877b4207b3f36eb600d812dfbc189dbc95f802f9664ecb50d2187ece4e1f631982f90805e34bab5e5e50b2f4a69fd7d5077bec61a6eb0676d459c58d860bbfc095efd7f4c3f08486190eebf65eb1581c2bc0d4390b162150ad4a83202d027bbc048020068cb8bb7d12dee26c5eb9470b186bd723909af511157c6728350c4041bbb34d52c1607160536f2353684b0ad1f4e0e18c7468384e42014df65a1ccc1c9ea3cd200cbed434c7f51c27b8d45abc66466934bc10117868c1ca2cb54ff2f1f976bb55baff8bfc8203ebcf340091fec5f7879f83437cedd480a64d2642913c7e0841a75ccc6ac8e57d178fc30fc05f9f9498fb1aa17d35efe151fb69ba838ed6dc54bc220fba0930c156c41653aeab83b53bdef0a0983a7c2a2cbcff79a1944f0f37866b90645051c9dc1192fb5b60edb3686ad000"}, 0x1078) setsockopt$inet_tcp_int(r7, 0x6, 0x4, &(0x7f0000002580)=0x3f, 0x4) connect$netrom(r5, &(0x7f00000025c0)={{0x3, @null, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) semctl$GETALL(r6, 0x0, 0xd, &(0x7f0000002640)=""/117) ioctl$TIOCEXCL(r5, 0x540c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002740)={r3, 0x50, &(0x7f00000026c0)}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002780)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r7, 0x0, 0x1, &(0x7f00000027c0), &(0x7f0000002800)=0x4) fstat(r3, &(0x7f0000002840)) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) getsockname(r5, &(0x7f00000028c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000002940)=0x80) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002ac0)={r3, &(0x7f0000002980)="939c3cc79274d64e29768ccc24a7aba2c356f16139a941458f6d0bb72978a66aa11d4368870d2f068cd94368b716e9912545b0177b5c6c6795e78668e42bca2943938abbe5c7b304a1dcdeaa2b5c477f876b4acbec620d31511a5099ff9b0d2d74c82bc6d6968e0537b84ba5e6e1b419c4496ba34dad5420c6ae6cfe3741aae9a1969701dedf1033f4f7be49bd87adc52fe2c6a2c8e64abd2b371581393eb1e745f9f76f06951ff7b9d174c685616034124c117c1017ea30383c41788c184cafe8c69ff69a8652b16e393d5e363239107f4ad5d49a9d97ad1b7b5bcb715b1f7067dea5433f63dddc0728947fa58962aecddc54", &(0x7f0000002a80)=""/39}, 0x18) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000002b00)={0x8, 0x7, 0x7, 0x7ff, 0x5, [{0x200, 0xab7b, 0x4, 0x0, 0x0, 0x2}, {0x7f, 0x4, 0xff}, {0x400, 0x4, 0x1, 0x0, 0x0, 0x1000}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x1, 0xfffffffffffffff7, 0xa7b0, 0x0, 0x0, 0x3000}]}) [ 1191.252024][T10427] binder_alloc: allocated: 1088 (num: 124 largest: 32), free: 11200 (num: 1 largest: 11200) 03:48:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0xc, 0x0) 03:48:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @increfs], 0x1ee, 0x0, 0x0}) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3ff, 0x2) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000180)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e21, 0x80000000, @ipv4={[], [], @broadcast}, 0xe99a}, {0xa, 0x4e21, 0x2, @mcast1, 0x80000001}, 0xfffffffffffffffb, [0xffff, 0x9, 0x8, 0xef, 0x1ff, 0x40, 0x5, 0x6]}, 0x5c) 03:48:28 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1191.504492][T10668] binder: 10597:10668 ioctl c0306201 20000040 returned -14 [ 1191.564227][T10668] binder: 10597:10668 ioctl c0306201 20000040 returned -14 03:48:29 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x44000000000000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mlockall(0x0) getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000580)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000005c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x4, 0x8000, 0x0, 0x0, 0x3ff}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100)={0x1, 0x5}, 0x2) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0x7}, 0xfe3d) fstatfs(r1, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x5) write$FUSE_LSEEK(r1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f00000001c0), 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x200}, 0x10) ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) 03:48:29 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6488]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:29 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = getuid() stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000001c0)='./file0\x00', r1, r2) clone(0x4000002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200, 0x0) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x1ff, 0x3, 0x10, &(0x7f0000ffb000/0x3000)=nil, 0x9a6b}) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000011c0)=@filter={'filter\x00', 0xe, 0x4, 0xe20, [0x0, 0x20000380, 0x20000520, 0x20000550], 0x0, &(0x7f0000000340), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xf, 0x2, 0x88b5, 'tunl0\x00', 'veth0_to_bridge\x00', 'bond_slave_0\x00', 'veth1\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0xa0, 0x120, 0x170, [@connlabel={'connlabel\x00', 0x8, {{0x7fff, 0x1}}}]}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x4c0, 0x200}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}]}, @common=@log={'log\x00', 0x28, {{0x0, "4768bfb81a3740c57120c8b3c7ae9a30c1d05b28271b579be8eec9dfc971", 0x8}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0x704cc99541443fde, 0x1, [{{{0x11, 0x4b, 0xa00, 'tunl0\x00', 'veth0_to_team\x00', 'syz_tun\x00', 'bridge_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0xff], @dev={[], 0x18}, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x110, 0x188}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x22, 0x7fff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz1\x00', 0x6}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x7fff, 0x2, 0x80000001, 0x0, 0x0, "205746a8cafa0102f95418501af52f18196419976479adefe95b80b22ce945eaf2c20b70914fe1e4e8f446dc1ea6378f9bb45c7c48dab2d3c183eec7dbb568d0"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x3, 0x2, 0x16, 'ip6gretap0\x00', 'yam0\x00', 'dummy0\x00', 'team0\x00', @local, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @random="ae07f6814b20", [0xff, 0xff, 0xff, 0x0, 0xff], 0x8a0, 0x948, 0x980, [@u32={'u32\x00', 0x7c0, {{[{[{0x1, 0x1}, {0x7fffffff, 0x3}, {0x3, 0x3}, {0x800, 0x1}, {0x0, 0x2}, {0x3, 0x1}, {0xffffffffffffff00, 0x1}, {0x3, 0x3}, {0xffffffff, 0x2}, {0x8000, 0x3}, {0x7fff, 0x2}], [{0x7, 0x2}, {0x8, 0x6}, {0xfcd, 0x1f}, {0x400, 0x4}, {0x401, 0x3}, {0x3, 0x400}, {0x9, 0x9}, {0xfff, 0xa904}, {0x8, 0x800}, {0x10001}, {0xfffffffffffffaf7, 0x7710a991}], 0xb, 0xb}, {[{0xffff, 0x3}, {0x1c000000000000, 0x2}, {0x1, 0x2}, {0x80000001, 0x3}, {0x80000000, 0x3}, {0x80000000}, {0x7, 0x3}, {0x7}, {0x8001, 0x1}, {0x5}, {0xb77, 0x1}], [{0xd4, 0xffffffffffffc5f7}, {0x8, 0x5}, {0x8001, 0x9}, {0xfffffffffffffe00, 0x401}, {0x7, 0xffffffff00000000}, {0x4, 0x7}, {0x200, 0x1}, {0x10000, 0xfff}, {0x3ff, 0x101}, {0x1, 0x40}, {0x40, 0x100}], 0x5, 0xb}, {[{0xff, 0x3}, {0x5, 0x1}, {0x5, 0x1}, {0xed3e, 0x3}, {0x3, 0x3}, {0x7, 0x1}, {0xf74d, 0x3}, {0x5c80}, {0x20, 0x3}, {0x7ff, 0x2}, {0x4, 0x1}], [{0xffffffff, 0x8001}, {0x8001, 0x3ff}, {0x4, 0x7}, {0x1f, 0xe7}, {0x12f, 0xfffffffffffffff9}, {0x3f}, {0x4, 0xffffffffffffffff}, {0x6, 0x4}, {0x1, 0x8}, {0x1, 0x7fffffff}, {0x200, 0x7}], 0x5}, {[{}, {0x4, 0x2}, {0x500000}, {0x7ff, 0x3}, {0x3, 0x1}, {0x1, 0x3}, {0x8000, 0x3}, {0x6, 0x3}, {0x87f, 0x2}, {0x578f, 0x2}, {0x100, 0x1}], [{0xfffffffffffffb7b, 0x100000000}, {0x78a358fc, 0x8}, {0x4, 0xff}, {0x7fff, 0x6}, {0xad, 0x4}, {0x6, 0x1}, {0x1800000000, 0x2}, {0x819, 0x80000000}, {0x7, 0xec}, {0x6, 0x200}, {0x4, 0x2}], 0x0, 0x8}, {[{0x3ff, 0x1}, {0x1}, {0x200}, {0x2}, {0x0, 0x1}, {0x3, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x2}, {0x9, 0x3}, {0x7, 0x3}], [{0x5, 0x8}, {0x8001, 0x4}, {0x3, 0x9}, {0x6, 0x3}, {0x1000, 0x81}, {0x7f6, 0xffc0000000000}, {0x4, 0xfffffffffffff001}, {0x4c, 0xbe}, {0x10000, 0x5}, {0x7, 0x6}, {0x6, 0x8}], 0x5, 0x4}, {[{0xfff}, {0x2dc5, 0x3}, {0x100000001, 0x2}, {0x401, 0x1}, {0x715df89d, 0x3}, {0x9, 0x9592ceff59cd19f5}, {0xffff, 0x3}, {0x3, 0x2}, {0x1, 0x1}, {0x1, 0x3}, {0x1}], [{0x2, 0x4}, {0x8d2, 0x100000001}, {0x1, 0x470}, {0x100000001, 0x1ff}, {0x1, 0xffff}, {0x101, 0x8000}, {0x80000001, 0x7}, {0x1ff, 0xffff}, {0x603a, 0x812d}, {0x5, 0xffffffff}, {0x6, 0x4}], 0x0, 0xb}, {[{0x100000001, 0x1}, {0x9, 0x3}, {0xf5, 0x1}, {0x1}, {0x7c6, 0x3}, {0x20, 0x3}, {0x7, 0x1}, {0x7, 0x1}, {0xdd, 0x3}, {0x80000000}, {0x481fbe94, 0x3}], [{0x4, 0xfffffffffffffff7}, {0xfffffffffffffffb, 0x4}, {0x8, 0x3}, {0x100000000, 0x3}, {0x1f, 0x3ff}, {0x3}, {0x0, 0x5}, {0x4, 0x71}, {0x8, 0xfffffffffffffffe}, {0x5, 0x4d05}, {0x800, 0x9}], 0x8, 0x4}, {[{0x1ff, 0x3}, {0xe9af}, {0xfffffffffffffff9, 0x2}, {0x1000}, {0x8}, {0x100000001}, {0x9}, {0x1, 0x3}, {0x4, 0x3}, {0x2, 0x2}, {0x9, 0x3}], [{0x100000000, 0x6}, {0x3, 0x1}, {0xc5, 0x400}, {0xfffffffffffffffb, 0x401}, {0x1000, 0x3ff}, {0x1f, 0x2}, {0x1ff, 0x35da}, {0xfffffffffffffff9, 0x100000000}, {0x961a, 0x100000001}, {0x7, 0x4}, {0x1, 0x101}], 0x1, 0x6}, {[{0x8, 0x3}, {}, {0x1, 0x3}, {0xff}, {0x5}, {0x6, 0x1}, {0x0, 0x3}, {0x6, 0x2}, {0x7, 0x3}, {0x4000000000000, 0x1}, {0x40}], [{0x3f, 0x2}, {0x8, 0x7fffffff}, {0x200, 0xffff}, {0x40, 0xffffffff}, {0x0, 0xff}, {0x7fffffff, 0x1}, {0x0, 0x9}, {0x10001, 0x7fff}, {0xff, 0x3}, {0xdc4, 0x100}, {0x9, 0x6d35}], 0x0, 0x4}, {[{0x100000000, 0x1}, {0x3, 0x3}, {0xfff, 0x2}, {0x0, 0x2}, {0x2, 0x3}, {0x99}, {0x40f9800, 0x1}, {0x82fd, 0x756c855c3ce52a77}, {}, {0x97e, 0x3}, {0x101, 0x3}], [{0x401, 0x20}, {0x8, 0x5b65}, {0xff, 0x400}, {0x9e, 0xdb}, {0x83, 0x9}, {0x4, 0xa6e}, {0x0, 0x1}, {0x8}, {0x5, 0x3}, {0x2, 0x4}, {0x6, 0x1}], 0x0, 0x7}, {[{0x9}, {0x8, 0x3}, {0x7}, {0x3, 0x2}, {0x3, 0x1}, {0x6}, {0x7fff}, {0x5, 0x3}, {0x9}, {0x3, 0x2}, {0x4, 0x3}], [{0x2, 0x1ff}, {0x1, 0x40}, {0x7fff, 0x2}, {0x3, 0x1000}, {0x2, 0x3}, {0x8001, 0x1}, {0x6, 0x7}, {0x7, 0xe41e}, {0x3000000000, 0x1f}, {0x7, 0x1}, {0x0, 0x1}], 0x3, 0x8}], 0x5, 0x1}}}, @limit={'limit\x00', 0x20, {{0x6, 0x7, 0x7, 0x33, 0x2, 0x8}}}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x10001, 0x8, 0x4, 0x0, 0x0, "ec791d135beb676a0b3b728b68a2c6cf2ca4e7f580e619dc05e1f73889ab31adb856c48f93c01bd8a5defa1a608845427e07302187e795374d0acf99833e5611"}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffe}}}}, {{{0x11, 0x4, 0x6558, 'netdevsim0\x00', 'veth0_to_hsr\x00', 'lo\x00', 'ip6_vti0\x00', @random="a122d44c1470", [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @local, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x70, 0xb8, 0xe8}, [@common=@ERROR={'ERROR\x00', 0x20, {"bc38eb545a5c361cd708c9962f9f99654c092bac2291533c07bf0e021c34"}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x4}}}}]}]}, 0xe98) 03:48:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dsp\x00', 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000680)={{0x1, 0x0, 0x8000000000000, 0x3, 0x5391}, 0x800, 0xbee}) connect$inet6(r1, &(0x7f0000000700)={0xa, 0x4e20, 0x0, @dev, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) fsetxattr$security_smack_transmute(r3, &(0x7f0000000500)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000002c0)=0x0) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) getpgrp(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@loopback, @in=@local}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000c80)=0xe8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001380)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000040)={{0x6, 0x7, 0x20, 0x1, 'syz0\x00', 0x40}, 0x1, 0x1, 0x3ff, r4, 0x6, 0xffff, 'syz1\x00', &(0x7f0000000000)=['security.SMACK64TRANSMUTE\x00', '\x00', '\x00', '&ppp1\x00', 'TRUE', 'TRUE'], 0x2a, [], [0x7ed7d462, 0x1f, 0x8, 0x65a]}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000001700)) fcntl$getownex(r3, 0x10, &(0x7f0000001780)) getresuid(&(0x7f0000001900), &(0x7f0000001940), &(0x7f0000001980)) getpgid(0x0) getresuid(&(0x7f0000001fc0), &(0x7f0000002000), &(0x7f0000002040)) getegid() ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000002080)) getresuid(&(0x7f00000020c0), &(0x7f0000002100), &(0x7f0000002140)) stat(&(0x7f0000002180)='./file0\x00', &(0x7f00000021c0)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 03:48:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0xd, 0x0) 03:48:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socketpair(0xdd46ee5b1de75128, 0x800, 0x1000, &(0x7f0000000000)={0xffffffffffffffff}) accept4$x25(r1, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x80000) 03:48:29 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:29 executing program 4: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = dup(0xffffffffffffff9c) ioctl$UI_DEV_CREATE(r0, 0x5501) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x0, &(0x7f000000a000)) [ 1191.940347][T11117] binder_transaction: 9 callbacks suppressed [ 1191.940365][T11117] binder: 11081:11117 transaction failed 29201/-28, size 0-0 line 3147 03:48:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0xe, 0x0) [ 1192.048797][T11223] autofs4:pid:11223:autofs_fill_super: called with bogus options 03:48:29 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:29 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x6, 0x40, 0x8001, 0xff, 0x20, 0x100000000}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDSKBLED(r1, 0x4b65, 0x1ff) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f00000002c0)={0x0, 0x8}, 0x8) 03:48:29 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000000)=0x60, 0x80000) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000001700)=""/4096, &(0x7f0000000140)=0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000f4ff000000000000000063404000000008000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 03:48:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) getegid() r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000540)={0x0, 0xbf}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x33f) getgid() get_robust_list(0x0, 0x0, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000280)='$keyringeth0.securitymime_type{\x00', &(0x7f00000002c0)='/proc/self/net/pfkey\x00', &(0x7f0000000300)='/proc/self/net/pfkey\x00', &(0x7f0000000340)='/proc/self/net/pfkey\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000440)=[&(0x7f0000000400)='bdevppp0wlan0)nodev\x00']) syslog(0x9, &(0x7f00000001c0)=""/58, 0x3a) fstat(0xffffffffffffffff, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/18) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc0001000}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)={0x24, r2, 0x400, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x1200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) [ 1192.300736][T19475] binder_release_work: 9 callbacks suppressed [ 1192.300744][T19475] binder: undelivered TRANSACTION_ERROR: 29201 03:48:29 executing program 0: r0 = eventfd2(0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x200, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x20) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x800, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x460401) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000040)) 03:48:29 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0xf, 0x0) [ 1192.421966][T11705] binder: 11702:11705 transaction failed 29201/-28, size 0-0 line 3147 [ 1192.469700][T19475] binder: undelivered TRANSACTION_ERROR: 29201 03:48:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000003000000000000000000000000000000b8d76ee71ffeffffffffffffff0000000000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000000000000df6debf2f47d261d0000000000000000000000000000000000000000000000008d0000000000"], 0x0, 0x0, 0x0}) 03:48:30 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:30 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000005c0)=@tipc=@nameseq={0x1e, 0x2}, 0x80, 0x0}}], 0x226, 0x0) [ 1192.703857][T12089] binder: 11930:12089 transaction failed 29201/-22, size -1770240418236071936--481 line 3147 03:48:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x2, 0xff, 0x5}) r1 = socket$kcm(0xa, 0x522000000003, 0x11) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000080)=0x82) recvmsg$kcm(r1, 0x0, 0xc4f861d14b80ac9f) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8984413869d6e3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) syz_open_procfs(r4, &(0x7f0000000240)='net/mcfilter6\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) 03:48:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x10, 0x0) 03:48:30 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x40) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="2f0300000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000400000002004e22e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x290) getsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000080), &(0x7f0000000100)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x43) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000040)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x3fb}}, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) setxattr$security_smack_transmute(&(0x7f0000000400)='./file0\x00', &(0x7f0000000480)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x1) [ 1192.779250][T19475] binder: undelivered TRANSACTION_ERROR: 29201 03:48:30 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="116348400700000000000000000000000000000000000000030000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000063404000008a450f6f4eec9cb5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 03:48:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONREAD(r0, 0x5437, 0x0) [ 1192.967217][T12146] binder: 12131:12146 got transaction to invalid handle [ 1193.004576][T12146] binder: 12131:12146 transaction failed 29201/-22, size 0-140737488355328 line 2994 03:48:30 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1193.063027][T31387] binder: undelivered TRANSACTION_ERROR: 29201 03:48:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x11, 0x0) 03:48:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='system.advise\x00', &(0x7f0000000080)=""/219, 0xdb) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="b7f2288a91199356265df5cf15dd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = dup(r0) bind$netrom(r1, &(0x7f0000000180)={{0x3, @null, 0x6}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000280)={0x2, 0x100000001, 0x409b, 0x7a, 0x4}) 03:48:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003259297ea043b826e4016b793e6831ca883ba80d0533671e5a75deb3f7035724ad0440175dfb35a42bb4bf8d0614c71a225a9053f122b371"], 0x0, 0x0, 0x0}) 03:48:30 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1193.239226][T12555] binder: 12544:12555 transaction failed 29201/-28, size 0-0 line 3147 [ 1193.272859][T19475] binder: undelivered TRANSACTION_ERROR: 29201 03:48:30 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2000000080003, 0xc) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x1d8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x250) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x9) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xe, 0x800) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000100)={0x2}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00\x00\x00\x00\x02\x00\x00\x00\x00t\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000340], 0x2, 0x0, &(0x7f0000000340)}, 0x78) 03:48:30 executing program 1: socketpair$unix(0x1, 0x20000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f00000000c0)) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:48:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x11d000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:48:30 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYBLOB="71000000a7e661d4b63367c8c0aa4dc18d8317a8b8a86a53aad4ed7cbfd96ed1ffd1b554f31d87840d7ece7868e70edf28670e6d82814f188290e027dae353112a49a0c70499af3513a5540bf1c452fd4c1cabb6bfafcdb88123ed356db08230845e825a2cc8d505d43d9d9681aa32ddacf8ef80b0"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x100000000000000, 0x2, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x3, 0x4) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f}) r5 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x80) sendmsg$key(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x2, 0x17, 0xa3, 0x5, 0x2d, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_spirange={0x2, 0x10, 0x4d4, 0x4d2}, @sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd2b, 0x34ff}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}, @sadb_x_sa2={0x2, 0x13, 0x200, 0x0, 0x0, 0x70bd25, 0x3500}, @sadb_sa={0x2, 0x1, 0x4d4, 0x4, 0x0, 0x2f, 0x3, 0xa0000000}, @sadb_key={0x20, 0x8, 0x790, 0x0, "de34e7ca1bafb257587fbd6a9204ea299d46b8f732aeb682ecbcf423f44762531a1afff72a30bd26277ba62113d0af97d0ae6e537a8804ce430079ac75b1d2bf3db25ae94904260abd58d334d301e05e5fac3d1fac50d8ead79b6557d5544f5e120e28320d260df6a000e88c4508c4901f881d11dac19755cdfa57672da0c0e1e1371021beeb2a46789c7690787b79566b21a193fb525281a8b79dbf99a0840a9e5b5c1701b8c14494158ca9a0d25bbac65fcd322002d3929bc68acad09823f9d28e1ae6b2c9656705a28d6bf7fd25ecf9acacbf13e24cc886a3b7f49562ca3df1d766703cb0b22d0496a296b973e3bc3620"}, @sadb_x_sec_ctx={0x2, 0x18, 0x0, 0x0, 0x6, "7e11d37967f8"}]}, 0x168}}, 0x8000) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000001c0)={0x1ff, 0x0, &(0x7f0000fff000/0x1000)=nil}) [ 1193.406598][T12703] binder: 12696:12703 transaction failed 29201/-28, size 0-0 line 3147 03:48:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x12, 0x0) [ 1193.490696][T31387] binder: undelivered TRANSACTION_ERROR: 29201 03:48:31 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xffb5, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=[0x58, 0x30, 0x20, 0x28, 0x68, 0x0, 0x78, 0x0, 0x18]}, 0xfffffffffffffffa}}], 0xe0, 0x0, 0x0}) 03:48:31 executing program 0: futex(&(0x7f000000cffc)=0x2000000000000004, 0x9, 0x4, 0x0, 0x0, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x48000, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0xd9a, 0xffffffffffffffff}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYBLOB="41000000c50700000072adf4d307f3fae39a9f477d08aa43bd56d885c6330185f8b4056f27e21063026d2580a75a89c67c03b3ba285fd198a6677c041689b234a39a41ec6a"], &(0x7f0000000140)=0x49) futex(&(0x7f000000cffc), 0xa, 0x0, 0x0, 0x0, 0xfffffffffffffffd) [ 1193.681496][T13040] binder: 13030:13040 transaction failed 29201/-28, size 0-0 line 3147 [ 1193.706704][T13040] binder: 13030:13040 ioctl c0306201 20000040 returned -14 03:48:31 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:31 executing program 4: r0 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000380), 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f00000000c0)=0x10000, 0x4) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x40c392f5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ceec29", 0x4}], 0x1}, 0x8005) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000140)) shutdown(0xffffffffffffffff, 0x0) 03:48:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x3ff, 0x5, &(0x7f0000002280)=[{&(0x7f0000000080)="d3f0e4abbcf7e9cde8e0f4a126363ce7065d7d15f55de3d4f6c143175c35813ddaeb487066bb7b07fab6a38fdab45b5f22156bd64d6393cf4ccd5ed45b4bf07f75a3de19d8fac3bfd3ecafb84d8515cc3bc9c93b4472ddcdd99a29ba8da42efb41edced0e8cec2faae6c2e7aeb9fc1f27879acd342b7aad2e5db0b725a2226623b30bc82f18e7455aa2a843f8b1ab539c5ff6bc597fa45eaadf8e296528c11b01f4f49e865a297cb8de140579839bd5e4b72975b3a5622903bf5460903a5388738ddad808e25e926de30f20fe7c0028d754e29bfb92014d93e87c389e063872894", 0xe1, 0x1000}, {&(0x7f0000000180)="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", 0x1000, 0xff}, {&(0x7f0000001180)="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", 0x1000, 0x5}, {&(0x7f0000002180)="ad6a97e8df50d9ad5ddd4aab0a0fa37c8c094bee50cce3", 0x17, 0x100}, {&(0x7f00000021c0)="94f468490fa71c86b85a26d70d76e89e44a88a0ce3cec65cb194dee4c2a9668e114d6f58fb142f4a40ce51b4348b0920f577101f19601e8895166facc6bae9907f50cbf36b0327c1efa1c3cb70ea1df31481e3c022d69fc267fcf8c04282ba11d1dd2ef690013ea4317d37be0e0bad45676144bfb2a16ad3e619d182963763d97864fe5faaf6761a1ad398a9520dd6b6ea22816b939c887694e4f090de1724b63028a6da15b60bb9f663308ec70feb65948e41579378d17b7934a4934944", 0xbe, 0x9}], 0x8000, &(0x7f0000002300)={[{@utf8no='utf8=0'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@uni_xlate='uni_xlate=1'}, {@shortname_mixed='shortname=mixed'}], [{@obj_type={'obj_type', 0x3d, '#'}}]}) r0 = syz_open_dev$vbi(&(0x7f0000002400)='/dev/vbi#\x00', 0x2, 0x2) recvfrom$inet(r0, &(0x7f0000002440)=""/100, 0x64, 0x42, &(0x7f00000024c0)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000002500)={0x6}, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000002540)=0x9, 0x4) io_setup(0x3, &(0x7f0000002580)=0x0) io_getevents(r1, 0x6cf4, 0x1, &(0x7f00000025c0)=[{}], &(0x7f0000002600)={0x0, 0x989680}) write$smack_current(r0, &(0x7f0000002640)='rodir', 0x5) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000002680)={0x0, 0x0, 0x800, 0x20, 0x3, 0xde00, 0x8, 0x9, {0x0, @in6={{0xa, 0x4e21, 0x71d, @local, 0x4}}, 0x0, 0x644a, 0xff, 0x8}}, &(0x7f0000002740)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000002780)={r2, @in6={{0xa, 0x4e22, 0x9d85, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}}, 0x8d1f, 0x2, 0x0, 0xfb, 0x2}, 0x98) write$binfmt_misc(r0, &(0x7f0000002840)={'syz1', "aee4be5c68506faafde8ec639ae3323f7626641c38890849b338253374c0806e02feea09ec2742bcf52735a8320729cdf9ae0444fd7af26f400d1414fb64811ca6f31ded87f8f65a2e14e55a978055441e8147a8fe476bceb5618222ffcd7631205a6495dc017c146d0eb97c32343c876cafa7bcc0be4d5c8fbc33dee559e2c525442cd144b59728621c737e8f8fc7ff7aea8bdf"}, 0x98) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000002940)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x30, r3, 0x200, 0x70bd26, 0x1, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x5b32, @bearer=@l2={'ib', 0x3a, 'bcsh0\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000002a40)={0x3, 0x1000, "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"}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000003a80)={0x3f, 0x9, 0x3, 0x8}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000003b00)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000003bc0)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b40)={0x24, r4, 0x0, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) r5 = accept$inet(r0, &(0x7f0000003c00)={0x2, 0x0, @local}, &(0x7f0000003c40)=0x10) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xc) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000003c80)=0x13f0a9, 0x4) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000003cc0)=@netrom={'nr', 0x0}, 0x10) bind$isdn(r0, &(0x7f0000003d00)={0x22, 0x3, 0x4, 0xd108, 0x101}, 0x6) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000003d40)=0x102080c, 0x4) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000003d80)={0x0, 0x5, 0x3ff, 0x3f, 0x3}) setsockopt$inet_group_source_req(r5, 0x0, 0x2f, &(0x7f0000003dc0)={0x9, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @remote}}}, 0x108) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000003f00)) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000003f40)=0x7, 0x4) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000003f80)={0x7ff, 0xffffffff00000000}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000003fc0), &(0x7f0000004000)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004040)={'team0\x00'}) [ 1193.762654][T31387] binder: undelivered TRANSACTION_ERROR: 29201 03:48:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x13, 0x0) 03:48:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x30, 0x38, &(0x7f0000000340)=[@flat={0x77622a85, 0xa, r1, 0x2}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}], &(0x7f0000000380)=[0x28, 0x0, 0x0, 0x30, 0x40, 0x38, 0x20]}}, @enter_looper, @release={0x40046306, 0x2}, @clear_death={0x400c630f, 0x0, 0x2}, @exit_looper], 0xe4, 0x0, &(0x7f0000000440)="3ae8f827cd3420d9a5506ff72d7d44728ba31d280dac55050a85992a07840d82abdb22978e567ef47a257de190128c74a17cbb4797217dc9d721a7ac73bccd29b40ddb044cbad31451268273c8b7749aa15b54bfc5808e7f5da58e3f341c6081a00e2f70432cb99af5ae55df92e668c075594bdc2df0fcf0874c59f15bc29a4983c05409beecee704b9a4bcfeb8ea8c83af8053c46cf2385ee74738f4926590f0ff930c407a3dcd084088505c77417b914fe47e9a9805ba8da883a9e87cae40dda1c4243ef4489d572944cc6618df73609b1b882cbce97b54d64e2d91b0ffaae2177d8e1"}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xf2d9, 0x60840) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000080)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x6) sendto$x25(r2, &(0x7f0000000180)="d9b4250461fbfb7e4df1d9848608f5697bbb92dcd3f69e0a860881e82e2350e095de2795378e534e0ccc71a267592d3df5aae296f1935065345e7cae4429248488471e1e688b33adf4df532d7dc6dad00c42b717f312705acc00675aa7928425bc2b3b707a21fa0ae6d25c79f4795f26584a0a26cd0c8d8669a54bfee7f766e7cfee6e523a34315312564c809fb366198981ba362e9b9cef9516caa4cf6236bc40175a61aa9b070c880443a3da0c5b832ddf87fd99f0077868837ab5bef89cf53836e5e64631312cfba7f8ab184503fdc3d7100271a752fe352678cfe0cf125f953350579e3845a60e0a5bc8343921b2eb135ab848524dfc", 0xf8, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:48:31 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1800008912, &(0x7f00000000c0)="0adc1f123c12a41d88b070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000044000000000000009500000000000000345ffabf93a2a3330dd39f87a5f62b743ae3d24ce77e62a757a6e70694b5cc7fe97c0ab15f345283412aa38ea4e9384d19c0b1d43f14022983df4b67635d7d277b7de9b0a4d466c2703b6ab91cb5dc077a5cabe37ec66639b79a89a5fd0c2aea513db2f6762a9b3cd771c93a8ff10f8857ccfbb4818b549cd54e4c3a860a1aaad9fdffb4261f6ab84d3c7638126bee20fbc771800d50ef4eeccd11e35c87538a4b239d41ad3f35cfc4fec629e0cc050a59d0597dfb318a8cc0f4dde0925e13e0755f86ae697c123a5abb51"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) [ 1193.974708][T13320] binder: 13272:13320 got transaction to invalid handle [ 1194.033287][T13320] binder: 13272:13320 transaction failed 29201/-22, size 48-56 line 2994 [ 1194.034373][T13393] binder: 13272:13393 transaction failed 29201/-28, size 0-0 line 3147 03:48:31 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:31 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mq_getsetattr(r0, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x6, 0x0, 0x7, 0x3, 0x3}, &(0x7f0000000040)) stat(&(0x7f0000000500)='./bus\x00', &(0x7f0000000540)) 03:48:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x14, 0x0) [ 1194.162795][T13393] binder: 13272:13393 got transaction to invalid handle [ 1194.202622][T13393] binder: 13272:13393 transaction failed 29201/-22, size 48-56 line 2994 03:48:31 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:31 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sessionid\x00') syz_open_dev$audion(&(0x7f0000000780)='/dev/audio#\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000140)=""/27, &(0x7f00000001c0)=0x1b) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x111100, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000600)=""/247) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) lsetxattr$security_ima(0x0, &(0x7f0000000240)='security.ima\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="212106002ad73c4af109287dfb18eb97029aaf0c7503226866997dff11ed8d2859a0a37b445138e04982e6db6bf26823723a77fbd553219d7f545c6e95d84dd1d5b77862b7f270a18de8615353c161e14cd01b14891b45d262af0f7315ad9d55403faeab0b16720d05e7511d7cb0fa0b"], 0x1, 0x2) ioctl$KIOCSOUND(r1, 0x4b2f, 0x284) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000400)="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", 0x200) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f00000008c0)={{0x2, 0x4e21, @empty}, {0x306, @random="63dda2a1b11f"}, 0x40, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gre0\x00'}) sendfile(r3, r4, 0x0, 0x10000) 03:48:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 1194.407125][T19475] binder: undelivered TRANSACTION_ERROR: 29201 03:48:31 executing program 4: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x9, 0x840) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$vsock_dgram(r1, 0x0, 0x0) write$P9_RCREATE(r0, &(0x7f0000000540)={0x18, 0x73, 0x2, {{0x20, 0x3, 0x7}}}, 0x18) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', &(0x7f00000000c0)='bdev\x00'], &(0x7f00000002c0)=[&(0x7f00000001c0)='\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='/dev/audio\x00', &(0x7f0000000280)='/dev/audio\x00'], 0x100) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, &(0x7f000000d000)}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) connect$inet6(r3, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r3, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000440)={0x0, @in={{0x2, 0x0, @local}}}, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) 03:48:31 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:31 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x28000, 0x0) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c, 0x800) r1 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2b, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x4000]}, 0xf}, 0x80, 0x0}, 0x0) 03:48:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x15, 0x0) [ 1194.519115][T14034] binder: 14033:14034 got transaction to invalid handle [ 1194.540582][T19475] binder: undelivered TRANSACTION_ERROR: 29201 [ 1194.560578][ T26] audit: type=1800 audit(2000000912.027:207): pid=14032 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16961 res=0 03:48:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffe, 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r0], 0x133, 0x0, 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x101000) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0xffffffff, 0x9, {"d2ed50927e5fc19ea24e636e81e2696f"}, 0x40, 0x32, 0x81}}}, 0x90) 03:48:32 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1194.698225][ T26] audit: type=1804 audit(2000000912.057:208): pid=14032 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir832457040/syzkaller.U1dLKM/1525/file0" dev="sda1" ino=16961 res=1 [ 1194.898150][ C0] net_ratelimit: 21 callbacks suppressed [ 1194.898159][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1194.909764][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1194.926757][T14281] binder: 14199:14281 unknown command 3 03:48:32 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8060000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1194.951374][T14281] binder: 14199:14281 ioctl c0306201 20000200 returned -22 [ 1194.985533][T14281] binder: 14199:14281 unknown command 6 03:48:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x16, 0x0) [ 1195.008431][T14281] binder: 14199:14281 ioctl c0306201 20000200 returned -22 03:48:32 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:32 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0xfff}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b) listen(r0, 0x0) syz_emit_ethernet(0x4, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRES32], 0x0) [ 1195.218128][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1195.224042][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1195.700573][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1195.707009][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000001100000000ff03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008"], 0x0, 0x0, 0x0}) 03:48:33 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:33 executing program 4: add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f00000002c0)="de0f", 0x2, 0xfffffffffffffffe) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffed8, 0x0) 03:48:33 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) write$P9_RRENAMEAT(r0, &(0x7f00000000c0)={0x7, 0x4b, 0x2}, 0x7) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000080)=0x2) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:48:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c560284ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x39}], 0x1) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f0000000180)=""/157, 0x9d}, {&(0x7f0000000500)=""/4096, 0x100a}, {&(0x7f0000001580)=""/220, 0xdc}], 0x4}}], 0x4, 0x0, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000440)="b683eb4c397962d3e08e3e452f327815e371295db6f5d0be3e8446fc9a47e6af3256010ea1f11201fe87e3b42cc615fb6e3d659e128d00791faff1f962b37cda3627686d078cc81d0d9bf0b9b19a4bb4d59bcca8c39ee16f8c1cdadc2fb17136beebbdd2e993bb41f57568bfaf9a22f87260e3e4860d364246", 0x79, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000340)={r2, 0x3, 0x7}, 0x0, &(0x7f00000016c0)="ca56df97cbe7d96a99cac70ecd1492bfc308b606132e212abb10e71d29bdc3cd7c2841376045becc44d01cbf5c3218f1e79ba5c6eb19408ac4c6788a33e7af6fa068b053638d317c5298564865d68b2bed76e15b0b9e46712f95ce6e1ba707abebe1d33fe94ea6bf91a0db441ebc38786fc1cdc9b08341be6065058287dc9a7bfe91bf8c6135e693a4df606867955abe2fab3d2a7518c3ad9fe1995e6328bc94155bf8bbef46582b92803d7a655c050b2faab0c5a043a3270f4ef8b996d48cf973bf5e5f59fc8da125a2166d1a19c6db0bef4d422b0037087f35671cfe7e2c6334fcac26b84a4059a837e0f6c7008f1299ac9ad71e92ca9c31c2836f54b1f9", &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000280)=0x4) 03:48:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x17, 0x0) 03:48:33 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:33 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:33 executing program 3: r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x101000, 0x140) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(r0, 0x5, 0x1, 0x3) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x40) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0xc00, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x41) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7500000055dbb4625e4981d3ca13ec301d227752f60bff016af1ca8f19b7f26ad0a6d3e9b7581e9b3f9992c0cf8b3ef95de9844843d0931b097946193772c0667cd3e05f1f28ac5b2f1e8e43de85797190cbb68ff8fd1998d09e38cec46b526e3538699262fbdd489f00c7ef04fcc6e26bf4ee14d33ac4a52eec777b0f32e424ea7f5b98331814ec9af160cc56ab996c6df6cfecfd1556575e440d0cef88d4a10cc3711921f58b55de121872384ade6e240278b3900bac3778dc796f56c569"], &(0x7f00000003c0)=0x7d) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e20, 0x7, @remote, 0x3}}, 0x0, 0x1, 0x7f, 0x9, 0x20}, 0x98) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000)=0x81, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000280), 0x4) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000240)={0x3, 0xfffe00000000, 0x92, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) sysfs$3(0x3) [ 1196.258927][T19475] binder: undelivered TRANSACTION_ERROR: 29201 03:48:33 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x80, 0x101, 0x6, 0x2, 0x7, 0x7, 0x7, 0x3}, &(0x7f00000000c0)={0x10001, 0x6, 0xfffffffffffffff7, 0x2, 0xff, 0x510, 0x1ff, 0x4a}, &(0x7f0000000280)={0x101, 0xfffffffffffffffb, 0x0, 0x1000, 0x3, 0x7ff, 0x6, 0x3f}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={0x7}, 0x8}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000380)=0x0) r3 = syz_open_dev$midi(&(0x7f0000000400)='/dev/midi#\x00', 0x3f, 0x100) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001700)='/dev/sequencer\x00', 0x101800, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000001a40)={0x13, 0x4, 0xb, 0x4, 0x7, 0x7, 0x4, 0x74}) getpeername$netrom(r4, &(0x7f0000001a80)={{0x3, @null}, [@null, @rose, @rose, @bcast, @bcast, @rose, @bcast, @default]}, &(0x7f0000001b00)=0x48) r5 = syz_open_dev$media(&(0x7f0000001840)='/dev/media#\x00', 0x6, 0x40) r6 = syz_open_dev$adsp(&(0x7f0000001980)='/dev/adsp#\x00', 0xee, 0x80000) io_submit(r2, 0x7, &(0x7f0000001a00)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f00000003c0)="49f23c265da8a131fab0ce1ebacd1b49dcdf518c038179581e9aaaa84e2155a3d7f845204c4415b9eff6ed9beec31002bfc8", 0x32, 0x7f, 0x0, 0x1, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x2, r1, &(0x7f0000000480)="ec129d32b9940dfbc2b5b9296787b633d01c70fcec0f37e2113b3aaf158455d5b1ac0819c8f9458579448743d454cc0705130241633b0fea7c5a47fdcce18a5b5793d21a6a2b9b278512084995e28d30a64e7ecd7457b3938fad688d2a49e4287fc338941b35f0420c7cf7ffc0c632537bfd5c0e534c1ff77d787aee2305461c407b30b2a3a00d6deab26a988baf1873df3274a4e5df51f6d445086aa11f92ac77dfeaef87f3c9abfd4b7a63c07635ae9269164d633a392ecb7e0e5c137c5fb1e6908ade9ea68da76e20d9f76e5f3bbcaa2ddde50ed5ea61e07dd7040e89d71b3e5152a6b7ccae465708bebd", 0xec, 0x401}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x7ff, r1, &(0x7f00000005c0)="eeefb33ab5de6b715a20ec4a4cb17b6860ee941d69e61931ed062f817fba37ac335398db5fd4fd68d2b73f502d9ae33ca6210acd18bae9ff2d7596aab172a074a78a846102e7a6c460982a5d21ce1550eb29934cfd077880e8bdc2ffcbc74bedf0559e72afe913c9245b1d814744d99eb063aac65cd27f", 0x77, 0x7865, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f0000000680)="732652c7ce497f8d5bc71702638235527c240e3c8c6373c504149c3d4f", 0x1d, 0x3, 0x0, 0x1}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, &(0x7f0000000700)="dbf2ef5c9a6af5bf0ab4c926bc7f72bf605afe5d161068c7067b32a16dc400e25334abcb58de9d52e9cde90239a506508e37b5e399b2b0d85e800c071734119897025b0a82436a9f41398e616b6a5f4d8a82e07ae8d9f9e5888639df66e26be1a81fa53aca9d9337ad83e017c0f004990779cbb8b3b9a0ced2c23c0e6925f0b732fbf038d492d6fdcbe3f12ec9d705a452fbd4b33b499d59b9af0e03a95d282b04b3f605bec5762c75e67b8cca53e337a77e1b29da85deebc515ec620b90f0d7635925e8e5e59b8e67ae5d3a80647280196f32aba4cda0469bbed640ef56c56bf0ad7f37a4a4d174217fa9b6472119344fa92f9795772a0908050767dd8a24aaa2ddd34af9402c9428363522e2d4bcbab666a207d07a9c6964f0941b1d90c47b29027a910a8def53b78d6ffb4c6a107a4514aae07aea47b39f4c082230052314ada1b415957f423ab6fd2699af8654ea90066297c62c7047844f0e79c34be83651980cb795262a4c8c3f52e826bdeb299fd4453be5df6003770e8b8b6c425f8081cfc9a089398b1d59618151865815a4f1e7d95baa2eb3c34717956d9729c69ac2bce1ede52850ccda386a45afdcb0c0076488f36d917cb57da3805ec97075ee05bf39052807fb759677888cd6b21b75386640cbad457dc5ec887c728b6c8e05cd1676ab2c8d8a63456785212edfac64dda0969300c900eff568c48355f785c3fbab7cae627efbdcb95a261cfe6df0b1ee00666151b58d70c6c78f14825aa3950ad4dac95a9748e6e9f14c5c331ff346b17c7e9e9f461a52c67d9283988abaf9e3aa57a50e27e4f96ee73214ce60b9dce3b07eb3c5faf5d5cfcb7110a2ffa42fdd7f63fc01bceb7afc4e75caf8360a489050f622c7fdee30c7bee1c0ad279f3f5d4aa09e1a82314ad16011c5307392eeb736b362523a12ea9d6569998597f0ada74df15b9e14cef4fcd67900d8f677501ca337c9c6df0ed8531418d0281bbe58e0ac9e529100c82a395eba414ecd097c68d077ecbec8d6ce38d286f1b2c76a4d70299e155e834348a9ddb7464a9011e101a1cab1f4c9e64313536b2f7e560bb118d3a5555877f575d571f58ed7382e2c4217d45634416ac1f2a6bd31adef45540a14e84c46ec44f41f23021079f4dabc053d7f7e96fadde4a5bf313bb3f88ae4f430b3224371bb3bd17033d9a5b1be09a21241ec1d3930ecff764f109ef30b5bb9b7fa77f4f18f1d0c04ed53e55fb95b96808733779e264f6b9169925bbdb1344a0ae101b0b751a6be37ba2d2bbda2e553072b1a896136d196da8241cb5388408f6b4b48e29574c8e7c4ff1920d98180b309e4b8880f5b53430a4f3d4cc02dc8e9285accf0f12b9b17a6fc3f8e13445d2d26e78331f2044039c5e92783ae4e8b4b317001264ae5302fb9240c49c76c5c344a84494311478a603e4a4e6f102bd39ee28fafda4596c17c7d991a0c2e171215a0c712e7d42c731955cfbfff4c2633eb7c1cfd5e2fb600397a3293e4c8657dbb4be09591c3b1307c9c958d7c08faa8d37be8ab0b205e224c2ae15f1b5f5d68848bc3b4eb4360b1a496f388d02a75bab51fc1a46b1816ea4725924d7e8fa5fa5b20184b2d816255e59b196fad88f4c42f7049e1cbbf850f41b7ed9cb24f0463b1c8a98148ca0a172350bb52b7e6b7858faaad39416d5ba5b8c9ef51a284306bf00e1f1043d76b449359d4a218c4095f001706e674738958a1b9d548735708be19df4a22cadf22f359f967aa662e52a2a8cdc40206633cd6a14a8a1a9b169c06c1fe94c33b383483959953a9a43a7413a926a6235e12064360da3f2245e6604776d5ac568ee81de9d5954ec135ca87f8bfb3f25913b0ff66d1d4971d8c09c88e046368dac535fdeed3bf6ce55a4e16d6a659603e19d40c5a0e34e2e01e8de9fb4a9d2ddd74f2647276b75960b62611753c29e01b2be1b835229924cac0ff57b8d18a75f6e6d6da089005573f3dc3e4af0e446c5f3872768278e7ac93648845f901afefdfdca9a42ace73f3a1953d33f89364ebecf20305dc88562a600476f05a98d097cb72725a5b1b07d98e45aee0ea22ea861402d2f4774881adb901d2209fdf874b7d859ac3f5e90a4c3105258b53c9fbe0fada1c85e12a142692680813a6aad3e84d643d35d2b0248c566e23562c720c477658b0001b4795b2748325bb281d8ede2e32ba664a4eb0178be372af4970d1a29d47ba833590d2d4ddd57a28b51ea737244b17f0382bbbfb1accdb9414c075658f25ab652da8f7ccb5acc7aa4a202ba3a44f605f6c99598252f0496187deda4d08220bb3e1ef0fd2658fce392615033cc7f05854d28bf1592416e7334334ed87d4259cd61382c3983b08a2419ffaeedafe22eaa3f31e0e75289b5f311975ea5afa003accf054afd30e01f2a5b7835719d72f52b4aa727bdefa8b7a30a5795a7502e4885da281ae55571deaa83c0a3b36b4956527da1362f15b42f6964f0f2869163d0aa905add7a6fe8009883c1b727c28c5e434a832e566de791f8ea250580c2abbbfe2ee9c9f752fda9e8e473a911d8a4dc3f494741b37ca398c85bc40237553a2bc12070324f88ae2eb30c929baf46d7c6aaedd2ef77c3b0b281dd082e3a93e8787ed9182b6d5973168e155135438a0c8592efbc7fca070f021da5471c74f01b756a4c046d87cc7395190d75c8b30dcf03ff488763ed1083016c7f8da075d4f77f0be26a6220fe52ddf7537a79dc84d09238baad3eea8f3891e78e7f95b2cf4d32f45b12700ee93b6845b7cb6a3c7cfed65ad42a7ae0f8a351267e1e1647344b8e887d64496459ffae2320230ef505bd9be90eda7d8ee921b029ab680779a6f260ce7a0c1bff555e488f098fefe0845bfe1347878a0783b3bb3011ca1075f6e2ccbc0bcff5c466b54697a2773e8237f9c151bfef6762dbbddbb89b131c0a6205c423b3d1521d5389d592b64448ba1faed66b2fb124f55fdaf6d3ef9c40ab5ce89024bd8f1548ae4431fcec7a36b300d7cbd5a9eb50f0c43ba879453625acb9150c974759079702496ab4af7e250f582bb1da0f3715d645f3ae89a01a9ff2878977474855b4b1ba68258cce59f122ba8666828eae1a23ddbc0c2f336ad0c2dedf86f5034a19fa455ba346999139c007c54329bde0ba952dfdd180c395604abeadaa0469c5279149f586e397de51d2b649d0dba13c89dbb5c862d2667f0b7c376f8b0d213b14014f7355ca195a55b75bd59c9ff05ae36e890b515a1658259f909808bd289274baf792ee16b8573bade8fc1e0753237dd56d1e5850ff381e9eb0707f9b89cad4bce4ba686f793ec68743c85841c4e9f067c172f33a83b8dada2df04976b5fd2b94dd60738aa5a6c40327bb2bdab7dbe58320404d2c21f1fb095ebcc5eabf63d2b3ee6e249cecee580e51955455de991c744aab01c688b1b57a3983fcd24a31769e8464b6ab2c4bb9d6ca5e24552a37dd78626cf9f294fc84851b32f54f9aba0b6396e44a217068ae5acf546266a1731421094769588db60639eb7d2f9f3e1b787718b316eef69c487e09c2acf29bdda238144b61f661484426ca3545c336135d883e83bfc65cd04b805cd99845aa50159349d16ad449bf0d14f49ec9e7b26059dca9f15109257084a28e66e2dce793737d5e58c95c34ce9e6ff977748b7b9c97d7d51b417873fe3d144c4c698e75f759cdee94e403d770b86d79b486c24de0d955c609f1fcca73a96f261c1390fe3004af5898a08544b62cbaf5f467279aad904c3876d7ef93607432f3201e85da16d6be71ca26bfa008f8ba0415c9083730b6600e103dc81ac16bd5191fef2c937f36d6798b48a6476ce716bf5a72d1d44f707bcca469d67ccbaf955cd708af2afbbacfaf3f6d8f57a615677fdbebb9cfa91a266a740c18d6b2b56e659d472ec643f1be7ac74cb6f9968edff78109f558408f6ca049d82050626b0ead20c7c46150372b444aa2f3212d931a6fe3ceab8fc45a5aeefd280465838f14da47b877c86d0587da7b72149e95cb4340387b5ca20f34cd62e53c512a869154a9ca5325b805684d9037eda7e78f7a6483d7498ab98a089931345f0d6e2d2814331654771d215f626127641854e00339f73ed93c2372fb0c4236bf58dc706415a703fbca5b08730d6a90d7d727a1ff24b372cb9840bed3bb78da299ffe66904c725c678df237a877e2f15ac180e59b99c562869519bf040436ed05fe5d0b601ec1eb352aadc9c2a0bc19c08bd877d4fe5222c1c812fdaf993dc3cc5a7dafa466fcc431ca42dc2d64c17c3a84ca8c2ceee2627f81604ce2862321726902b36d493e2bd6342d25c8f1d99a4c6d1ce4e78641a260628e6cb3ce0f8e6c236bdf88627ed24a702e93e553a25845b5ba7bbd6a8209d6f69340e42e4ae16a78a0e703d505fd3b072a54375918c4ebada97ead6b89ff8d9939158d96c1500e4a78330fd74e1c1ce3dacf2d427a9c18a8bc7b322ca2fcfe06d7670e0953b2209988e99291a0ea1bb0dfa6f049550b82e4277ae05d9d2b9f7756e2d05818ac195bc554c64b611cf1319f9a7cb2505cee0110a6c419f0f91ea57ecb8d7e81e4fe15352a54c1a5d8f384d52e6e5cace7725aa479b666033912cfd84e160b2793f963ec4caac81e70a8abdee9bc216354836c637659b88cb5dc68faf94c3b84ff344546365145fec18f02f097135c016bd7b9d5e9ca2ca3a0fdba73ada195963370c938bc7a445d4a519b5e392c52fd6d1db3d97136f83e6a9c1a1938ca5fc7ae711c686fda2307c9289d3a94ff6ee587a8540f2fc70b561fe28347b9b0e7a2e0f53c00047d5a9c51b3fee96030c1d174432f681b5d7fbb1cb7aca8252a1c4f92907e2c3b801c646b74c673dcfed884c5d6cf3f542ce2ca1c36bdb00474632e916cbd6ac8cf9a27e051577ccf2070900653f0db4fc94a12aaa7bacba833ade6bf5a4c2e48cb073055703bd6ce3dfe95f5fd430538644bf07f0526f7c02ab0835c405edb188f6d6a0ef36dd85b4b70abff6b1105eb715e3aea18f95aa2a524fb9ce471d2f3c2dc14e443cea0a3713f3cdfb0b53ad1c026a88566a8c204ab5a49175a24c535f89c07d8dbab74464e5daf66cf49310dbacc672f1264890dd26a26c9c79b638de823cc7024dee6469d8bcbf2333ba8854ebc85775a98ea1d1b129057f0ab076c78f5272c440fa910bb8a71ef5e0210f79abf0cfcb4425bad3e40504da7befef07ddc42058cd6309d88cc6485485ae9d9a602263b52080767fb39b9ef3e77a6332922dff5136111f76d8d380a4f062c18245989b5898a6d0a65f1c09e40dc33eb1707662f9e8279e8faae49ff5806c760656e042e5c57a2d4d781a0b69f863c97ca05260c3fe4ddf8098fcc164067c9bb761c88f9765a50b8a3642cb54b3065dc26d27b3c1bb893c754f571e99e0528a71dc3d52389b29a3e1203142af4e5ef8fa375ffac0a3bc730514831bb620e9e7bac0bd52a98b3f98a5165f198caab85dbd5d93d1fcae15e452f35beaa262b01bd3664e998d92fd83272127b00477971f9cb4d8e048a4b2ffd791c8e6811c684d1991ca624d6c7ad4aa641cdf2a896ce9b3bf8095e88028b87f02bbd6df1713025f8ac36de1f961efaed407ad5a1a0bab3fcadcb5ed89c9d06c6e0c152334da77d4e7f32b2786b1ac2df007e2d465f1aa972b0ab4da472faaddc477613bdb8e7815ac2141dcc36b7a3f53a30ea7d7442478cc9d978f4c03491bd5c477785ceda597a94216cc9efe9425b381128d3ab3089559e0cda50f3297129336a70b626703", 0x1000, 0x2, 0x0, 0x3, r4}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x5, 0xfff, r1, &(0x7f0000001780)="10f34fafd655cb9d097072a10b346091593f36a2ad2a31c091ec4994b492d6789c35961aef23bc5725b321073c2e4ad5c4fcb57c223d88cd70c7d7da0f581d05b0dfba845b88d3be9a47957a3171bc311105de226f574f9550f1859b52c6bbd05ecbc86b942ae114a360970822515e7b2b9a8295738c1fd4aaa206275ab86c2217bc65d50ffdc2", 0x87, 0xfffffffffffffff8, 0x0, 0x1, r5}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f00000018c0)="73b85ff2c02038c5a9944cddbe756cf8342503f0fc364d2df539664be0d8f72f9c1ab5cea0197367c791b9560c04b65cf4b0cd2fd2ca351a27c659d02356849cd6ea8a7aa91f85901a024e9a0fa0571acfae4e9d3f88d3a620f8132d929a2a927a2b09d2faccdd9a54ccf0e9cdce8f8ec1460a844a03c886e7ec2eff1b7e56c85c9f711a4f1feb8102fcd20748ca113898d95e71b52a87942cb8e35c9d56f6199ee7338c1b57a4294b2d20d11563f93a0c12b900b123", 0xb6, 0x80000000, 0x0, 0x3, r6}]) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b) ioctl(r1, 0x2000000000000000, &(0x7f0000000180)="e9cf962084a5033c8f08086ddeecb1f78abe9c985eeba69d66d2cb3ec15b35c0d875ff480e5f2024113cdd908c9a835d8df4c292969cb4aa8c12a20b2e15013f4dc6111a670655e59fed88a64c268de017739b130a3b918aae3674f6e6aa5dfe0fd69ecbd0202246dc6ac41b6c5b62b5f4e2e0d7308d02dbe93192831af76a372a0d68db3b6d34daac1af7e75b642bde63407e927bb935131083cd287450415da0afbe7812fd05934814d1e9f720a7c646d4e69532257082a8700f6464bc0e2a1905") ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60d8652b00140600fe8000000019000089000d00000000aafe8000006300000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 03:48:33 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:33 executing program 0: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), r1, 0x0, 0x1, 0x4}}, 0x20) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@loopback, @multicast2, 0x1, 0x2, [@empty, @loopback]}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)=0x1200) 03:48:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x18, 0x0) [ 1196.497976][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1196.498000][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1196.503926][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1196.509701][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:48:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1163485a0000000000000000000000000000000000000000030002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000cc032984df6355a7e6d259e3fd8e4f0244a368e5c40792e8d5a0977f32ac5b605b9524a1cd5aa24243d86323095bcf1ad62b5d4e4c2e732252979ae496b1d9d6d4db8e65488dd627f2b04bb17774940ff216b362661498008a5b"], 0x0, 0x0, 0x0}) 03:48:34 executing program 4: socketpair$unix(0x1, 0x80000fffffe, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x2000c) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000002c0)=0x0) process_vm_readv(r2, &(0x7f0000000700)=[{&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/86, 0x56}, {&(0x7f00000004c0)=""/231, 0xe7}, {&(0x7f00000005c0)=""/239, 0xef}, {&(0x7f00000006c0)=""/47, 0x2f}], 0x6, &(0x7f0000000840)=[{&(0x7f0000000780)=""/145, 0x91}], 0x1, 0x0) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000507031dfffd946fa2830020200a0009000102001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x22}], 0x1}, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x224000, 0x0) accept$ax25(r3, &(0x7f0000000200)={{0x3, @null}, [@remote, @remote, @default, @bcast, @rose, @default, @bcast, @bcast]}, &(0x7f0000000280)=0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000180)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x400080, 0x0) 03:48:34 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:34 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1196.726566][T15402] binder: 15277:15402 unknown command 1514693393 [ 1196.758165][T15402] binder: 15277:15402 ioctl c0306201 20000040 returned -22 03:48:34 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f000001d000)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000087000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r3, &(0x7f0000000340), 0xfe44) 03:48:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x19, 0x0) 03:48:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x42000, 0x8) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="04cfd6846780350e7324ee8b3c873501", 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:48:34 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)={[{@session={'session', 0x3d, 0x74}}]}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4000, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x98, 0x107, "013c3926cd434236baa55fd73252da187727ed231b726cc80f0347dd14f08e08", 0x9e4d, 0x4, 0x7b7d, 0xff, 0x80}) 03:48:34 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xa6, 0x20000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f00000000c0)="01a5d5e2b474c50845c5a52d6039868d70d5ec30766b823a65f645234adb84a2cf6284e7a91b3de2370b9d49d759737f14fe8cd92ad24f2cf2c666d85b80b97d30e393bbe842b540f350ed06cc6f6a853cfc8ef8af5eacbf79114c06a6653ed24bedfbb80b650b58f5efe9a0dc12d7efc72d5547509e3340bb0d307f4f8904c2194ff99e4328a7add5c6b1467c0a88f8207674a35b49da16672797a374a0093eb9e1b2c573df037ed23cf8e6ad38950ab6ff99bdccb2ae98071c63c56595eb6b97dd70bc62e45cf232baf0c075719dfeff60f11c5d2ddbcf8198839f65c06e03c0d99d8f920fb9e422", &(0x7f00000001c0)=""/82}, 0x18) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1cc, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd47}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf000000000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xac6e}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x40, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffe01}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa369}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfc1b}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x8000}, 0x81) r2 = socket(0x10, 0x803, 0x0) r3 = add_key$keyring(&(0x7f0000000840)='keyring\x00', &(0x7f0000000880)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r3, &(0x7f00000008c0)=""/4096, 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) fstat(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in=@empty, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) write(r2, &(0x7f0000000080)="220000002100f90600be0000090407010a00001e00003c0000ff040405000c000800", 0x22) 03:48:34 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1197.004649][T15646] binder_transaction: 3 callbacks suppressed [ 1197.004670][T15646] binder: 15639:15646 transaction failed 29201/-28, size 0-0 line 3147 [ 1197.051032][T15762] binder: 15639:15762 transaction failed 29201/-28, size 0-0 line 3147 03:48:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x1a, 0x0) 03:48:34 executing program 0: r0 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) 03:48:34 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r1, r0, 0x80000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 03:48:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffe40, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}) 03:48:34 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x22) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x24}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) open$dir(&(0x7f0000000200)='./file0\x00', 0x486001, 0x20) 03:48:34 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0}) 03:48:34 executing program 0: r0 = gettid() r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xfffffffffffffff7, 0x105002) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0x20, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0xffffffffffffff3c, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x4) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) 03:48:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x1b, 0x0) 03:48:35 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:35 executing program 1: symlink(&(0x7f0000000100)='..', &(0x7f00000001c0)='./file0\x00') syz_init_net_socket$llc(0x1a, 0x3, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) r1 = socket$inet6(0xa, 0x803, 0x3) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x5, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000380)) clock_gettime(0x0, &(0x7f0000000500)) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x34d) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0) setsockopt(r2, 0x0, 0x0, 0x0, 0x144) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) pipe(0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) dup3(r2, r1, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 03:48:35 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = semget(0x3, 0x1, 0x11) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000040)=""/11) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffdf5, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @exit_looper], 0x0, 0x0, 0x0}) 03:48:35 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$FICLONE(r0, 0x40049409, r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c833, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3, 0xfeda) 03:48:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070de39c790642c96358e0930de299c993ae5b33915e34449c71b8775f6fc585ff50e840530b3555dedfe50f3a6a0447ac6aa1aacdf7cba58e14bba39de7dabb5bbd9aea708148331dc29323ba31e46aa5c6eb21a0d4c245c6cfe3b7faf802487562a96a3c8bb11b3e04610071e0dc976494e8aca201fbf17a241a6f1e33d18487f3d65d4204f84c0de055d4368240b33f12b4ede3051fe363041c7fb") r1 = socket$inet(0x10, 0xf, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000000b07031dfffd946f89830020200a0009000100001d85680c1baba20400ff7e28000000110edfffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 03:48:35 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x1f) fchdir(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000300000000000000000000000000007c0000000000000000000000000000000000000000000000000000c8cb00000000000000000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d10cd6dfddb429cce3501bf4c6d840ea29dd8a386b68cc5e1f5c846bcd989600000000000000ffff00"], 0x0, 0x0, 0x0}) 03:48:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000540)='/dev/vcs#\x00', 0x8, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10900, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x2010, r4, 0x100000000) r5 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$input_event(r7, &(0x7f00000002c0)={{}, 0x1, 0x5, 0xffffffffffffffc1}, 0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYRESDEC=r3, @ANYRES32=r0], 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000240)) bind$x25(r6, &(0x7f0000000100)={0x9, @null=' \x00'}, 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000500)='GPL\x00') getsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000300)={@loopback, 0x0}, &(0x7f0000000340)=0x14) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000380)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, r8}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:48:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x1c, 0x0) 03:48:35 executing program 4: socketpair$unix(0x1, 0x4000000000000002, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000b82000)) r4 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x10000, 0x8100) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x200400, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000100)={0x2, r5}) r6 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x800, 0x420000) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001480)={0x0, @loopback}, &(0x7f00000014c0)=0xc) connect$can_bcm(r6, &(0x7f0000001500)={0x1d, r7}, 0xb) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x152}}], 0xffffffff0000002d, 0x0, 0x0) 03:48:35 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1197.943469][T16847] binder: 16816:16847 ioctl 40046205 1f returned -22 [ 1197.970043][T16847] binder: 16816:16847 unknown command 0 [ 1197.981323][T16847] binder: 16816:16847 ioctl c0306201 20000040 returned -22 [ 1198.039681][T16847] binder: 16816:16847 ioctl 40046205 1f returned -22 03:48:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) fsync(r0) 03:48:35 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffffffffffe) 03:48:35 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e0000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:35 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001540)="2e000000110081aee405d10200000e00fa076b000800000000f3ff500befccd77f00000000081c5eda00b0eba06a", 0x2e}], 0x1}, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x10001, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000340)={0x0, 0x102, 0x0, {0x2, 0xffff, 0x80000000, 0x63de}}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000300)={r2, 0x1, &(0x7f00000001c0)=[0x9], &(0x7f0000000200)=[0x7, 0x0, 0x7ff, 0x8], 0x0, 0x6, 0x6e, &(0x7f0000000280)=[0x401, 0x80000000, 0x3ff, 0xcb, 0x98e, 0x8], &(0x7f00000002c0)=[0x40, 0x5, 0x5, 0x1000, 0x7, 0x2, 0x7fffffff, 0x1]}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000100)=r1) 03:48:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x1d, 0x0) 03:48:35 executing program 3: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x101, 0x2000) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000280), 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, 0xffffffffffffff9c, 0x0, 0x5, &(0x7f0000000200)='SEG6\x00', 0xffffffffffffffff}, 0x30) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f00000002c0)=0xfffffffffffffff8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xfffffffffffffc8a, &(0x7f0000000140)='/\x81eF\x00binler#\x00', r2}, 0x30) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000001c0)='\x1b&\x00', r3}, 0xfffffffffffffe6b) syz_open_procfs(r4, &(0x7f00000000c0)='smaps_rollup\x00') 03:48:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) sync_file_range(r1, 0x0, 0x0, 0x4) 03:48:35 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80350000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:36 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:36 executing program 0: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x80, 0x3b200000000, 0x1f, 0x8, 0x20}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={r3, @in={{0x2, 0x4e22, @local}}, 0xee6, 0x9, 0x6, 0x401, 0x80}, &(0x7f0000000080)=0x98) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000300)=0x800) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000002c0)) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x20, 0x20, 0xf29}, 0x20}}, 0x0) 03:48:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x20) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@mpls_getroute={0x20, 0x1a, 0x401, 0x0, 0x0, {}, [@RTA_DST={0x4}]}, 0x20}}, 0x0) 03:48:36 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) fallocate(r1, 0x0, 0x0, 0xc00000) dup2(r0, r0) 03:48:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x90, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x28, &(0x7f0000000140)=[@ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x1, 0x4, 0x8}, @flat={0x77682a85, 0xa, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x2, 0x11}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x38, 0x20]}}], 0x0, 0x0, 0x0}) 03:48:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x1e, 0x0) 03:48:36 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'eql\x00\x00\x00\x05\x00\x00\x10\x00', 0x801}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) fremovexattr(r0, &(0x7f0000000000)=@random={'user.', 'eql\x00\x00\x00\x05\x00\x00\x10\x00'}) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) [ 1198.754175][T17750] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1198.809821][T17761] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 03:48:36 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:36 executing program 4: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x4d, 0x2}, 0x7) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x1}) r1 = socket$inet(0x2, 0xe, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) lookup_dcookie(0x5, 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) accept$packet(r0, &(0x7f0000004f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000005740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003300)=ANY=[@ANYBLOB="00000000000000007b02059739000003"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_emit_ethernet(0xb8, &(0x7f0000000080)={@remote, @broadcast, [], {@llc={0x4, {@snap={0xab, 0x0, "f0", "02bba1", 0x19, "c90179d0f07cc205c363ff411159e1f6007ff54bc6e940a2eaef6a1ebde7f10431400685973214c871a004955458d4cd4c96b21383d64eef312693f92eb886af1c787d7f6bfa736ef66e77baa714ce0ee3ad7096f9387a649f8ea5786a4fcfdcd705022880029c3645745aeae3016adacba02a26ad06f46c2d196745beac439738dd000b59658ec4d88d2e85d181f86093a2f75ea05f71057465a108d051b3f17e20"}}}}}, &(0x7f0000000140)={0x1, 0x3, [0xa18, 0x70a, 0x4fd, 0xff8]}) fchdir(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x420, 0x298, 0x0, 0x298, 0x160, 0x160, 0x388, 0x388, 0x388, 0x388, 0x388, 0x4, &(0x7f00000002c0), {[{{@ip={@loopback, @multicast1, 0xff, 0xffffffff, 'vcan0\x00', 'nr0\x00', {}, {0xff}, 0x29, 0x3, 0x8}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@inet=@iprange={0x68, 'iprange\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4=@empty, @ipv6=@ipv4={[], [], @rand_addr=0x3}, @ipv6=@local, 0x31}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x7, 0x20, 0x0, 0x5fa8ff0d, 0x1, 0x6], 0xa0, 0xffffffff}, {0x100000001, [0x10001, 0x4, 0xfffffffffffffc00, 0x7, 0x2, 0x2], 0x7ff, 0x6}}}}, {{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@state={0x28, 'state\x00', 0x0, {0x2}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x4, 0x8, 0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xddff, 0x5, 0x8}, {0x3, 0x20, 0x6}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x0, 0xffffffff, 'netdevsim0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x21, 0x3, 0x43}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x0, 0x5, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) fcntl$setstatus(r2, 0x4, 0x400) syz_mount_image$erofs(&(0x7f0000000180)='erofs\x00', &(0x7f0000000300)='./file0\x00', 0x80000001, 0x3, &(0x7f0000000b00)=[{&(0x7f0000000480)="1b63af513c837589e0b24511356df762c79c154a41a2748f67c8", 0x1a, 0x4}, {&(0x7f0000000980)="e1283b59c6cc0c4a62e564e1164ee5d70115408dbcc465686e9c78b80bb65f8735716adfc12b6ba04432ce1b0ff467763d175350007329e1838d1b2f097fd28e0628b2fdff2ded7aefe2399ea9d1e5dc88512ee317bb2c43db7e477adf98de906d8d05a69a", 0x65, 0x1}, {&(0x7f0000000a00)="fcd0a62d7333ccc5b0d846bf8620a91a7ef218f4c76cd171d458f90ef15d0408f2f5fb0e4e876ecd9fd6eb3be85dba8975702578eaf7723fdc615e7d79067ccfbe78d6123bb3102740b23a21d79fde5608f6a3199c28ba600bbffc17fe5cd2dd9fa69280579961343a01b488a49257171b9d74ea4358ea025b6d6dd280fb2c9511d95c75e3302b378951b22dd6538d477dbf50d7d83f9657fa68cea83e004bb5c3522e9885d0f0f2945b68fd5b0bdd8c763c0cde73f3204e6bbbddc32c3f64a1e3bcfb51f180efae289c58197e65d754ddd3fb2868aa", 0xd6, 0xff}], 0x8, &(0x7f0000000b80)={[{@acl='acl'}, {@acl='acl'}, {@fault_injection={'fault_injection', 0x3d, 0x3ff}}], [{@obj_user={'obj_user', 0x3d, 'ppp1eth0'}}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000380)="eb3c906d6b66732e666174000204010002000270f7f8ca35fe591eb5e660dc7b6a3cccb3453030ca3d4cd1e4893452dc3fa8df305a1877134cd35513850db4e9a6a7cd1a386197697146e9d4d0fc0fd777cb711933247b8f4071b00e71550b883837fe756495a27afb508684fbb7d5423295b42fde2d39b9a885407b8cd0e4262825282972cadde1c50a3efca62a16b02fe7886eee6398f24548cc5fc06fb6be84ff6e8031276e86571f252bc6fbb60dcd723ae0c1131bd401e4b000000000000000000000", 0xc5}], 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='trusted.overlay.origin\x00', &(0x7f0000000c40)='y\x00', 0x2, 0x65797680bc45b5f) umount2(&(0x7f0000000280)='./file0\x00', 0x0) r3 = gettid() sched_getparam(r3, &(0x7f0000000c80)) 03:48:36 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000040)="3665660fe8afe2ed0f01cf640f350f01d10fc75ae066b9800000c00f326635001000000f3066b9800000c00f326635000400000f300f32832600980dba2000ec", 0x40}], 0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x4040000) getgroups(0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:48:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x21, 0x0) 03:48:36 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:36 executing program 1: r0 = socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000002680)={&(0x7f0000000100)=@rc={0x1f, {0xfff, 0x80000000, 0x3, 0xfffffffffffffff7, 0x3f}, 0x9}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000000200)="ace0a6f890bb8b5ab13e3a57dcc3b10ff465726ea8b59e2d31b49d70f4de53db07f095725988b3d1b8664d8555a85bb4735bc03158b9a8fe1e397384e75e0005d9bd4045d012ece159a74adedeef5e24cc74e9b56fcb84b6f51e700785b72763d01244dca125640f8cd0b7b281b38c6983ebcbbe474c31d42b5f5399b5a7b1", 0x7f}, {&(0x7f0000000280)="6c363c7f121ea1f16df48280cb7589546b88b2171301eaeaaca1c01fbc939c9b14c65075f20209c66520bebb12bc915ef1b96e7bc185b645f3569ac86c3cc17869abc0ce9790ac91f78673f7ab3111b09815a095a48f1551b90d90f3212ee29d5c9f0d70981e9e87b1814d78726faf11a1d139fbbcfff2a7579e2f1734d61a07f04a2270e2961d3266eb9fbea89c32481adddc92a73260835efc8dca725dab94e96ab11fa6ec775ac4a5027d05", 0xad}, {&(0x7f0000000340)="3b7a19c7f9b9767392b428c6dbf797c23abfccb5035191e03f80386a1907c60b28920b54e414261181994de74a6c8fc9c1ac8f3c3a9d26dc151e0d798724f56b7ef27e89c00d8748ab71b9079d9ed6bd3b608dfe00bea7974c09e546e7d7162b0d0914164b2a2f5f0e78657e19bb414a9615222c7a14f0496595726737179e9c5ce4478c74473a3a50a06fa836235f0229ee55b65e7ffe890d2b45f36e632758bc", 0xa1}, {&(0x7f0000000400)="fb434ba498f260a999e7c54f153fee18f971d39fe9f253ad4be5b4ddf1c58dc54ea2b9d9e12e7ef591b6c17af6b3e792e7e02098bac6017bfc74baca758625e0c549a5a260848793da452ba1b006c2589daf3d2cb913aa2e51fe79039751bee6c9512b83f7454a94058b13", 0x6b}, {&(0x7f00000004c0)="3990b60244bc947f89cdf7e8300ba427764d35b6d27696988bdfeac6e86d03b84d96af965261695d5cfff63ed1013769622e6a6c52c44d0afd61558f148bded87b325b7873d5ce011915bc10fa97ee931a35fd1ef71a1b3367e54bc1945771de1c00f7a4d17a3eed67c4a2e5302bff05e1a6e36f336051ea4c99ca0729e279fd0aab9c0117f2edd254fb12ba0e2bc0703b878b89df5122c3d2f7696311948ef9d5c58a9d34b8991b722b1e233b30d8c757021a", 0xb3}, {}, {&(0x7f0000000580)="1040e781c9a3423b7fc757691ffa9fe991", 0x11}, {&(0x7f00000005c0)="b333652ea8179e2514ef548e6db8beed24763654bc7072db9c29d37b32c4ebf6c3b7509b67e8b200f7394a07cc5d339bd6a2a5c1570568d9dc0545bdbd03b49cb5bfd1aff690a8a99c5bc497bda412ef2156c69859e353e838613557347b1c0e024adf4bf4c90f19b15df628ce5ca1d3bb6be989081ae1c616695087029cab305005f89f74ecd2ec058af6c7f40c54d33456bb491e878eff379b549e81ed12ccbce97c3200151eb653138cd4b23031aff2d78f421b430a4c487f5e64d3bec073a8d5f887cab82449c363a7d9f19ae8774a8b4d6f3b4532212b5b0809bacf808e1f9ea20f20efb9fd4331ff998be7606dd246faf4d1170a2dc114b3114928de84ddaeeacfafc70292b9bf69471fb411243da2891b8c271527323f3547fdd1e016aa7928a250ffbc17738f897c15198a3b0b02a66995d8bc51eae98df752b112108d9c306a0ff9bf42bb0a833a4f73c42e9368a66397d6b14164625d4093325fdc65a77ca75ea289f548bce8c93179a6bebf080d38e8a4073cd3c5082479cdd5a56b0c2ad0525a4665be5bb4e48c8eb098c9043f895577308e818414c4bedc3d5f785ccc087ed45a0595cf26338847d67fd0753712e296677f1fb1708bcbf10233e65b39bdad8796ce99537cbfb962d34b5280502ae2422bf917c47cbc9602947f66dea6836c5a3c4d3c5ec2ee557b63d7fffdbaa307c5c1333b3198c33c71178b6dd827a0d7404a6b7eac614cdc5052c1fedab8966bb0dff47f8b136559dac33ce5addd10a71606674af6122db060e274a4a34fee2cee3475b08f02b49b3954bb13d259a8837a353c9294fb9e383a32dbb3d0d7b0326763de3c5af414ec71887862f9974e7b35fbc530b8f1cbf8511f83539cfc3818d07e251f1c381a8d1d706a750fa474219ba5ff761dccd482ad69ab4810cd81d5bb33236a031971e7412b65579ab43519fe21ccea451cd268d1cc5fb63ff425ecd2bc9366cb275aafa556d8caafc12bdcf2b019dd15d93fe76dc4bd9fd0e541d88e4dac37eada7e5b649323514a1fc516b42f30840d8c71c8ead6c8d52128c40bfb5974e890fd44dc674820c17b30bbb8267b1447c7064bf36d200963fc1b43e4e28d93eadd10340b9cc4fa96f661824e8ff9a258266504ff41510ec8321d1855d93732c352ffccfc30ee011247b270dde6ec78a6af298e9bfca627010ec72bc08ea7f65045a644c616bf0f899e9f867735f91c9da5a114c9fe96c51aeb142476915c2e046500ee9cd868c9fd7b3e4d38d4e8f2b5a8984e3318597b6c1b793a4ddded8fe904151e8594bdf647787bdd7b95fdee2dee3d68e5ac70bfcefefe4b0ccb3f852f4785af04c7ae320632e752c876c805504f9458d4566315e1d7e8aad0e32e84dee53a530cbd122fc9c9a0389b1ef40b08ecce670d0cfd5c2890d3753d4643b0b598d14b4e06494e25a22aa7986501ef430ec4858bb2e71896f88e125220a59bc5b852d13cf5a107659cb9c8cb7ab127e6679dca97dee8167ae72143c57a891167d4e2fb0793c1b8ed6eb6897392267490854154485f08eeffcdebba359f1a27a93f736500b38714ff29ae9f6c0bfa25a2b292829518d7bde942340a36572978a7b10afbee8d3a7b73f7fcbc3a7df9a6241692b14f7f4d0c6c4c6a6b3c6d4a9981b75d348788d36d4ec6c4fdb482198024e4a24d59b87071c71e28ae44de73394922032ada6d24d2b8654d7a8008906f3e20127e01244b01ce036bff23479be721896a227644c0d825854c094575e3a5a1aab9bc0075695a40974a76f3cf415f0f225db6a8387155f7dcc6ed735e132df6d16b3a1c1b65ff8e1ac8177955f968bb6b69742ae28ab1c857246a04023a82b19ff73a3e00b240d74ade92571927e811c1e6f92e2b02396099ac37f8f5ab0d1ff346abe5dd5c97d91533c285cd060f058dca1dbc9080c9692f88a4e0b1b362efb08a66d320bdea101a6d9381f99ee503b3e79e1f5a136eb44bc4839930fa819e0cb6093d409b03ae9010519572afbcf924e38ee23d815f541fbc485228e5f049ab45f9302eafd47b16f2858c5b796ac5cb29696418c7f91066a5a0e33dfa10dfeb36cd2870333ebecd89c40bdc3695d53f0faf5769ed487c0d51a4d40b395090bad89e3acfc02df49ec099e63205cca9b7c93f51bd6cb0d2bb74c60bf0be6f4d4c8b436318f74053f627d2b8b2e442757c816f02ca4d6c32756c918d415a49b750c33dcb8df76b89b001f44e33861867ebf204f851307c0978827ab04b2430d5e028f3052c882aca340eea7e3ba560a6f13e95b22f2c813904bccb2886bd4a1ec91356cfa3a917c2f842dac4864c791a4181c65c74282387cae2380e3220854ca07d7f7c08708d55d58e8afd234161568108bd9dfef88872641a83e4bce640423a782beeea2b802d40daf2e76c508f2fbc1045adb843affe2ab55e9086811c1c584dbe823bd6b13c4570dbf70db6a2c2eae6245a63eba736bb89c44204835bac68f05e2fa4765a95e7788e111ea4bb08edee5f260d3c0ff4b89b741c00b229b04c0422f7c12f33cffb69b9a47e2a0891517765b187ebafa5a070a8da4921236388fa82934dcb1c709d7490d829297cd2217239828b661cf1d5b9476a32d828c321a8f27a61ab701354ee764af2ab34523296d02b76817f069021814892699b32112b5ab0182fba9b021c362021ee78b5873e3e385a55716ee66246dcfe08fd18127cc0c70fb5006e655c3a51351b3246329aacaa7f42d127020d877fa83060559d2ded9af995d29ea527a051ebcbebce0c5735bc6fb495b0b5e4bba49bce3f3fb922e3666aa254c96bbd37582e6c85cf03f66d1895aa8afc01c80a0bf28f55af78f42464f5679938460d1e37f1c17c7f8ff6d29cb004ca7a522fcbb6f70eed664ee71f8ed6e2b725e63d28d0956a78f5dab5683bbfbb3f9a749b4cf69f8f09f3c81e9fd5e4c6aa7d2f647c8511dff762723752ec81964829c241499c127ab936aabfad0943b95abab16fa0796ffe82df8d61fab0e6127e2c881af9660862f981dd76f9e823b7d4752e62da342dd4de17b4812d25fe84612f0893a9777b6ba6c879c509cc2fc5df2270dbb17a631770e90b167411f78bbe78f0e00d857666f0126e269fd832a90c0636ec8bc22509d7529332df1cc67acfd65a714f270e36e9b5e26227d96586768df28fa841f114e980c17f7f588f8e2a1faca3cc6978b4b8264d8273758922ff608b8bc62d4d54e5d6b73591235d7ed9fe52caf1db1d3203b6f8bbe5bdc831310a5445163706863eaa769494d7d185e0e1da44ceaf52b186d1439838a41170f7840a50935aad4151f4daed7803c18cfc6506f4a680086c8b5f52d066f762db2b2fa250526741cd82a7250ae6ba4552ad1356268ba02c99afcee4b058bbe01ae1799541bf779111f44af8422781d3d35c75e5d63d24555038661237157bf01af5fea4996bd3a1f73ec83bb34894324cb7b4dcb746e4538cdb9292fe90d5bd689e1366662a0031aab823a93f511659b2b09d27b8341e2bc13ce97deee3f74c8116d1f29091711686eb71f3209a812ed7f55df0396ca74aee2dfbfd81478e0d8ffc907ce6f50285abfbebc0fa2df2b75b4a016d120b6e5eaea98304a5cf8bb82f1c7f25f31bdda60901100e2d7755715de2e7ef10e9b10645c5f8cc5afaff7a264f4c9f119cfc1bd7818ac8b0b1cd4f9b6df84d155c85e902f1c9e8fe516e6a5bc44372252b984284ec1b55256d17fc2d567e5e6d0749762f33d08e4499bc9dfd7793517ff6200aa48e89844deb17771fb45615e2385f069a04bc6998180c487e508cd9615b4e034cb2aa9e652396113944b73fed357d4d5a2de987e8bc8b4e8d0768247c31b5e2d56c69f38caf77e83c94262e5fcd33622a2b969aa32875cd2e27deff02ec62f20ad9f06aab14e27cadb01e659c080cdcbc4f6536fcedca470df96539a2b4d0bfbad8391171933e19cc07ec70896c6b6875bd6a115fd25f9cc46180edf9d5307836003db6e3c29605880576f1751a2a1390bfe3723607dddbe8ebd5769851dac6efc686784cb3898da445fbf06b7b15b1d4fdce0d3c263bf04efbf9841343aad9ced8a8fe7921afec4459170d630049cb453be5d63be235492e38aac375a50dd0b4d9aa64231c6b427edf52d81f2e49d29176d122bcf2fc886ea4bfa7a83ce5a0588edfa9e19bda9944e3578180e263bb8eab047b045c86723d68e6089255764bcf0252f36ea302ddfba05e8faf1d5d4f91a350194b488f91c9b62a68eed75e44567423d9c124fc492aa30db43d2642b22b70eb277f2604fd72ab55b7d06faa031a858a187e911f16ffc2d61d7f86075c9b4d6a37a24751a7b8df6e539b8a9d16209967a963762c114c618938221701f2b41f7e2c99db0e171c59f80782e631b1ff01b2040db835b5d146db0ee33f9cc9f3ebc408bfdac0188935c1e1e56d00c0acc0bec83a2fde963a50690c8f82a2588352dd4dce05dade08c47f0a2941a752cc564a134e9054922b1527baac26ab5396ada6055f22969191ca7e64751c4920531c3e82d3894198f666f1d5032d25e7922177ddfb5005355d88557cac1925e8a7a9012ae81c58b4c8bcc7530fdccba57fa091978d2b40ff558ff1dd85d02802dd1a279e0463bfaf4620cb0da04ddef94913ddbcf1ce6c7a99b67c6f108b298f64d50f504b16383e412aeb43ed4ebc0531030c73d40ae0ac1e68e6524e3568dcc80440f7e6192f8e3cdf0ece21ceecc741b6330ad1d9435a392a618b24850a0bcba48a29407c58bbc83abe95108fc3ed006437aff1d80043af36807ec3b3ff56a12dfc369cfef48d2076a54b4e51d6767e16d11d9b9acba2f7ba3e63e2c0fbd859c108c010650a62e47fb5f52553543711b0c8801a2b6c3c7d008bbf0c87ed9b1a1d25f2b8e8af3bd68cbbeae08acd1d1e22297aa80f798f94f0eb0518ad07f4c03a20f1ffaa3c4a8f7496b97cf5e46a238c803d0c1d6586ec737f3cf81dac807f2a04b4b3f86dbfdea867110bcfa2ba78af3ce49001ec2d5306c7734985ee368828bcbf57cc67b15df038fd527446b83a695113add18976a628327d98639a8c0784f77b16d6e7db4d7cf79670ac85fa80191d8c3f76abf9446647fca57f12433c658ff52fce226efd46df9eb16737357cb6cc09504579ca671df28f05ba93de728b7cb64111efff0685540004ca0f9ba40c649f7deea5ac6d8fca40d5eb67f60fe6c03594c8ab170480f3607be3b2aff7d7eea29c1e7c27bcdd8738db56045338c4b4d63850e03d83590f6fffa850e186de25e4cc79013970986ea058e04b7adedceb63a986a5b4dffdfd7b88ba068b469d88eef6da88450e0f7fbffa2348b1c06d9fcece60b0909c142e2c63a470422d252f63d64a8aff8a5d0ddc2d54f0f5d6b731106dd199e39445dbcba16f6d8057ff05b80f5d01c43ab36de416775ced623c933a30068651326e7c415a6409192c981b85a657d63d6a3f597d6698af6314a8b722f0ff25f21a1073e74983785c56192181c39c48bc257ab6f029dbf69c0b8b0717208883bbf55261e0dec1bfc5e17fff51c021bd0d67edd8a3366da6d89fe5044bb8ad7ce18b7b5deb0fc1b3a9ad43f1920ed723e542650c18e685ef7d5481012e1ef5d945627b7298c79f4405b87074a6ae3894907403d7d222fffff20e8314c2e2c00722af16e3bdf22e57ca90affa87fd74299d6e1e61df3b83935f4c4f5e9853013c6dc5c304a4134f5b5a6189eeb9fa3a9d2e9127d43bb350408b5f5317e84c8685618c45", 0x1000}, {&(0x7f00000015c0)="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", 0x1000}], 0x9}, 0x810) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x7fffef55]}, 0x4}, 0x80, &(0x7f0000000340), 0x1b, &(0x7f0000000180)}, 0x0) 03:48:36 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88640000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x7, 0x30, 0x86, 0x7}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r1, 0x2, 0x2}, &(0x7f0000000240)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000280)={'filter\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x60, 0x3, 0x7, "33142d7ef5a3f005b62266ed844d5077", "3dbd9b2028003510081b4e5caf16d978c610ea16056d4d76281a77a354df4404b4d3460e3a894a18b47224e8b64690d5f41f7fe0f05abc6fafcf4eaffd599f89f013ce86b5b2658c75bfbd"}, 0x60, 0x2) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff}) 03:48:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x2}], 0x18, 0x8000}], 0x1, 0x0) 03:48:36 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:37 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:37 executing program 3: sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x0) io_setup(0x1080000000000003, &(0x7f0000000100)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000d83f60)=[{}, {}], 0x0) r1 = memfd_create(&(0x7f0000000140)=':+lo#\x00`vo\xdc.\a8\xddA\xc9~\'\x06\xed\xd6\xb4\xb2!\x82\x16\xa1\xc5\b\xf7\xf3_\x9dy\\\xb6\xe3b\x02\xdc\x87\xaed\xa8\xd0 X\xd8\xff\x19\teP0\xe1?6\a\xb1\xa7\xdd \x94D\xfe\xd0\x16\x7f\xc2\xce\x93\xf8i', 0x0) io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000240)={0x7, 0x0, 0xff, 'queue1\x00', 0xffffffff00000001}) io_submit(r0, 0x1, &(0x7f0000000740)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 03:48:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x22, 0x0) 03:48:37 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000640)="0a5c2d023c12") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bind$bt_hci(r1, &(0x7f0000000040), 0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x8400, 0x0) fchmodat(r3, 0x0, 0x0) getxattr(0x0, &(0x7f0000000340)=@known='security.capability\x00', &(0x7f0000000380)=""/88, 0x58) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x2, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x8, 0x8, 0x0, 0xfffffffffffffcd1, 0x800, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x7f, 0x7fffffff, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x200, 0x0, 0x0, 0x401, 0x0, @perf_config_ext={0x9, 0x7}, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x4, 0x0, 0x7f}, 0x0, 0x0, r3, 0x0) mkdir(&(0x7f00000009c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="66643dff6228d7ec9940f08d4b5184c77ba634bbaaad7dd4f46ec92b641ca0eccf477d81cce96b1776dff4447032823b39b9aaf508be9227863d19e83c3df9ff07000000000000a059057915bc491f2096b6a9783676c003fd175dab3784a7", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, &(0x7f0000001000), 0x1000) umount2(&(0x7f00000004c0)='./file0\x00', 0x3) 03:48:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8, &(0x7f0000000280)="0adc1f023c123f3188a070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0xb, 0x4, 0xfffffffffffffffc, 0x0, 0x7d0974d3}) ioctl$int_in(r1, 0x800000c0045006, &(0x7f00000004c0)=0x100000035) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000004c0)=0x0) sched_setaffinity(r2, 0xffffffffffffffd1, &(0x7f00000000c0)=0x40000000000005) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000b60000/0x4000)=nil) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x7000) shmat(r3, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmdt(r5) clone(0x0, 0x0, 0x0, 0x0, 0x0) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) setgid(r6) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) inotify_add_watch(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20) fsetxattr$security_evm(r1, &(0x7f0000000200)='security.evm\x00', &(0x7f0000000480)=@sha1={0x1, "ff04d18c25564647592d485f6e3abd563af9bbc9"}, 0x8, 0x0) iopl(0x9) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r4) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e20, @multicast1}}) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000000500)=""/171) read$FUSE(r1, &(0x7f0000000500), 0x1000) 03:48:37 executing program 0: getpgid(0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000100)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r3 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r3, 0x7, &(0x7f0000027000)={0x1}) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000400)={'syzkaller1\x00', 0x8c5}) personality(0x5000007) r4 = syz_open_procfs(r0, &(0x7f0000000580)='mounts\x00') mkdir(0x0, 0x0) pipe2(0x0, 0x3) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000006c0)=""/42) setxattr$trusted_overlay_nlink(&(0x7f0000000980)='./file0/../file0\x00', &(0x7f00000009c0)='trusted.overlay.nlink\x00', &(0x7f0000000a00)={'U-', 0xfffffffffffffff7}, 0x28, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f0000000500)=[{{&(0x7f00000002c0)=@ipx, 0x80, &(0x7f0000000180)=[{&(0x7f0000000340)=""/154, 0x9a}], 0x1, &(0x7f0000000800)=""/205, 0xcd}, 0x8}], 0x1, 0x20, &(0x7f0000000900)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6174000000000000bd82bf22b84a00000000000000000000000000000000007d0000017d5759ec4fd691164f10ea6ce05be5f0df474fec439efc436b65d8ca4447cdfa779027659510eb86680363871304243a575efa56fe319e18027d79fbe7b3e410b80952a19fbcc1f991dbbd5245db7a2e890298445083dd680f823a3dc4667b36550495d8b2834615a13c518f776c000000000000000000000000000080"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) statx(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x102, &(0x7f0000000a40)) mount$bpf(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000740)='bpf\x00', 0x4000, 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') read$eventfd(r4, &(0x7f0000000080), 0xff97) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x4, &(0x7f00000000c0)) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[], 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) 03:48:37 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89060000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:37 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89ffffff]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x23, 0x0) 03:48:37 executing program 4: socket(0x0, 0x84000a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000e37000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000261000/0x4000)=nil, &(0x7f0000463000/0x1000)=nil, &(0x7f00009a8000/0x3000)=nil, &(0x7f0000c0d000/0x3000)=nil, &(0x7f00009a9000/0x4000)=nil, &(0x7f000085a000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ce0000/0x2000)=nil, &(0x7f0000d09000/0x2000)=nil, &(0x7f0000000000)="de", 0x1}, 0x68) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x9d) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = syz_open_dev$adsp(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in=@multicast1, @in6=@remote}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f00000000c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001d80)={{{@in6, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000001e80)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000021c0)={'caif0\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00004e7000)={0x2, 0x2a7, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000400)='cpu&0&&!\n\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7\"\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') 03:48:37 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:37 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @remote}}, 0x1e) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40000, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x3ff}}, 0x0) bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x8, 0x100, 0xd7, 0x1, 0x7}, 0x401}, 0xa) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x8, @broadcast=0xffffaf80}}, 0x1e) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000100)) 03:48:37 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f3188b070") setsockopt$inet6_tcp_int(r0, 0x6, 0x3d, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x9, 0x410000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000180)={0x6, 0x103, 0x4, {0x3, 0xff, 0x100000000, 0x5}}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000040)={0x6, 0x8001, 0x8, 0x104}) recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) 03:48:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x24, 0x0) 03:48:37 executing program 4: mkdir(&(0x7f0000001000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f0000000040)='\x01') readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/140, 0x8c) setxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'L+', 0x2}, 0x28, 0x1) [ 1200.658123][ C1] net_ratelimit: 18 callbacks suppressed [ 1200.658132][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1200.669733][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1200.680871][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1200.687329][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1200.694259][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1200.700681][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:38 executing program 1: setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x1ff, 0x4) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x5) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x810005, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000001c0)=0xc) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080)={0x7ff}, 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002bc0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f00000001c0)}], 0x1}], 0x1, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 03:48:38 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x0, 0x80800) recvfrom$inet6(r3, 0x0, 0x0, 0x12142, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000cc0)="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", &(0x7f0000000000)="7dd4ba2d5328aebf468bbc767a5f9ad69457", 0x3}, 0x20) sendfile(r1, r2, 0x0, 0x20000102000007) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x5, 0x70, 0x38000000000, 0x9, 0x7, 0x9, 0x0, 0x4, 0x10004, 0xc, 0x100000000, 0x401, 0x78, 0x0, 0x80000001, 0xfff, 0xffffffffffffffff, 0x1, 0x72f8, 0x5, 0x4f3, 0x4, 0x0, 0x5, 0x6, 0x2, 0x3, 0xffffffffffffffda, 0x100000000000, 0x10001, 0x3, 0x6, 0x7, 0x1, 0x26, 0x2, 0x8, 0x1, 0x0, 0x10000, 0x2, @perf_config_ext={0x1b72, 0xfff}, 0x1100, 0x0, 0x8, 0x1, 0x101, 0x8, 0x7}) 03:48:38 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdd86]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl(r0, 0xffffffffffffffb6, &(0x7f00000000c0)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8080, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r4 = accept$alg(r3, 0x0, 0x0) getsockname$netrom(r2, &(0x7f0000000040)={{0x3, @netrom}, [@null, @null, @remote, @default, @netrom, @rose, @null, @default]}, &(0x7f0000000140)=0x48) sendto(r4, &(0x7f0000000100)="dd2507fa1925816f46ae26b81dfe513a71", 0x11, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/124, 0x7c}], 0x1}}], 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r5, 0x306, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x3ff}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xff}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xff, 0xfbf, 0x7, 0x1]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x10000, 0x8, 0x6, 0xfffffffffffffff7, 0x100000001]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40800) 03:48:38 executing program 4: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/udp6\x00') getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000300)=0x9, &(0x7f00000003c0)=0x4) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000340)='./bus\x00', 0x141045, 0x100000000004) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0032f44821b53c5ccb1dbe5f50e5dac80300000000000000001c3adde7963209aa0000004e2311b5302ff902bf40e2ce65000000084000800000000000c2da73c2cfd4007de44890a8744f3a1e51ceed0c46ce2f4f51"], 0x56) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000380)={0x2a, 0x29, 0x1, {0x1, [{{0xc, 0x4, 0x8}, 0x5, 0x17aa, 0x7, './file0'}]}}, 0x2a) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$VT_DISALLOCATE(r1, 0x5608) capset(&(0x7f00000000c0)={0x20080522, r3}, &(0x7f0000000100)={0x2, 0x400, 0x9, 0x0, 0x6, 0xfc3e}) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) 03:48:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x25, 0x0) 03:48:38 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet6(r1, 0x0, 0x0, 0x20040880, &(0x7f0000000040)={0xa, 0x4004e22, 0x0, @loopback}, 0x1c) 03:48:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x26, 0x0) 03:48:38 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x20, 0x3, 0x208, 0x7, 0xb70, 0xffffffff80000001, 0x581c, 0x80, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r1, 0x6, 0x30, 0x7, 0x9}, &(0x7f0000000180)=0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x10e, 0xa, 0x0, &(0x7f00000001c0)) 03:48:38 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000480)={'syz_tun\x00', 0x0, 0x499}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = fcntl$getown(r3, 0x9) move_pages(r4, 0x0, 0x0, &(0x7f0000000380)=[0x1, 0x4, 0x4, 0x24000000], &(0x7f0000000440)=[0x0], 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000400)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x20000000000, @empty, 0x7fff}}}, 0x30) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x4e2, 0xfffffffffffffd47) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, &(0x7f0000001900)=0xf2) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000002d40)={0x0, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000640)=ANY=[], 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r5}, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) close(r3) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000006c40)=ANY=[@ANYBLOB="9c008100c9552c7cc01d7f1a503806c0d644f5758db26fb7b2c469dd13d3619685442ed36c4bc5a0be46d1ece308d2911c59abfc153487945d"], 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) readahead(r3, 0x5, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000580)={0xa, 0x0, [{0x2, 0x9, 0x7fffffff, 0xfffffffffffffffd, 0x7ff}, {0xc0000001, 0xa64e, 0x405, 0x5, 0x1}, {0x4, 0x401, 0x3, 0x1f, 0x80000000}, {0xc0000001, 0xfaa2, 0x5, 0x8b38}, {0x0, 0x6, 0xa13, 0x4, 0xe5}, {0x80000007, 0xa5, 0x5ac, 0x0, 0x6}, {0x80000019, 0x40, 0x4, 0x5, 0x4}, {0xc0000008, 0x20, 0xffff, 0x9, 0x800000000000000}, {0xc0000007, 0x200, 0x2, 0x4, 0x3}, {0x80000000, 0xd70f, 0x8, 0x7}]}) [ 1201.137971][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1201.143868][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:38 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff89]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1201.182328][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:48:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) r2 = gettid() stat(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000002380)='/proc/self/attr/exec\x00', 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000002600)=[{&(0x7f0000000000)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000000c0)="401ae24a5580dc8c839ac8b5d643cdd19e58ada97263719a43b849f1ef2d874e6ab450f7f433d40e8b9397ed8536e9ecfe7bdae1c404fa95cddd3b8fe72e5e422a434ba800145b4f5c6b4de480af28c0f40172afa09ede65a70ddf9527f265e59775a537639cebfd7fb7dad0a0d512ff1682a2600ba5b46a41af2a21c388b732faceda67828539c2672f1623fa0a23da03311ec9f45aa7973772d0169dcea728bf9ae9ffc3122f330476e194d69653", 0xaf}, {&(0x7f0000000180)="559e6744ea270e1aee87e23ec623aa1b8e13dafe334f08bc488bfd4c484cbb98c5e2a99568ee3646339144bda3efe46e53096990dc7a32fffe79ba39c7a039", 0x3a4}, {&(0x7f00000001c0)="21ba770c6a2abbf574dca39a7eaa46e026da8b9b67d7b499274751db4bbb2a5a2b5f3fa6317d98612ae0be969734f0bd71a3f6e3296800312ec3bee4eacc989c9f845aecccfcbe07ef3c6a1fab49dac38e83e1f015a7bf7233b81bde416fae7d16310937bf3a2a8d7a0a13b093677d25eaafd8a2886c70ea7dd95ef335acb04392adfb2cb6ece084249d47d44fbb708e921dadb034dab5501f4ff0a4d68e7ee868b996d8a90417d411412573516ea77bec513ba94a5a4a7590e57cca2c6fb5350701708b2aca7d92936a81c851609708c470f1afda7bfc347b81", 0xda}], 0x3, 0x0, 0x0, 0x80}, {&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000380)="b1c1f99b63412d54a1c9abddc58e5b37665f94baa3f298c251f45c96b9c0fe27ee5e02264d9fbb4b45d562d65aafe67c1c9794778820bfa37bcfd77e75f608c8ad1f0e499dda73c7d52cce783e32dde2b5b7bd3f5dbffe688d28dac324a10a0e828fa27af09db7e42a6c85b9556a2f05050235e49d7d3685a6675cf924b904fdf3bd8cd188ef01d047dcb1094010f0885b4a1c5ad15e60170427", 0x9a}, {&(0x7f0000000440)="a4a57767bc87bf4ed965bb0e8a454f2a9d35928cb27a8d6f6a9c7f7e911be721367efcc308f243f6e8988439011a74c31d471acab7e3b62af07168f6ca143fd1a619d1f2feef42049b1d67a56a974af4c1a3ad79da325e059cc0bc32b311bfe72251f0369ff79ee8c1c000ef250c171d76c9d74249f96c6befdffbfcc98946c6c4516e679a64", 0x86}, {&(0x7f0000000500)="c92e16bd2f9cec57274212166d1d15d582fa11687f7d656d89e4af6b9f51bf141e0becc78b7043579f9d319b56547d2e1f306ac5113dcb47", 0x35}], 0x3, &(0x7f0000000580)}, {&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000640)="87c4ea2fff36900a91a0690c9936a57ed782b317237fe4633d99ef0a6aea19e18fdd73e6f9fd82937e3e73855b038d24d6e812954123432ad15389847e55c9a2262d358f29ed2bb9737dc7224de29d549a5cd38a969f4db006fbc82c6e8363a397e99481f2e907f7f36d405027146d4bc6ea00c1f01538c7cd1eb5db2389c0bbaf79ba53bb8253c05b2a0f0d1456bc10acd68a", 0x93}], 0x1, &(0x7f0000000880)=[@rights={0x20, 0x1, 0x1, [r1, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r5}, @rights={0x28, 0x1, 0x1, [r0, r0, r1, r0, r1]}], 0x68}, {&(0x7f0000000900)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000980)="66751e3d3d17b5df6914d3c63745c0f2515f2a372f96ab83c0fa16a3d6cc277e02cc52e98daed69acb2c8dc51a321c26b12488b6476df0315669ea9b44dfe6b2ada12518f22d58da214dae00290e2b4792834ce38ce5ddb1ef0e5d56b119d6df374a3b7ed1445a6c1a4cb0", 0x6b}, {&(0x7f0000000a00)="4b31c6b974ce79213539f30eace78bf959f330bba96265a0846744bcf655f8439a9d406d93cc511c6f54ab7f49f2d592e272624110c7", 0x36}, {&(0x7f0000000a40)="2c72728f928665968d9f8455dd03b58845ce46f4c9e4f0f015e072d5b77f77b1d53aa2c7beacd6bdcd4e137a5340e44e420c0340d73b9806b22dd3f6a2be442849768f8d06c79f16cebe51cd35c9caa696719e47290351d7a295726620f685db0683b722c25c5d9ec0a1066cbd26fed8b6ce8f21ebe3ae0f98349a5897a31f76a77f8a835d6a9b", 0x87}, {&(0x7f0000000b00)="9c315d85c57704b0885b2ab172595f38c891a5cb1defea43bfe96701b268cb62194177d7064b64c6e9d81e4480aec9792edaa161bb040e1cb41f9b22f9b4449e6634f8bca8be919c48ad22ca35f911b755b341035f32c8c1b7f9dbe7c18a6384d124b6fb9b45023fc6700e797828fddada5d9e373c3550e389f330ecd31476f0a1b59523143bab025b8424d3aaa9c05ef30dd95b597e2b6bfc7b83f3d11ba9895e3af7056115066f967652554b246ed349dca6c1c348f2daf698c1c9259ffda69a1346c9d2b27310608f4ef7ddd7de9cdc07a858528a6245ea589ae486a598fdbf8274354d", 0xe5}, {&(0x7f0000000c00)="5a42c2012ce8a948b14f6873e4d1dadc31069caa7c112bab1f2fac4d849f3b1f467f7c5a66667073d86160e6b490abb48f97eb5ea58ef192fab97abf156ef3fc463524b4d11dcf4081577f8e8de6b57999af10640473ff28a46509370d3ec5083257f5674977b711f150c1a7924389be2a0dc854e65bab36400bfbaff4908932ab533ebbcd743705aae917e353766750edc7991ca4c0bb8126bee98314ed245f41dfa549c3b34bc12c1f86da7d8056f8b308", 0xb2}, {&(0x7f0000000cc0)="dc6f7ad3c186fb9092713917e3067c4cc44c6532c09f9789c959c366ec6e96", 0x1f}, {&(0x7f0000000d00)="dc67162ec33017f37224e96e53ab97023fb66224f551ff25e69ff216b38d6a7762f1ba0a5ee09858a83ab43d8ad59b850bd37701ebe7227b8e7a19ee98bff936bdc2048f4dc226dede1c084234b02f3effa1c2edf176cd15caac4d471b703525c2400d2a2a", 0x65}], 0x7, 0x0, 0x0, 0x20000000}, {&(0x7f0000000e00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000000e80)="1e0891815292bfd6ad3e7d7d6743b5449a8492bf749ca79a813b0828aeb4be4f8c8fc19185df5d54424fd6871e97f4121a54be3aad459474c7e5d7189edfd3491b1354f12498d7504721c11e2fb73c50290c0b1aca6d39e95bc820a4882209d97edc029efe0752b2f524db2f990f1d9ea6d5d2f0543194c52d14c5e62e59542933f3cac806b0491d8ae9bb3bdd8c0820337465e7beedc33f39054d6af881fb7c6554d541682187a3f44c", 0xaa}, {&(0x7f0000000f40)="fd02816bc3c6c15c4dc96b6fcb1664dc0b045424bea70ea67f25e445cb7d6201ed921204cc6e3abc2dcd809969c65395b4", 0x31}, {&(0x7f0000000f80)="ddd267d3aed5d813e88bc0a3e9de755afb4424f34ed202cae9657db4f091eca3959e21e2ce46e4e66d51fd4086ce4bede00abe6afbda702615b2624f4120e64b362f0ed09f48c7c92e898dc8e9d405cf09e928f8f65335b5a2358a18ca4b83a905b264c99fd88f2d41a5ed8791db197e3fc8260ff3d8", 0x76}, {&(0x7f0000001000)="b04e04e431d6ff3a71108dca96dd4f65002de34d2b3c3074444c16b6194303b7cb6e7222ce47ac6e29b84c0067d4d129c4b976b88b007c71af983d3eb6f307a1cc0fb144dcf5e7cd910aa77a6eeafe228862571de03c5b0a9e99f5b3e3b4c37a2603b987f5b589261ee69dccc79c2cf6c6a7f64e451c382b3af4d3f3e458a4e463062b5bb1f9ff73625d2321093496c82cf66b882725bde5317efed6ed8b3a37deddbfc9cf7d6870aed18f6bb1c3bcd54846150d99cba1e02073bd68d91a5ce7593820bc1449", 0xc6}, {&(0x7f0000001100)="c9b8a0b89d75b66274892d1f3cef8d6be03d0f9fe989b61fff5bddb4805317245a5e1db99343dfcdc3d61a14463c4443e8adee04d1aade404009783cfa2210c11ab8cec9859725441792ba29cb5b92f9e5ad35641718578eaee2a29db7cbf205c92b740a5b92d93eea056634e89b6ba9d7fee0742fbaa94262", 0x79}, {&(0x7f0000001180)="a713d163d330148efd15c8bffcc7ee940602f3e85b78e163c9b21fc7108461f65f195ea99ca04766d8d99eaabf13d6269b8b5b1673183191f5b1f2dcf5014b78780f02f341a51d116e4160204193337ce56d655a214ae7614239e432247866048c7a9326999f867ae2d7c0710fdac14a3a412f310b1f58d6208fd33924521961be8949eec7f2e24c1ee5d94a5b26b3cf1915d31636f7852152063b09f7298a019619c1f53f8e13e7b2d21576c3e839530e7b983c18a9301f837da85c81b46707b7dcdb6525b7f3d2ea3ffcdc81c7d8c429db2dce2b16933ff09b49879358b2a074028ba1c985f5fc2d46a2e45698b6a86dc0b51afec07eaac0fec86456b551eadeee4ecf7377d670a2706096c9f3746480e6dbf772c6096d35c3c517c3e0f8c59440730376260fbeb22eb24cab5eaf9d26d45daabf52ba8b6990a50c1ce2e21dd20ab41463747f06621e75ac53ad8c4bf5eabe9a317f5b11180f0e6fd1856f2963b3ff6f029cb9d16065c2468a4259a36097182c1c4d823a3d5cfec42a96cf77d3615f15cfd7e6f40216567a3073973599e9c43dc2bad63af00348e076b6d7acce8c7830395800b9b71a3232758050b0bf7b4b3ff3157c9f22eab0f2368cb8b7bb7e2a6acb835af4dc58c5ee728f4d33a898fc4e228e910d2ed29934fd3edc21290554f787cccf30b4a6febe10c178ef90026d6bdfd924df86e465a140334c37fc84e510781b7912ed9fcb8c3a71ca98272231377c617ba81a81b1a1a0412f6f8791a8f6b041908f045b07dcaa7d09c420263958b0ab8a27d70abc612f4efb676918da27d5335d151e43cf90128317cbb93db48c1244e9aec00b60d7459daf345fc64d92cb450e5826e0ce0a36bf1a762c579b5be8e3ff83847f2dd2cbec38b9bcbe40b5cd64b35b14db07bed800bd6b022f77d32e0069dba6f5f34b7b7bec10459cdc06e2dfcb447c50238973aa32bc1a33e69a7b20ba43f39c4d57aadc84dd2a52a2e4df7a8f5e77e35bbfccf8d6f3f8ebb0368923597b83af91ea408bf00bbdf186c44104dab0f3071df45bb00df537fc1b8bee0ced2236f0aff6e79bc30f0952f7acfaf2c0d6b19b5a288a79865ab394c0feb9a83bfc8f95fc4d40a2788274028857ef703466e8165d33687806584ab460d30c4380802a4de29b355d1e7ec6acc703dda5a8b86d79ef12f9e5f669281f33d8e854de1d14e7a72545636df5b9080d2703e9b48b1f21a229cbba022f1a3bbebf58d4b3441bebf792eb2f84aeb69f5a1281f7a2b2b137ccd8317a895f8d1a68ff0887ef1debb9e823a1ba1e8f76b744da47ad07ccf91ba146f908c7e1fb04370e853df0e3548ac0f50fe2d4966f19a2e93635f21aa8b5e2d799037fe574437fbf3262b4ccbb75a785569c70aa5458017f0e6f185c92da2ac15ed8c08af4812f497e183fcbb33be793ab325cdb81b02d55e3efc6a53c69222576384b828b5492ebc27691e3c0618e91b5423042d9defe8c82149c175555846edc8ed5201a7150aae5807d6238814b5a714499305e9face7a0dc743527290cf35cae4caf803417a6dc01842e9cd21a2f46451cf2ee0e2fabf36166cbbde073e29710fb9418eb3f89897f91cf0dd1c2426bfb2989c1c2326e01e964b79f23c7a210f4f3a5d5eff80bbd0b1e79bc6e98fb272ce2f37767423e33659c0e60ba49faa7b885d8cc2a44571e305cc8d75af3e6e4a83c26a848960253949616c42395f6b42a5900ed0b748bcc36b87699d688adc4d1bc3ba3b4f94c23e6bec9a8c3348086130773dacc2b2f80774bbf518525a63c4ae90627d18712284a5cbb1cd7c55b3edeef760e684aa9769e32b9418ac0cc01fb1676d52e39726551d508c61b215a898b36292d8a1487afdb8f20c6e63fc5facd999212a13592afc030706a5676a60b7f3ad02c792a9af38dfeab25d71ff48f20be550278e111999dd836caf7fba5a9cca0d087ae0de9542e5ef661ba2db4840f927097a0432efabde579e66b052aba7154733e21963eb2816a8f0582bffdff2f72ba519df3d6b166c38bf3ac8191e01d960b12ab402a921183b1f508e08f5e14ae3fe0da524841d3bc7ce97a83bea0e7d757626708efd706d8b202bcb6802639d90fa0481df5826ee86aae66aeb9284d304a560cb401d31203aa8290e6d53aa5a37e2a1fa773dc874345daf2cc1eae042ce40a5edf0d50192db146dcccd53e12755f8fb15181de68b8db6f246259d080e08ab954ed6bd51a1e917e6ea178f7fa368b812e0a22f7c83822faf0a79e9ebb588e1442eab4aaef8ce3ac52e922d9675abb805acf0e8ab9333b1447fc952ddaa249a99463a3882a8098985888b0e8d90e7aae853b8ffef046b34be5290a425930ace1e84b29af77201efb31c6776f54a1b213ea08361b27b691b811751cab4bdff3ee6943d0d83695605e0edcc7d7fd1084194256348bf9dd409168ea789f59a9c72b2063dcc7d2a2ca4eabbdeebaca71981a94d509d93bbe77d5ca5ec77419dfaeff9853db01a1e8a5d84661d6e60b41a8b2984ae76770216465cb8b8d8ec07d70a86f76c6a4394f1b9fced9b1c6eb2ad52da16033a1e630f2d4dbd381ff9713636b043c1eb797df52b1f7d2262b8dbc833fb2a1105293e3c654b3ee278cff6d1157ad5d8a9a428789a72096e4e887c17f609b5413fe07aba8bb72ad2800c9de6924cb0445acbc7375c5d514fd9043517877e307c8f55e3347b3b9b3123c1e033c04c20deb6b8d110d998bab23d8dbec434e177afae9dfe88b7471d8d1f6a925ce2b3e85fcc419d2dc68d705043c69a0e16bd07add6db06c5f5759b3859478ce9833272baa63e9ef3efabf1d6e8731c940686e4f5e9aad4c883553d677600e3eafbab1d3888b43cbc3f994c75ef6e7d3304bf26e0542c52cdc5159d842f47c165353f2c2ddf9ea21166c465be9a23dff5e4afbb7b89960b53896238d79989e438d3c3690383a799832af8b5bf9bad8a6b3ab88fabf8da0018eb860b0fb745cd71290f3b47423553e65573b8929cd2f7d9830fe213a12dd88627c743f45e8156cccde40a9a42c2cb8f1858747eb3b76286e1b764de3ae6598e29a282ee57e70cd0bcd644edce314efb2b55531ab0c73a9856a0fe504b3a3b00bfd412a49de316a008538cb24e976c395dd5e93b1395065a629fa4c0fb6f754e724656d33dfdfb34a76ce730207ee4804b8e00a9b5fa3f27c1d6eb6299ba99d3b2423ca5fc8b8deab28b397fed5bacb47b9fbca45cc02c0519ac2e7eeaf42d583d56fb173a9d6dbc2998fc2463bd7258bea2d21af3f04003095aa264ed6d72bb37f56befa434b052a7eaed87f8a3b2a04e45312474409375e21123f6973f8f16dfc0d52d0139987a54cff64fb607546d9d419369606b5048aabdadb1ce544baa331e3c918e94a9f2607a7c5c57362f927315525063113ea996e3e734b8a5c1e8dcd590847824ed993725894047a8eb74ad96c4e5a723bf40cbe6e74a070c6db4465a47cbdaa79840132c8997f473b2d572c942613d0a0b0ca9cd94bc92b951e7e078b86947b17ba89712d40f9cc296d1abc3863fe7631572a2d7d9769603b35fcbe6cf347ba62dff73f2a5921b7adb636c7cf47a23bb4fb2cc2a2ae81ddbe453fb992cdc1eff1d1eb8f20bfab08821e3e5bdb74eddc4ab74692146c30f7a7377de59eb3b5280e9c3457c1558938c61526729cc5452b0d8c6d99cd0c722cd7c36057bacb725582b9f10ff49acbad3fbceb02c36b48b8e7cad398bb04a6c18d519833ac5c2a131c09587c6eb8d506075a27ea8ccc6b55e8a8e921bf5f5e26299b8f4bbecfbda475a027cffe77aec4228fcd182853c3202902851c6c1722a57b1c70ab8a67c3b64a4e850072e298f6ae2c3280eecd49ed2711b4005303ac5dcf9eaacc6bda0e283c6d8e0a457d78f5e486a4054f77c10ba385d500be10ee5e650c0742eb1ee16f433c248f7c597a7e50edeb51ef17ffba64e74a06242e0dc567b8b478f11825d3a5b580658dc798f7a053239e4d4406125498fae6dc3075a35c6a42a3c80e54cc90952e150616741e3facef5def3912581a8abaa20debf133d50139493cfb8dfd0ab8b42130cbe22cf81e7d5c22ff977515d354b4f6e24a0d82c2925ab437151f93a964635b023f7de6183cc6545c9c2f134d9f02a3bc8eac32bad97ea88710b75b132797f93eea99512d7fe25d0513c7dcd3c1390f68eba7b6908bdb6af9665ca7cf4f8480687898eb55f08ae1206e78bad4f95fdb8ec8dcb1525d154906b6948c4d195cc519770e56f7cffff1710c2213d6dbcd7e9008d5137153fd0e96f910e437f72d95c38a7c15afe6739145911c6450fa93041dca4159955290ceadc1793e651a13a0a37648f2bfe4499e04e9c684705159b056f22d161e5baf24e2bf1dccde092726d5fd9f1077267b06c7848524bac3abad7077af543c6a5c5036f4753712c9e4fc2fa29ee90bc90890df3642f9377b56cfb2a9a07237d80f29e3ef894601637474a2eacd2cc11e6ecfa11360d7da3c78cf8cf9e7b463fdda790984aacc47a461582df455c1582d7643eeb21d43c8acf4a36c6bc15db18539aed05b9580cee2b6d4db162a63a1934f47b3b14e277b670a89272905e983889de60c338a8213516718b095cf37d83deae2b55c9f3d756fd8bb233fa0a9e6428dcfaf1681c33aa6da452c552a64e18a7c51d1b6231369546445b7690698865a70db54fbdb6be9506d759c14786d8b15405d189ae98bf3656e164d0046e79d8b5024ad2d2633137b97d7294cd7b4ba24aa26e6ed63a2a2dec838153363ac17ba1299e836c8c249493f0527eec89c3f8d5a7350f1585c8219ed1309f40a579e84bb21b6b3dcf7799c081e68a949f496d525542ff6432141e83fa5ea4547376f64e67c236ea4f505f0428f44aa3993a4c1ed148b629f3486eab24c4960c957fba26a71d1ecbdd6f7e9ddc0869863e0db0da83945457169d483d8991ee898ecf6fc47865cd245f78bdec30dc9a40f1e264adcfa823c47d82215f424a75cc88a1156e571f26db7b3640d6916a6bd90ce29c9a093e376f2548574b64230d30cbbf0bcf576b82e5ef262eed5ccbd4f555b89103c9149ccb6b064492bfb3e78c5cbcba15f4714ac2737a44f2a878d5b573eb69d7dc130cf41fc0fe1f928dffe604907b8334120f7d19a9ad0748cc2924912928b4b572a059a19bcdc4d5dcf69475defcf5b0835c92fbd7695b9918a52e7c93ce722c00a7d374c49d34d5f1095c0684f45fa07134dc3222b690f14a28956bf5deb6aae01a9935eb8b19db307f3fe75fd001224080099b1fe6be6e2efe74ad520043349a813e6f4514eb98f69260b9bb8ea378c28cf8c72cc49f77b84eb15590a64cbe99abcaa203304ae4f06b059731b00c3e67f2c088f7d836d2118fc1e20b78799d42410b0805f59b1d581671a4253627770ef78f7c1363b4891585a37ad4f4003a8280655d95a6d77fcf5c339d9e327f649c5d44fc901cc61dc910db09e08b68415a4b3ea9da67d0b4ec72e053d80446c2cd7b2927ba3e926267e0a6241d3840904f8430a3beefe152bf5c82ad06d02669f530670836a2a52ea7148d6d373302d74a21e552323e5ab0691d03984558c0bcfed30b14bc8e0aa76ace8497a8dfa6be0f476f06501f4a1244805356d796f8552e4ca6bdca8f8b6c5a1cf903e0358746215605d1ccbeb7ff0d6f93fe85adb25e9fd850b5f915a6c2139b31aa171dd3f67826bf1cd5b0ceee1c1cc2384bef1e1ef583eb2af107694f2fa3f44fe3509144f481e618f7a30", 0x1000}, {&(0x7f0000002180)="e25319c221f96bc1e2e7a86a3d1a376ee547f550fb9bbdb660e2cc440fd4677af1472eaa97c7607b6dfee1b71d7a40a105e15f23c02179850dac71dff6f008385997c1f4ee2776825c674faa1094b20b58fc2e0721d74fa3ca0618ef592c56fa8ac653fec8fac23256356d2ac3cbd37b4b23b4e0aa94af6c09b7d5cc962690633713", 0x82}, {&(0x7f0000002240)}, {&(0x7f0000002280)="ca55fa724e6c3962e90eef21d24d3c9f2e2dc02cc1088a740c315133c03b8bd8c6", 0x21}], 0x9, &(0x7f00000023c0)=[@cred={0x20, 0x1, 0x2, r2, r4, r5}, @rights={0x30, 0x1, 0x1, [r1, r0, r1, r1, r0, r0, r6, r0]}], 0x50, 0x1}, {&(0x7f0000002440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000025c0)=[{&(0x7f00000024c0)="f8b542fe472d1c4fe2d05ffb6012bf9fccb8741ef66ba27ea7d738f723cc845e7a80ffe08887c38c42d2ae153c8b59528f4b52937680621d258e32e6656d81f1fa79fc5fe6a7a1a58d9c29f44d180904577a4f488ec24c8733dcc7a85ce51519259a50917f91c6c89a8b3d5338eb84b132381593027123c888308fdaa2c0c096b42407dbd6f35983bbd3b8a12d72b79e13d51b57f9e81cf50b67fc777e9c346768278f338dff25ee32aad1aa52e88694d74d05d63dc533cee202ff894ba1762ce16286cb5f641ab6c8024e520ce0c7ce05bda0af3bd302c8826842b95d8c0fda7b421907db4c", 0x3a4f18da26944dcc}], 0x1, 0x0, 0x0, 0x4080}], 0x6, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@abs={0x1, 0x0, 0x4e20}, 0xfffffffffffffd5c) close(r0) 03:48:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x80, 0x0) sendto$inet(r0, &(0x7f0000000100)="82bbb62aa521e1212896ed4c8febadf155e16bb9734759b3eebfd8f0d8d1b0c0b485d5cb721cde625b2b0fa81491a5ee6e25087c6cef94f5fa24706dfd30926f21009e164290390a5d315f3f6bf915f3754f97fc9ec5158369224c8743247ba9345bca3dad7f77068a41899b69faeb2c15c64f4568d762029d99ce9b6f820bff7317b17b4b25a542264e6a6422542177c26a8b4d4aa6ca27d8acd6a40c2c024382d9018de74e9f5a65a7a923a4bad170d7be93a7ead90d2925546140ab56613d4a8c5b3241fa56d140fe4c1282be9b93bcd222a0fa6e5e7e03e5ab3d64", 0xdd, 0x44000, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0xd1df}, 0x10) r1 = request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='/dev/mixer\x00', 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r1, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r0, 0x0, 0xb, &(0x7f0000000340)='/dev/mixer\x00'}, 0x30) getpriority(0x1, r2) r4 = socket$inet(0x2, 0x3, 0x9) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000000)=0x26, 0x4) lsetxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='trusted.overlay.origin\x00', &(0x7f0000000500)='\x00', 0x1, 0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10) ioctl$VT_RELDISP(r0, 0x5605) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f00000003c0)={{0x32, @loopback, 0x4e24, 0x0, 'sh\x00', 0x10, 0xffffffffffffbf34, 0x1a}, {@loopback, 0x4e21, 0x10001, 0x4, 0x6}}, 0x44) recvmmsg(r4, &(0x7f00000004c0)=[{{&(0x7f0000000040)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000480)}}], 0x1, 0x22, 0x0) 03:48:38 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x27, 0x0) 03:48:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="c489410af3dc9fc7a10ca037ac2339f35edf0c5c0ee2c70465621644b54a0e962ae4d389e37050fae2b4245b15fb888c91817a2f1dd956638ae58260e69cf2bdc1d95aefe97e28458e28ffa25e2b0cc7da11e107ad81c2fd1c2433ab3d90bad0a69f587bb94d3c97eeaf8429bc398d13d039e2477eab93a4725e3e72b31b4739e4b406e2ff06b91f430cab6bd70e44b6225dc4f1d24b322ff82c939cc777ed7f4ded77e88b5055a75dc2406edf38e6d42f5af58047ef280aff8840a109e9129e1f4619b08ff8529e102d72a893ee5c0c4c24b31535973d072a186c7788f5dfbc704eabc624d5329d0a6991ee94f7337d8b1d991e3715a9"], 0x1) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) [ 1201.457993][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:48:39 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x543, 0x0, 0x8847], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:39 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) 03:48:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x12, &(0x7f000059dffc), &(0x7f0000000240)=0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xb) 03:48:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}}], 0x28, 0x0) 03:48:39 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) accept(r0, &(0x7f0000000080)=@tipc, &(0x7f0000000000)=0x46) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r2, &(0x7f00000017c0), 0x1a1, 0x93e) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000100)={0x94b, 0x100000000, 0x7, 0x7, 0x3}) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x50) [ 1206.098027][ C0] net_ratelimit: 24 callbacks suppressed [ 1206.103723][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.109496][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1206.898060][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.898102][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1206.903997][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1206.909778][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.921163][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1207.378019][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1207.383844][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1207.699403][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1211.538787][ C0] net_ratelimit: 20 callbacks suppressed [ 1211.544515][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1211.550352][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1211.858049][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1211.863914][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1212.338075][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1212.343999][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1213.138050][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1213.138092][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1213.144005][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1213.149811][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1217.298007][ C1] net_ratelimit: 18 callbacks suppressed [ 1217.298014][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1217.308040][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1217.309623][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1217.315392][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1217.327011][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1217.332922][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1217.778015][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1217.783953][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1218.098054][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1218.104227][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1222.738043][ C0] net_ratelimit: 24 callbacks suppressed [ 1222.738049][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1222.750041][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1223.538026][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1223.538048][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1223.544215][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1223.549965][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1223.561467][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1223.567292][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1224.018030][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1224.023840][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1228.178628][ C0] net_ratelimit: 22 callbacks suppressed [ 1228.184354][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1228.190214][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1228.498038][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1228.504011][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1228.978063][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1228.983904][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1229.778003][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1229.778023][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1229.784123][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1229.790256][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1233.938011][ C1] net_ratelimit: 20 callbacks suppressed [ 1233.939512][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1233.943710][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1233.949515][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1233.955232][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1233.961095][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1233.972962][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1234.418036][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1234.423911][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1234.738024][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1234.743955][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1239.378037][ C0] net_ratelimit: 24 callbacks suppressed [ 1239.383767][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1239.389709][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1240.178015][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1240.183836][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1240.188027][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1240.195322][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1240.201295][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1240.207053][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1240.658010][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1240.663806][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1244.818655][ C0] net_ratelimit: 22 callbacks suppressed [ 1244.818662][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1244.830180][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1245.137986][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1245.143942][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1245.618014][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1245.623886][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1246.418013][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1246.418058][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1246.423887][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1246.429646][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1250.578043][ C1] net_ratelimit: 19 callbacks suppressed [ 1250.578073][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1250.583772][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1250.589544][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1250.595242][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1250.601026][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1250.612394][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1251.058000][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1251.063792][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1251.378117][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1251.384257][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1256.018003][ C0] net_ratelimit: 23 callbacks suppressed [ 1256.018009][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1256.029500][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1256.817999][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1256.823849][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1256.828141][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1256.829735][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1256.835360][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1256.841077][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1257.298003][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1257.303830][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1261.458947][ C0] net_ratelimit: 21 callbacks suppressed [ 1261.458958][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1261.470586][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1261.778022][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1261.783923][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1262.258058][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1262.264033][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1263.058006][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1263.058014][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1263.058064][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1263.063912][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1267.218006][ C1] net_ratelimit: 20 callbacks suppressed [ 1267.218013][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1267.218314][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1267.223803][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1267.229568][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1267.247214][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1267.253133][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1267.698037][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1267.703960][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1268.018043][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1268.024536][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1272.658039][ C0] net_ratelimit: 24 callbacks suppressed [ 1272.663891][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1272.669722][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1273.458006][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1273.458027][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1273.463854][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1273.469654][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1273.481208][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1273.487000][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1273.938030][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1273.943838][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1278.097997][ C0] net_ratelimit: 22 callbacks suppressed [ 1278.098004][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1278.109563][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1278.418026][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1278.423905][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1278.898022][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1278.904146][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1279.698009][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1279.698041][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1279.703953][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1279.709733][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1283.858044][ C0] net_ratelimit: 20 callbacks suppressed [ 1283.858050][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1283.858067][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1283.863792][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1283.869582][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1283.875561][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1283.892945][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1284.338016][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1284.343897][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1284.658020][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1284.664519][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1289.298027][ C0] net_ratelimit: 23 callbacks suppressed [ 1289.298033][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1289.309544][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1290.098024][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1290.098042][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1290.103862][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1290.109682][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1290.115475][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1290.128584][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1290.578054][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1290.583877][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1294.739279][ C0] net_ratelimit: 22 callbacks suppressed [ 1294.739285][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1294.751625][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1295.058016][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.063905][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1295.538063][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.544926][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1296.338007][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1296.338015][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1296.338064][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1296.343861][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1300.498024][ C1] net_ratelimit: 20 callbacks suppressed [ 1300.498460][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1300.503747][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1300.509618][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1300.515398][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1300.521201][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1300.532725][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1300.978037][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1300.984042][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1301.298025][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1301.303883][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1305.938061][ C0] net_ratelimit: 24 callbacks suppressed [ 1305.938070][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1305.949682][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1306.738012][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.738018][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.738061][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1306.744040][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1306.749840][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.768275][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1307.218027][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1307.223918][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1311.378032][ C0] net_ratelimit: 20 callbacks suppressed [ 1311.378039][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1311.389988][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1311.698005][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1311.704977][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1312.178045][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1312.183853][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1312.978007][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1312.978015][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1312.978060][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1312.983886][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1317.138010][ C1] net_ratelimit: 20 callbacks suppressed [ 1317.138035][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1317.143703][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1317.149937][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1317.155566][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1317.162659][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1317.174048][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1317.618040][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1317.623888][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1317.938025][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1317.943852][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1322.578071][ C0] net_ratelimit: 24 callbacks suppressed [ 1322.578077][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1322.589714][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1323.378021][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1323.378031][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1323.378075][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1323.383865][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1323.389870][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1323.407998][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1323.858026][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1323.863971][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1328.019088][ C0] net_ratelimit: 22 callbacks suppressed [ 1328.019094][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1328.030681][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1328.338012][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1328.344315][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1328.818036][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1328.823857][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1329.618013][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1329.618033][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1329.623921][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1329.630207][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1333.778072][ C1] net_ratelimit: 20 callbacks suppressed [ 1333.778305][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1333.783892][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1333.789693][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1333.795577][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1333.801328][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1333.812812][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1334.258023][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1334.264101][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1334.578038][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1334.583859][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1339.218043][ C0] net_ratelimit: 24 callbacks suppressed [ 1339.218050][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1339.230860][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1340.018018][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1340.018025][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1340.018070][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1340.023916][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1340.030325][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1340.047480][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1340.498009][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1340.504469][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1344.658032][ C0] net_ratelimit: 22 callbacks suppressed [ 1344.658039][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1344.670251][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1344.978028][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1344.983859][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1345.458024][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1345.464712][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1346.257992][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1346.258010][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1346.263824][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1346.269590][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1346.578163][ T1042] INFO: task udevd:7906 blocked for more than 143 seconds. [ 1346.585634][ T1042] Not tainted 5.1.0-rc1+ #34 [ 1346.591205][ T1042] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1346.600185][ T1042] udevd D27032 7906 3876 0x00000000 [ 1346.606873][ T1042] Call Trace: [ 1346.610684][ T1042] __schedule+0x817/0x1cc0 [ 1346.615588][ T1042] ? __sched_text_start+0x8/0x8 [ 1346.620604][ T1042] ? rwsem_down_read_failed+0x1db/0x420 [ 1346.626262][ T1042] ? _raw_spin_unlock_irq+0x28/0x90 [ 1346.631713][ T1042] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1346.637124][ T1042] schedule+0x92/0x180 [ 1346.641402][ T1042] rwsem_down_read_failed+0x213/0x420 [ 1346.646897][ T1042] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 1346.653977][ T1042] ? rcuwait_wake_up+0x11d/0x230 [ 1346.659141][ T1042] ? lock_downgrade+0x880/0x880 [ 1346.664296][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1346.670848][ T1042] call_rwsem_down_read_failed+0x18/0x30 [ 1346.676661][ T1042] __percpu_down_read+0x8d/0xf0 [ 1346.682339][ T1042] uprobe_start_dup_mmap+0xbf/0xe0 [ 1346.687608][ T1042] copy_process.part.0+0x2b94/0x7980 [ 1346.693420][ T1042] ? __lock_acquire+0x548/0x3fb0 [ 1346.698715][ T1042] ? __lock_acquire+0x548/0x3fb0 [ 1346.704001][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1346.710619][ T1042] ? __lock_acquire+0x548/0x3fb0 [ 1346.715693][ T1042] ? __cleanup_sighand+0x60/0x60 [ 1346.720916][ T1042] ? find_held_lock+0x35/0x130 [ 1346.725817][ T1042] ? lock_downgrade+0x880/0x880 [ 1346.730848][ T1042] _do_fork+0x257/0xfd0 [ 1346.735126][ T1042] ? fork_idle+0x1d0/0x1d0 [ 1346.739924][ T1042] ? fd_install+0x4d/0x60 [ 1346.744362][ T1042] ? do_pipe2+0x9a/0x160 [ 1346.748740][ T1042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1346.754423][ T1042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1346.760024][ T1042] ? do_syscall_64+0x26/0x610 [ 1346.764796][ T1042] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1346.771185][ T1042] ? do_syscall_64+0x26/0x610 [ 1346.775964][ T1042] __x64_sys_clone+0xbf/0x150 [ 1346.780790][ T1042] do_syscall_64+0x103/0x610 [ 1346.785464][ T1042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1346.791605][ T1042] RIP: 0033:0x7ff03d0a5f46 [ 1346.796107][ T1042] Code: Bad RIP value. [ 1346.800584][ T1042] RSP: 002b:00007fffc69371a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1346.809786][ T1042] RAX: ffffffffffffffda RBX: 00007fffc69371a0 RCX: 00007ff03d0a5f46 [ 1346.818014][ T1042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1346.826140][ T1042] RBP: 00007fffc6937200 R08: 0000000000001ee2 R09: 0000000000001ee2 [ 1346.834507][ T1042] R10: 00007ff03d9c2a70 R11: 0000000000000246 R12: 0000000000000000 [ 1346.842772][ T1042] R13: 00007fffc69371c0 R14: 0000000000000005 R15: 0000000000000005 [ 1346.851217][ T1042] INFO: task udevd:7907 blocked for more than 143 seconds. [ 1346.858780][ T1042] Not tainted 5.1.0-rc1+ #34 [ 1346.864228][ T1042] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1346.873513][ T1042] udevd D27592 7907 3876 0x00000000 [ 1346.880049][ T1042] Call Trace: [ 1346.883593][ T1042] __schedule+0x817/0x1cc0 [ 1346.888164][ T1042] ? __sched_text_start+0x8/0x8 [ 1346.893244][ T1042] ? rwsem_down_read_failed+0x1db/0x420 [ 1346.898982][ T1042] ? _raw_spin_unlock_irq+0x28/0x90 [ 1346.904345][ T1042] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1346.909953][ T1042] schedule+0x92/0x180 [ 1346.914252][ T1042] rwsem_down_read_failed+0x213/0x420 [ 1346.919861][ T1042] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 1346.926801][ T1042] ? rcuwait_wake_up+0x11d/0x230 [ 1346.931963][ T1042] ? lock_downgrade+0x880/0x880 [ 1346.936919][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1346.943947][ T1042] call_rwsem_down_read_failed+0x18/0x30 [ 1346.949761][ T1042] __percpu_down_read+0x8d/0xf0 [ 1346.954730][ T1042] uprobe_start_dup_mmap+0xbf/0xe0 [ 1346.960091][ T1042] copy_process.part.0+0x2b94/0x7980 [ 1346.965505][ T1042] ? __lock_acquire+0x548/0x3fb0 [ 1346.970627][ T1042] ? __lock_acquire+0x548/0x3fb0 [ 1346.975701][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1346.982151][ T1042] ? __lock_acquire+0x548/0x3fb0 [ 1346.987254][ T1042] ? __cleanup_sighand+0x60/0x60 [ 1346.992362][ T1042] ? find_held_lock+0x35/0x130 [ 1346.997273][ T1042] ? lock_downgrade+0x880/0x880 [ 1347.002365][ T1042] _do_fork+0x257/0xfd0 [ 1347.006609][ T1042] ? fork_idle+0x1d0/0x1d0 [ 1347.011273][ T1042] ? fd_install+0x4d/0x60 [ 1347.015844][ T1042] ? do_pipe2+0x9a/0x160 [ 1347.020233][ T1042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1347.025884][ T1042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1347.031537][ T1042] ? do_syscall_64+0x26/0x610 [ 1347.036290][ T1042] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1347.042521][ T1042] ? do_syscall_64+0x26/0x610 [ 1347.047417][ T1042] __x64_sys_clone+0xbf/0x150 [ 1347.052290][ T1042] do_syscall_64+0x103/0x610 [ 1347.057039][ T1042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1347.063177][ T1042] RIP: 0033:0x7ff03d0a5f46 [ 1347.067686][ T1042] Code: Bad RIP value. [ 1347.072452][ T1042] RSP: 002b:00007fffc69371a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1347.081089][ T1042] RAX: ffffffffffffffda RBX: 00007fffc69371a0 RCX: 00007ff03d0a5f46 [ 1347.089375][ T1042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1347.097483][ T1042] RBP: 00007fffc6937200 R08: 0000000000001ee3 R09: 0000000000001ee3 [ 1347.105750][ T1042] R10: 00007ff03d9c2a70 R11: 0000000000000246 R12: 0000000000000000 [ 1347.114590][ T1042] R13: 00007fffc69371c0 R14: 0000000000000005 R15: 0000000000000005 [ 1347.122811][ T1042] INFO: task syz-executor.1:7939 blocked for more than 143 seconds. [ 1347.131046][ T1042] Not tainted 5.1.0-rc1+ #34 [ 1347.136271][ T1042] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1347.145287][ T1042] syz-executor.1 D24176 7939 1 0x00000006 [ 1347.151915][ T1042] Call Trace: [ 1347.155438][ T1042] __schedule+0x817/0x1cc0 [ 1347.159977][ T1042] ? __sched_text_start+0x8/0x8 [ 1347.165091][ T1042] ? rwsem_down_read_failed+0x1db/0x420 [ 1347.170889][ T1042] ? _raw_spin_unlock_irq+0x28/0x90 [ 1347.177043][ T1042] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1347.182636][ T1042] schedule+0x92/0x180 [ 1347.186837][ T1042] rwsem_down_read_failed+0x213/0x420 [ 1347.192412][ T1042] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 1347.199848][ T1042] ? rcuwait_wake_up+0x11d/0x230 [ 1347.204990][ T1042] ? lock_downgrade+0x880/0x880 [ 1347.210044][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1347.216549][ T1042] call_rwsem_down_read_failed+0x18/0x30 [ 1347.222365][ T1042] __percpu_down_read+0x8d/0xf0 [ 1347.227337][ T1042] uprobe_start_dup_mmap+0xbf/0xe0 [ 1347.232624][ T1042] copy_process.part.0+0x2b94/0x7980 [ 1347.238129][ T1042] ? __lock_acquire+0x548/0x3fb0 [ 1347.243192][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1347.249573][ T1042] ? debug_smp_processor_id+0x3c/0x280 [ 1347.255297][ T1042] ? __cleanup_sighand+0x60/0x60 [ 1347.260470][ T1042] _do_fork+0x257/0xfd0 [ 1347.264722][ T1042] ? fork_idle+0x1d0/0x1d0 [ 1347.269276][ T1042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1347.274930][ T1042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1347.280533][ T1042] ? do_syscall_64+0x26/0x610 [ 1347.285471][ T1042] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1347.291779][ T1042] ? do_syscall_64+0x26/0x610 [ 1347.296574][ T1042] __x64_sys_clone+0xbf/0x150 [ 1347.301387][ T1042] do_syscall_64+0x103/0x610 [ 1347.306046][ T1042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1347.312135][ T1042] RIP: 0033:0x4567da [ 1347.316097][ T1042] Code: Bad RIP value. [ 1347.320290][ T1042] RSP: 002b:00007fff81d6a480 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1347.329417][ T1042] RAX: ffffffffffffffda RBX: 00007fff81d6a480 RCX: 00000000004567da [ 1347.337503][ T1042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1347.345647][ T1042] RBP: 00007fff81d6a4c0 R08: 0000000000000001 R09: 000000000260f940 [ 1347.353861][ T1042] R10: 000000000260fc10 R11: 0000000000000246 R12: 0000000000000001 [ 1347.361986][ T1042] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff81d6a510 [ 1347.370088][ T1042] INFO: task syz-executor.2:7942 blocked for more than 144 seconds. [ 1347.378195][ T1042] Not tainted 5.1.0-rc1+ #34 [ 1347.383390][ T1042] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1347.392240][ T1042] syz-executor.2 D24176 7942 1 0x00000004 [ 1347.398748][ T1042] Call Trace: [ 1347.402137][ T1042] __schedule+0x817/0x1cc0 [ 1347.406665][ T1042] ? __sched_text_start+0x8/0x8 [ 1347.411752][ T1042] ? preempt_schedule+0x4b/0x60 [ 1347.416741][ T1042] ? ___preempt_schedule+0x16/0x18 [ 1347.422029][ T1042] schedule+0x92/0x180 [ 1347.426250][ T1042] rwsem_down_read_failed+0x213/0x420 [ 1347.431771][ T1042] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 1347.438636][ T1042] ? rcuwait_wake_up+0x11d/0x230 [ 1347.443700][ T1042] ? lock_downgrade+0x880/0x880 [ 1347.448665][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1347.454993][ T1042] call_rwsem_down_read_failed+0x18/0x30 [ 1347.461580][ T1042] __percpu_down_read+0x8d/0xf0 [ 1347.466521][ T1042] uprobe_start_dup_mmap+0xbf/0xe0 [ 1347.471782][ T1042] copy_process.part.0+0x2b94/0x7980 [ 1347.477135][ T1042] ? __lock_acquire+0x548/0x3fb0 [ 1347.482362][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1347.488780][ T1042] ? debug_smp_processor_id+0x3c/0x280 [ 1347.494336][ T1042] ? __cleanup_sighand+0x60/0x60 [ 1347.499422][ T1042] _do_fork+0x257/0xfd0 [ 1347.503665][ T1042] ? fork_idle+0x1d0/0x1d0 [ 1347.508195][ T1042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1347.513790][ T1042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1347.519426][ T1042] ? do_syscall_64+0x26/0x610 [ 1347.524178][ T1042] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1347.530462][ T1042] ? do_syscall_64+0x26/0x610 [ 1347.535216][ T1042] __x64_sys_clone+0xbf/0x150 [ 1347.540236][ T1042] do_syscall_64+0x103/0x610 [ 1347.544881][ T1042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1347.551013][ T1042] RIP: 0033:0x4567da [ 1347.554996][ T1042] Code: Bad RIP value. [ 1347.559240][ T1042] RSP: 002b:00007ffce6917ec0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1347.567724][ T1042] RAX: ffffffffffffffda RBX: 00007ffce6917ec0 RCX: 00000000004567da [ 1347.575881][ T1042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1347.583960][ T1042] RBP: 00007ffce6917f00 R08: 0000000000000001 R09: 0000000001b50940 [ 1347.592674][ T1042] R10: 0000000001b50c10 R11: 0000000000000246 R12: 0000000000000001 [ 1347.600912][ T1042] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce6917f50 [ 1347.609009][ T1042] INFO: task syz-executor.3:7945 blocked for more than 144 seconds. [ 1347.617073][ T1042] Not tainted 5.1.0-rc1+ #34 [ 1347.622317][ T1042] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1347.631527][ T1042] syz-executor.3 D24344 7945 1 0x00000004 [ 1347.637981][ T1042] Call Trace: [ 1347.641374][ T1042] __schedule+0x817/0x1cc0 [ 1347.645899][ T1042] ? __sched_text_start+0x8/0x8 [ 1347.650890][ T1042] ? preempt_schedule+0x4b/0x60 [ 1347.655824][ T1042] ? ___preempt_schedule+0x16/0x18 [ 1347.661084][ T1042] schedule+0x92/0x180 [ 1347.665207][ T1042] rwsem_down_read_failed+0x213/0x420 [ 1347.670755][ T1042] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 1347.677587][ T1042] ? rcuwait_wake_up+0x11d/0x230 [ 1347.682761][ T1042] ? lock_downgrade+0x880/0x880 [ 1347.687721][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1347.694096][ T1042] call_rwsem_down_read_failed+0x18/0x30 [ 1347.699816][ T1042] __percpu_down_read+0x8d/0xf0 [ 1347.704795][ T1042] uprobe_start_dup_mmap+0xbf/0xe0 [ 1347.718984][ T1042] copy_process.part.0+0x2b94/0x7980 [ 1347.724361][ T1042] ? __lock_acquire+0x548/0x3fb0 [ 1347.729507][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1347.735893][ T1042] ? debug_smp_processor_id+0x3c/0x280 [ 1347.741742][ T1042] ? __cleanup_sighand+0x60/0x60 [ 1347.746857][ T1042] _do_fork+0x257/0xfd0 [ 1347.751252][ T1042] ? fork_idle+0x1d0/0x1d0 [ 1347.755867][ T1042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1347.762186][ T1042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1347.767815][ T1042] ? do_syscall_64+0x26/0x610 [ 1347.772716][ T1042] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1347.779110][ T1042] ? do_syscall_64+0x26/0x610 [ 1347.783984][ T1042] __x64_sys_clone+0xbf/0x150 [ 1347.788923][ T1042] do_syscall_64+0x103/0x610 [ 1347.793709][ T1042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1347.799931][ T1042] RIP: 0033:0x4567da [ 1347.804009][ T1042] Code: Bad RIP value. [ 1347.808264][ T1042] RSP: 002b:00007ffc13534700 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1347.816958][ T1042] RAX: ffffffffffffffda RBX: 00007ffc13534700 RCX: 00000000004567da [ 1347.825790][ T1042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1347.834743][ T1042] RBP: 00007ffc13534740 R08: 0000000000000001 R09: 000000000180d940 [ 1347.842994][ T1042] R10: 000000000180dc10 R11: 0000000000000246 R12: 0000000000000001 [ 1347.851862][ T1042] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc13534790 [ 1347.862242][ T1042] INFO: task syz-executor.4:7949 blocked for more than 144 seconds. [ 1347.870597][ T1042] Not tainted 5.1.0-rc1+ #34 [ 1347.876486][ T1042] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1347.885588][ T1042] syz-executor.4 D24176 7949 1 0x00000004 [ 1347.892833][ T1042] Call Trace: [ 1347.897305][ T1042] __schedule+0x817/0x1cc0 [ 1347.902094][ T1042] ? __sched_text_start+0x8/0x8 [ 1347.907086][ T1042] ? rwsem_down_read_failed+0x1db/0x420 [ 1347.912963][ T1042] ? _raw_spin_unlock_irq+0x28/0x90 [ 1347.918453][ T1042] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1347.924053][ T1042] schedule+0x92/0x180 [ 1347.928317][ T1042] rwsem_down_read_failed+0x213/0x420 [ 1347.933892][ T1042] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 1347.941402][ T1042] ? rcuwait_wake_up+0x11d/0x230 [ 1347.946572][ T1042] ? lock_downgrade+0x880/0x880 [ 1347.952035][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1347.958450][ T1042] call_rwsem_down_read_failed+0x18/0x30 [ 1347.964352][ T1042] __percpu_down_read+0x8d/0xf0 [ 1347.969449][ T1042] uprobe_start_dup_mmap+0xbf/0xe0 [ 1347.974701][ T1042] copy_process.part.0+0x2b94/0x7980 [ 1347.980780][ T1042] ? __lock_acquire+0x548/0x3fb0 [ 1347.986681][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1347.993292][ T1042] ? debug_smp_processor_id+0x3c/0x280 [ 1347.999017][ T1042] ? __cleanup_sighand+0x60/0x60 [ 1348.004793][ T1042] _do_fork+0x257/0xfd0 [ 1348.009111][ T1042] ? fork_idle+0x1d0/0x1d0 [ 1348.013707][ T1042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1348.019514][ T1042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1348.025335][ T1042] ? do_syscall_64+0x26/0x610 [ 1348.030253][ T1042] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1348.036465][ T1042] ? do_syscall_64+0x26/0x610 [ 1348.041477][ T1042] __x64_sys_clone+0xbf/0x150 [ 1348.046323][ T1042] do_syscall_64+0x103/0x610 [ 1348.051359][ T1042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1348.057442][ T1042] RIP: 0033:0x4567da [ 1348.061601][ T1042] Code: Bad RIP value. [ 1348.065962][ T1042] RSP: 002b:00007ffce5f4c2e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1348.075743][ T1042] RAX: ffffffffffffffda RBX: 00007ffce5f4c2e0 RCX: 00000000004567da [ 1348.084516][ T1042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1348.092852][ T1042] RBP: 00007ffce5f4c320 R08: 0000000000000001 R09: 00000000010ba940 [ 1348.101101][ T1042] R10: 00000000010bac10 R11: 0000000000000246 R12: 0000000000000001 [ 1348.110620][ T1042] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce5f4c370 [ 1348.118885][ T1042] INFO: task syz-executor.5:7951 blocked for more than 144 seconds. [ 1348.127042][ T1042] Not tainted 5.1.0-rc1+ #34 [ 1348.132314][ T1042] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1348.141184][ T1042] syz-executor.5 D24176 7951 1 0x00000004 [ 1348.147747][ T1042] Call Trace: [ 1348.151318][ T1042] __schedule+0x817/0x1cc0 [ 1348.155897][ T1042] ? __sched_text_start+0x8/0x8 [ 1348.160986][ T1042] ? rwsem_down_read_failed+0x1db/0x420 [ 1348.166886][ T1042] ? _raw_spin_unlock_irq+0x28/0x90 [ 1348.172808][ T1042] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1348.178386][ T1042] schedule+0x92/0x180 [ 1348.182606][ T1042] rwsem_down_read_failed+0x213/0x420 [ 1348.188649][ T1042] ? __rwsem_down_read_failed_common.part.0+0x80/0x80 [ 1348.196110][ T1042] ? rcuwait_wake_up+0x11d/0x230 [ 1348.201282][ T1042] ? lock_downgrade+0x880/0x880 [ 1348.206286][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1348.212928][ T1042] call_rwsem_down_read_failed+0x18/0x30 [ 1348.218785][ T1042] __percpu_down_read+0x8d/0xf0 [ 1348.223858][ T1042] uprobe_start_dup_mmap+0xbf/0xe0 [ 1348.229261][ T1042] copy_process.part.0+0x2b94/0x7980 [ 1348.234742][ T1042] ? __lock_acquire+0x548/0x3fb0 [ 1348.240570][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1348.247073][ T1042] ? debug_smp_processor_id+0x3c/0x280 [ 1348.252770][ T1042] ? __cleanup_sighand+0x60/0x60 [ 1348.257972][ T1042] _do_fork+0x257/0xfd0 [ 1348.262341][ T1042] ? fork_idle+0x1d0/0x1d0 [ 1348.266988][ T1042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1348.272710][ T1042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1348.278406][ T1042] ? do_syscall_64+0x26/0x610 [ 1348.283261][ T1042] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1348.289761][ T1042] ? do_syscall_64+0x26/0x610 [ 1348.294581][ T1042] __x64_sys_clone+0xbf/0x150 [ 1348.299585][ T1042] do_syscall_64+0x103/0x610 [ 1348.304327][ T1042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1348.310412][ T1042] RIP: 0033:0x4567da [ 1348.314670][ T1042] Code: Bad RIP value. [ 1348.319235][ T1042] RSP: 002b:00007fff8ef00fc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1348.328013][ T1042] RAX: ffffffffffffffda RBX: 00007fff8ef00fc0 RCX: 00000000004567da [ 1348.336342][ T1042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1348.345043][ T1042] RBP: 00007fff8ef01000 R08: 0000000000000001 R09: 000000000231f940 [ 1348.353198][ T1042] R10: 000000000231fc10 R11: 0000000000000246 R12: 0000000000000001 [ 1348.361366][ T1042] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff8ef01050 [ 1348.370960][ T1042] INFO: task syz-executor.0:20560 blocked for more than 145 seconds. [ 1348.379241][ T1042] Not tainted 5.1.0-rc1+ #34 [ 1348.384590][ T1042] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1348.393463][ T1042] syz-executor.0 D27008 20560 7936 0x00000004 [ 1348.399934][ T1042] Call Trace: [ 1348.403312][ T1042] __schedule+0x817/0x1cc0 [ 1348.407952][ T1042] ? __sched_text_start+0x8/0x8 [ 1348.412984][ T1042] ? percpu_down_write+0x6a/0x440 [ 1348.418202][ T1042] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1348.424374][ T1042] schedule+0x92/0x180 [ 1348.428627][ T1042] percpu_down_write+0x342/0x440 [ 1348.433697][ T1042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1348.440239][ T1042] ? __percpu_down_read+0xf0/0xf0 [ 1348.445386][ T1042] register_for_each_vma+0x8c/0xde0 [ 1348.450810][ T1042] ? lock_downgrade+0x880/0x880 [ 1348.455811][ T1042] ? set_orig_insn+0x60/0x60 [ 1348.460629][ T1042] __uprobe_register+0x45a/0x7c0 [ 1348.465796][ T1042] uprobe_register_refctr+0x2e/0x40 [ 1348.471951][ T1042] probe_event_enable+0x51d/0xc40 [ 1348.477094][ T1042] ? pcpu_balance_workfn+0x12a0/0x12a0 [ 1348.482804][ T1042] ? traceprobe_set_print_fmt+0x3a/0xa0 [ 1348.488998][ T1042] ? __uprobe_perf_filter.part.0+0x110/0x110 [ 1348.495379][ T1042] trace_uprobe_register+0x7a/0x970 [ 1348.502248][ T1042] perf_trace_event_init+0x500/0x990 [ 1348.507672][ T1042] perf_uprobe_init+0x16e/0x210 [ 1348.512902][ T1042] perf_uprobe_event_init+0x106/0x1a0 [ 1348.519240][ T1042] perf_try_init_event+0x137/0x3f0 [ 1348.524545][ T1042] perf_event_alloc.part.0+0x1f2f/0x3200 [ 1348.530666][ T1042] ? __perf_event_read+0xe10/0xe10 [ 1348.536448][ T1042] ? kasan_check_read+0x11/0x20 [ 1348.541520][ T1042] ? do_raw_spin_unlock+0x57/0x270 [ 1348.546893][ T1042] __do_sys_perf_event_open+0x830/0x24e0 [ 1348.552860][ T1042] ? perf_event_set_output+0x4e0/0x4e0 [ 1348.558686][ T1042] ? put_timespec64+0xda/0x140 [ 1348.563655][ T1042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1348.569636][ T1042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1348.575980][ T1042] ? do_syscall_64+0x26/0x610 [ 1348.581024][ T1042] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1348.587508][ T1042] ? do_syscall_64+0x26/0x610 [ 1348.592388][ T1042] __x64_sys_perf_event_open+0xbe/0x150 [ 1348.598143][ T1042] do_syscall_64+0x103/0x610 [ 1348.602952][ T1042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1348.609147][ T1042] RIP: 0033:0x458209 [ 1348.613293][ T1042] Code: Bad RIP value. [ 1348.617451][ T1042] RSP: 002b:00007f2c8b48cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1348.626513][ T1042] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458209 [ 1348.635384][ T1042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1348.643772][ T1042] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1348.652045][ T1042] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f2c8b48d6d4 [ 1348.660373][ T1042] R13: 00000000004c47ec R14: 00000000004d7f90 R15: 00000000ffffffff [ 1348.668577][ T1042] [ 1348.668577][ T1042] Showing all locks held in the system: [ 1348.676469][ T1042] 1 lock held by khungtaskd/1042: [ 1348.681743][ T1042] #0: 00000000b2167e35 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 1348.691287][ T1042] 2 locks held by rs:main Q:Reg/7806: [ 1348.696795][ T1042] 1 lock held by rsyslogd/7808: [ 1348.701873][ T1042] #0: 000000002a5a72f5 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 1348.710691][ T1042] 2 locks held by getty/7898: [ 1348.716547][ T1042] #0: 000000006121036a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1348.725756][ T1042] #1: 00000000910420f6 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1348.735661][ T1042] 2 locks held by getty/7899: [ 1348.740582][ T1042] #0: 0000000008fe7739 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1348.749774][ T1042] #1: 0000000018514d3a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1348.760274][ T1042] 2 locks held by getty/7900: [ 1348.764965][ T1042] #0: 00000000a4ad5a66 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1348.774845][ T1042] #1: 0000000077c1aed5 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1348.784679][ T1042] 2 locks held by getty/7901: [ 1348.789533][ T1042] #0: 00000000ff630e7d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1348.798793][ T1042] #1: 00000000fc475054 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1348.808640][ T1042] 2 locks held by getty/7902: [ 1348.813480][ T1042] #0: 00000000a3aae5a3 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1348.822655][ T1042] #1: 00000000016fef73 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1348.832485][ T1042] 2 locks held by getty/7903: [ 1348.837264][ T1042] #0: 00000000138a1b68 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1348.846641][ T1042] #1: 00000000671555e4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1348.856512][ T1042] 2 locks held by getty/7904: [ 1348.861371][ T1042] #0: 00000000b34fd462 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1348.870782][ T1042] #1: 00000000187ab4f0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1348.880661][ T1042] 1 lock held by udevd/7906: [ 1348.885361][ T1042] #0: 00000000253a834f (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2b94/0x7980 [ 1348.895625][ T1042] 1 lock held by udevd/7907: [ 1348.900430][ T1042] #0: 00000000253a834f (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2b94/0x7980 [ 1348.910213][ T1042] 1 lock held by syz-executor.1/7939: [ 1348.915693][ T1042] #0: 00000000253a834f (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2b94/0x7980 [ 1348.925443][ T1042] 1 lock held by syz-executor.2/7942: [ 1348.931046][ T1042] #0: 00000000253a834f (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2b94/0x7980 [ 1348.940782][ T1042] 1 lock held by syz-executor.3/7945: [ 1348.946241][ T1042] #0: 00000000253a834f (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2b94/0x7980 [ 1348.955991][ T1042] 1 lock held by syz-executor.4/7949: [ 1348.961553][ T1042] #0: 00000000253a834f (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2b94/0x7980 [ 1348.971261][ T1042] 1 lock held by syz-executor.5/7951: [ 1348.976744][ T1042] #0: 00000000253a834f (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2b94/0x7980 [ 1348.986476][ T1042] 1 lock held by syz-executor.0/8420: [ 1348.992004][ T1042] #0: 00000000e0f08b16 (event_mutex){+.+.}, at: perf_trace_destroy+0x28/0x100 [ 1349.001226][ T1042] 2 locks held by kworker/u4:9/9062: [ 1349.006637][ T1042] #0: 00000000993799cd (&rq->lock){-.-.}, at: pick_next_task_fair+0x1214/0x19a0 [ 1349.016090][ T1042] #1: 00000000b2167e35 (rcu_read_lock){....}, at: __update_idle_core+0x45/0x3f0 [ 1349.026044][ T1042] 2 locks held by syz-executor.1/23693: [ 1349.031751][ T1042] #0: 00000000ea3db4bc (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1349.040936][ T1042] #1: 0000000003eb1797 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1349.050771][ T1042] 1 lock held by syz-executor.3/25474: [ 1349.056324][ T1042] #0: 00000000253a834f (&dup_mmap_sem){++++}, at: copy_process.part.0+0x2b94/0x7980 [ 1349.066069][ T1042] 5 locks held by syz-executor.0/20560: [ 1349.071805][ T1042] #0: 000000002b338204 (&sig->cred_guard_mutex){+.+.}, at: __do_sys_perf_event_open+0x6d2/0x24e0 [ 1349.082632][ T1042] #1: 0000000021451754 (&pmus_srcu){....}, at: perf_event_alloc.part.0+0xd57/0x3200 [ 1349.092300][ T1042] #2: 00000000e0f08b16 (event_mutex){+.+.}, at: perf_uprobe_init+0x163/0x210 [ 1349.101398][ T1042] #3: 0000000065866773 (&uprobe->register_rwsem){+.+.}, at: __uprobe_register+0x3c9/0x7c0 [ 1349.111643][ T1042] #4: 00000000253a834f (&dup_mmap_sem){++++}, at: percpu_down_write+0x6a/0x440 [ 1349.120937][ T1042] [ 1349.123401][ T1042] ============================================= [ 1349.123401][ T1042] [ 1349.132043][ T1042] NMI backtrace for cpu 1 [ 1349.136487][ T1042] CPU: 1 PID: 1042 Comm: khungtaskd Not tainted 5.1.0-rc1+ #34 [ 1349.144034][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.154079][ T1042] Call Trace: [ 1349.157373][ T1042] dump_stack+0x172/0x1f0 [ 1349.161694][ T1042] nmi_cpu_backtrace.cold+0x63/0xa4 [ 1349.166983][ T1042] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1349.172624][ T1042] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 1349.178624][ T1042] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1349.184550][ T1042] watchdog+0x9b7/0xec0 [ 1349.188955][ T1042] kthread+0x357/0x430 [ 1349.193038][ T1042] ? reset_hung_task_detector+0x30/0x30 [ 1349.198610][ T1042] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1349.204870][ T1042] ret_from_fork+0x3a/0x50 [ 1349.209507][ T1042] Sending NMI from CPU 1 to CPUs 0: [ 1349.214846][ C0] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x2/0x10 [ 1349.216767][ T1042] Kernel panic - not syncing: hung_task: blocked tasks [ 1349.229998][ T1042] CPU: 1 PID: 1042 Comm: khungtaskd Not tainted 5.1.0-rc1+ #34 [ 1349.237546][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.247693][ T1042] Call Trace: [ 1349.250995][ T1042] dump_stack+0x172/0x1f0 [ 1349.255327][ T1042] panic+0x2cb/0x65c [ 1349.259223][ T1042] ? __warn_printk+0xf3/0xf3 [ 1349.263815][ T1042] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1349.269468][ T1042] ? ___preempt_schedule+0x16/0x18 [ 1349.274589][ T1042] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 1349.280745][ T1042] ? nmi_trigger_cpumask_backtrace+0x1fa/0x236 [ 1349.286909][ T1042] ? nmi_trigger_cpumask_backtrace+0x204/0x236 [ 1349.293060][ T1042] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 1349.299222][ T1042] watchdog+0x9c8/0xec0 [ 1349.303383][ T1042] kthread+0x357/0x430 [ 1349.307449][ T1042] ? reset_hung_task_detector+0x30/0x30 [ 1349.312989][ T1042] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1349.319250][ T1042] ret_from_fork+0x3a/0x50 [ 1349.324697][ T1042] Kernel Offset: disabled [ 1349.329040][ T1042] Rebooting in 86400 seconds..