[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 14.475835] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 17.764980] random: sshd: uninitialized urandom read (32 bytes read) [ 18.081497] random: sshd: uninitialized urandom read (32 bytes read) [ 18.758587] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.35' (ECDSA) to the list of known hosts. [ 24.344805] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/28 20:20:57 fuzzer started [ 25.860509] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/28 20:21:00 dialing manager at 10.128.0.26:39301 2018/08/28 20:21:05 syscalls: 1 2018/08/28 20:21:05 code coverage: enabled 2018/08/28 20:21:05 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/28 20:21:05 setuid sandbox: enabled 2018/08/28 20:21:05 namespace sandbox: enabled 2018/08/28 20:21:05 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/08/28 20:21:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/28 20:21:05 net packed injection: enabled 2018/08/28 20:21:05 net device setup: enabled [ 34.215018] random: crng init done INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes 20:22:33 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000003640)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x1) pwritev(r1, &(0x7f0000002680)=[{&(0x7f0000002840)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000003640)='/dev/loop#\x00', 0x0, 0x24180) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x440080000000127c, &(0x7f0000000300)) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") read(r2, &(0x7f0000000200)=""/30, 0xfffffe80) 20:22:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000004c0)=0xfffffffffffff5b4, 0x4) 20:22:33 executing program 6: r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'veth1_to_bond\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000200)={0x2, "697036746e6c3000000000008c0400"}, 0x18) 20:22:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000200)) 20:22:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 20:22:33 executing program 4: r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'veth1_to_bond\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000200)={0x2, "697036746e6c3000000000008c0400"}, 0x18) 20:22:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xc9ffffffcead0100, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000600000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) 20:22:33 executing program 7: syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x86ddffff, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast2}}}}}, &(0x7f0000000180)) [ 119.945995] IPVS: Creating netns size=2536 id=1 [ 120.007786] IPVS: Creating netns size=2536 id=2 [ 120.094721] IPVS: Creating netns size=2536 id=3 [ 120.139247] IPVS: Creating netns size=2536 id=4 [ 120.172235] IPVS: Creating netns size=2536 id=5 [ 120.232232] IPVS: Creating netns size=2536 id=6 [ 120.287923] IPVS: Creating netns size=2536 id=7 [ 120.332571] IPVS: Creating netns size=2536 id=8 [ 120.869236] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 120.945034] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.055227] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.138623] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.206541] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.279668] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.307041] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.318537] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.352931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 121.360513] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.391230] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.414664] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.424968] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 121.446663] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.480231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.512029] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 121.527530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 121.544667] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.571926] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 121.607919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 121.719216] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 121.743647] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 121.759159] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 121.803150] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 121.818115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 121.839263] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 121.852313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 121.859898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 121.876768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 121.912543] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 121.942907] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 121.969082] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 121.983776] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 121.998473] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 122.020125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.032218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.054052] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 122.062339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 122.071383] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 122.086581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.105340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.131264] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 122.143042] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 122.150821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.171173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.197923] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 122.215233] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 122.225667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.237384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.252680] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 122.279381] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 122.294589] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 122.305440] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 122.333332] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 122.344881] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 122.364651] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 122.388013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.395896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.407668] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 122.416450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 122.426140] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 122.437395] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 122.449393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.461693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.469590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.477599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.486768] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 122.494569] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 122.502518] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 122.510992] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 122.522023] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 122.529195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.539374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.549608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.557316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.564903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.572511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.586968] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 122.598621] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 122.613506] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 122.624189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.633198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.641206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.657027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.671159] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 122.684919] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 122.705137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.717769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.725790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.733383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.741666] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 122.768947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.793350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.816191] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 122.827214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.845877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.740353] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 126.829767] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 126.982239] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 126.998904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.006546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.014855] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 127.068869] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 127.082912] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 127.089099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.101142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.179616] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 127.228849] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 127.255332] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 127.263250] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 127.274770] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 127.280908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.289975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.307719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.314948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.432604] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 127.440469] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 127.468150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.476001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.497182] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 127.509763] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 127.519608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.530149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.564824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.572317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.684598] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 127.701814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.708585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 20:22:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)="6f6f6d5f61646a00000026e7080900040000") sendfile(r1, r0, &(0x7f0000000000)=0x5d, 0x279ffffffffffff) [ 128.847345] syz-executor0 (6796): /proc/6791/oom_adj is deprecated, please use /proc/6791/oom_score_adj instead. 20:22:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xc9ffffffceadfa0f, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) 20:22:42 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d80), 0x12) recvmsg(r0, &(0x7f0000006500)={&(0x7f00000063c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000006440), 0x0, &(0x7f0000006480)=""/101, 0x65, 0x1ff}, 0x2) [ 128.924535] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bond, syncid = 0, id = 0 20:22:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6(0xa, 0x400000000002, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0/../file0\x00'}, 0x6e) socket$key(0xf, 0x3, 0x2) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000480)='ubifs\x00', 0x38800, &(0x7f00000004c0)="dfbe7a844506d79ef0f9739d8f75ce79def221ec80add9244d513cc7d65183f60400fbf82d55919a98616abcf8176aab912f56f812e28167c361e4c64c2f8c86db9f5e615051324a59155fcd9e62814c622453c931ed00a22487cbabc28ec890436a47610c2af1b1bbdd23c3f3be5f6211aa8b37fca7844a66e2d666d56ec1812885d4a78b94b6885115cb273f9ed5d365171a79a78cec6594ee7d03c82cd88e85bd4d07511e146ed26a32ab6a5a") r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc004240a, &(0x7f00000001c0)=ANY=[]) write$UHID_CREATE(r3, &(0x7f0000000340)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000280)=""/175, 0xaf, 0x7fffffff, 0x0, 0x0, 0x4}, 0x11c) sendmmsg(r2, &(0x7f0000007e00), 0x30b, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x4000000000000027, &(0x7f0000000000)={@multicast1, @loopback, @multicast1}, 0xc) pread64(r0, &(0x7f0000000080)=""/53, 0x35, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @dev, @dev}, &(0x7f00000000c0)=0xc) [ 129.002224] hrtimer: interrupt took 56261 ns 20:22:42 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000500), 0x12) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) [ 129.030308] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 129.068109] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 20:22:42 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000)=0x41, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 129.096397] loop0: p1 p2 p3 p4 [ 129.153949] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 129.183226] IPVS: stopping backup sync thread 6882 ... 20:22:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x0, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000300)="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", 0x150) [ 129.203289] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bond, syncid = 0, id = 0 20:22:42 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") close(r0) 20:22:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271c, &(0x7f0000000180)=""/13, &(0x7f0000000140)=0xd) [ 129.247104] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 129.276690] loop5: p1 p2 p3 p4 20:22:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000000100)={{}, {0x0, 0x7530}}, 0x0) 20:22:42 executing program 6: r0 = inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x80000002) read(r0, &(0x7f0000000000)=""/177, 0x10) creat(&(0x7f0000000440)='./file0\x00', 0x0) 20:22:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:22:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2000000029000000020000004bc333b8595a865187089d030000000000000000"], 0x20}}], 0x1, 0x0) 20:22:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xc9ffffffceadfa0f, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) 20:22:42 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 20:22:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xc9ffffffcead0100, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000600000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) 20:22:43 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000000100)={{}, {0x0, 0x7530}}, 0x0) 20:22:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) 20:22:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) [ 129.651402] binder: 6939:6944 transaction failed 29189/-22, size 40-17 line 3013 20:22:43 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) getpgrp(0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000200)=@nl, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="5500000018007f7500fe01b2a4a280930a06000000a8430891120000390008000a000a00060000001900a30700000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000180)}, 0x0) 20:22:43 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r2 = openat$cgroup_ro(r1, &(0x7f0000000200)="6d656d0001792e737761532e63757272656e7400", 0x0, 0x0) pread64(r2, &(0x7f0000000240)=""/136, 0x200002c8, 0x930000) [ 129.714024] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 129.746843] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 129.746892] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 129.747188] loop5: p1 p2 p3 p4 [ 129.817096] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 129.832358] loop0: p1 p2 p3 p4 20:22:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x0, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000300)="7b987b577425147e1f639df91e4f9be0acc155f282811c1275db5d2f016eda6bb51e55045450222d2e5bc4a85af087a5664fb7023cdf5f73cab4f7bb3284c5ffde954038e26b3b71998b7730c9da389aa152faa8651fce0d00dabb7e700d0f11c239e0f8ad8ece7d2e093db9589bfb5edd97e5d9733859697eaea6a25211e64b13cb7de150a3de341e093f3c2a4f3e5649cc969a077fa90de73374634a3a955fcd24b5a21e762b98096cb2207129fd7ee79644ebe72279a95b9c05b796cec92cd966959736cdb902017b096141335f4a9bc2080bca7175626ad36b21929d0b05494f454f9da8506877c8e53b111321f9dad657bf6ce6e57f24c647217c6747a069838fd6d6639edfea046a62ba34cb7067bb1f0963c732da7d1ffa7776d355a3d6f8fd5f93aaacc267459026002e04a29a2898cbbdbe21759fe23f8ddd3fcbb3e2a935aa30d79d37b74a45fe01c85a4e", 0x150) 20:22:43 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:22:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000540)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1d6) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, "13701b21bd0a60480000000000039b3fd5cec307e8ef3d13f90d229db6926c475b78f8b2000000000f0000000000000009fba8f376589701a400", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc5, @time={0x77359400}}) sched_setattr(0x0, &(0x7f0000000300)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000000)={0x0, 0x0, 'client1\x00', 0x0, "15d5acdcca3dd6bd", "a5f0988faa9b6b7f4f08c73923729e0bceb3378512ebe2c3b9e4f0d336724750"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000800)='/dev/sequencer2\x00', 0x0, 0x0) 20:22:43 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x6, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:43 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xd4e}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x8bde, 0x8}) close(r0) 20:22:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xc9ffffffcead0100, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000600000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) 20:22:43 executing program 3: socket$inet6(0xa, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001900000000000000ffdbdf2513000000c582df54dbe431c2748fcc5691fe70313434eb8c28ea5af9f36bce961424ba753bb3850d32783739c14f122c574c0d152e3bd97ba61c489310173252afe1a73177a09c0f9ce7d1c2f56d54b4201422039344b1d0da8214c3290b166efa66ecd9ee07e6053e9b269bcd21cd7e6194f3548c9da1f74ea32210dfd8286090e889"], 0x14}}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) unlinkat(r0, &(0x7f0000000b80)='./bus\x00', 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@remote, @in6=@remote}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f0000000500)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000680)={@loopback}, &(0x7f00000006c0)=0x14) accept$packet(r1, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000d80)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001680)={0x0, @loopback, @dev}, &(0x7f00000016c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001900)={{{@in=@multicast2, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000001a00)=0xe8) setsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000800)="b7deb7cdd794e8af74ce955726692e7fe6decf0f2dfb1fdd6904f5b29ed40eaa0a8d687b5057e6d4514d6c51be92bf32f8811b65c81e64aee3d308af3dd69c4e107d76de70a58ba2cbf7497d79bf1bf082572ce703291990d988da0afbd3b8346bc7036aff905e95773fc350acff3c5b3ba3e30b313b43784ae08e30700d11dc53e5b0eed65bf5aa0cc19cad61", 0x8d) 20:22:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:43 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:22:43 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1003000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r3 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00', 0x0) ioctl$sock_netdev_private(r2, 0x89f6, &(0x7f0000000140)="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") ftruncate(r1, 0x7) sendfile(r0, r3, &(0x7f000000a000), 0x2) sendfile(r0, r3, &(0x7f00000000c0)=0x2, 0x20005) 20:22:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:43 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:22:43 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) [ 130.153121] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 130.166531] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 130.220723] loop5: p1 p2 p3 p4 20:22:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x0, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000300)="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", 0x150) 20:22:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, 0x0, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:44 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:22:44 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:44 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000540)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1d6) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, "13701b21bd0a60480000000000039b3fd5cec307e8ef3d13f90d229db6926c475b78f8b2000000000f0000000000000009fba8f376589701a400", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc5, @time={0x77359400}}) sched_setattr(0x0, &(0x7f0000000300)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000000)={0x0, 0x0, 'client1\x00', 0x0, "15d5acdcca3dd6bd", "a5f0988faa9b6b7f4f08c73923729e0bceb3378512ebe2c3b9e4f0d336724750"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000800)='/dev/sequencer2\x00', 0x0, 0x0) 20:22:44 executing program 0: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @remote}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000240)='/dev/pktcdvd/control\x00', 0x200, 0x0) r2 = socket$unix(0x1, 0x7, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000440)={r2, 0x0, 0x800, 0xc43, 0x5}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f0000000100)=""/194, &(0x7f0000000200)=0xc2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000003c0)) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000380)=0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x0, 0x2, 0x4, 0x9, 0x0, 0x400, 0x80, 0x3, 0x4, 0x7, 0x1, 0x2, 0x7f, 0x9, 0x40, 0x39a, 0x7c00, 0x5, 0x1, 0xbe0, 0x100, 0x7fffffff, 0x7fff, 0x3f, 0x7, 0xfffffffffffffffb, 0x0, 0x4, 0x20, 0x3, 0x10001, 0x3, 0x8000, 0x2, 0x5, 0x10001, 0x0, 0x0, 0x1, @perf_config_ext={0x73c, 0x8}, 0x800, 0x80, 0x5, 0x7, 0x3f, 0xffffffffffffffc0, 0x400}, r6, 0x9, r4, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000002c0)={r4, 0x0, 0x5, 0x6, 0xbf2}) sendmsg$nl_xfrm(r3, &(0x7f000000b000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0x346, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB="000000001400080027bd7000ffdbdf2500000000000000000000000000003fdd6eae3a893f80d0a3bb7442e164f9b72cf5bb3ef2ad3291e00ce9eb140000000000000000000000004e240002fe724ad89fc01abfa4bbbdadf9d0bd7aa7e4750ab643ff446e1bf5cc0a1d61aaa9c00713090000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="ba6b6e0001e5b80fcd10cfea9ccb413075ca8cbe4e00000000000f00f5af00001e8056a492ee01f8f438548c0488000000008405d253e0905c969715005d073500000800003251b676e77e53e796425a0f5b3d541e1c19d0a79d6728ba7a00b2b250ffc5945374dec75f559bd59c2849254f38775d86e6cb771067b3de62604964f42d7cea6b621df61a8b30f48d2739843dfe8053183602ebb0c2fce35b5970fea50443670400000000000000b7c6e19fcb9e44ea69d3d94c324dc079c010468d94dd50210ecebcc86b4af85e5dce85b2496971d4013f487f0e39da39e30141b92b9abcb31d4ce701d0f9a70d"], 0x13c}}, 0x0) 20:22:44 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0x10288) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x8, 0x1, 0x1054, 0x7, 0x6}, 0xc) 20:22:44 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = fcntl$getown(r0, 0x9) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x0, &(0x7f00000002c0)=""/216) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r3, &(0x7f00000000c0)="27ee7974554c3060a38148a4e5c1778a495b41f66d56e0c1b98c1a6998709ec463c01a19a9043ca7c07b531cdb8c7fc1038d91599e5051e08b03d58b34083e003ac13a78b54f2553487882f6865a6de0c7aa6d05818e7fb5ec432d2b13c433a1269d85522403df44ee", 0x69, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @empty, 0x5}, 0x1c) removexattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000440)=@known='com.apple.FinderInfo\x00') fallocate(r3, 0x0, 0x0, 0x1000f4) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x40000) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000200)={0x2, 0x7, 0xfffffffffffeffff, 0x81}, 0x10) sendfile(r0, r4, &(0x7f00000003c0), 0x8000fffffffe) fcntl$getown(r0, 0x9) 20:22:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) keyctl$get_security(0x11, r1, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:44 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r0) keyctl$get_security(0x11, r1, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:44 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) [ 130.910813] hugetlbfs: Bad mount option: "./file0" 20:22:44 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:44 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r0) keyctl$get_security(0x11, r1, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:44 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x8000009) syz_open_dev$sndseq(&(0x7f0000000500)='/dev/snd/seq\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000600), 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000340)={0x18}, 0x18) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/enforce\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240), 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) 20:22:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x2710}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140)=0x40, 0x4) r0 = socket(0x10, 0x2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000340)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_rdma(&(0x7f00000001c0)='127.0.0.1\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x8000, &(0x7f0000000280)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@timeout={'timeout'}}, {@sq={'sq', 0x3d, 0x800}}]}}) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r3, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) socket$inet(0x2, 0x80001, 0x7) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000100)='\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) 20:22:44 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:22:45 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x8000009) syz_open_dev$sndseq(&(0x7f0000000500)='/dev/snd/seq\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000600), 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000340)={0x18}, 0x18) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/enforce\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240), 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) 20:22:45 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r0) keyctl$get_security(0x11, r1, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:45 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:45 executing program 5: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket(0xa, 0x80800, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000100)) getdents(r1, &(0x7f0000000040)=""/148, 0x17b) 20:22:45 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:22:45 executing program 1: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000600)={0x100000000, 0x100000000, 0x1ba, 'queue1\x00'}) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$cgroup_int(r0, &(0x7f0000000300)=0x5, 0x12) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000540)) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000380)=""/65) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}}) write$FUSE_STATFS(r3, &(0x7f0000000400)={0x60, 0x0, 0x3, {{0x1, 0x6, 0x2, 0x4, 0x5, 0x6, 0x1000000, 0x1}}}, 0x60) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) 20:22:45 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) stat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)) socket$inet6(0xa, 0x801, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(r1, 0x4b37) r2 = getpgrp(0x0) rt_sigqueueinfo(r2, 0x1a, &(0x7f00000000c0)={0x0, 0x80, 0x3, 0xcb}) fallocate(r1, 0x1, 0x0, 0x10000101) ioctl(r0, 0x8912, &(0x7f0000000040)="295ed277a420010036") open(&(0x7f0000000280)='./bus\x00', 0x800, 0x100) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x600, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0214f70b0200c686519fd0c9c1c3391f"], 0x10}}, 0xc040) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x7001, &(0x7f00000000c0)) 20:22:45 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x8000009) syz_open_dev$sndseq(&(0x7f0000000500)='/dev/snd/seq\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000600), 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000340)={0x18}, 0x18) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/enforce\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240), 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) 20:22:45 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r0) keyctl$get_security(0x11, r1, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:45 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:22:45 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:45 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r0) keyctl$get_security(0x11, r1, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:45 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r0) keyctl$get_security(0x11, r1, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:45 executing program 5: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket(0xa, 0x80800, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000100)) getdents(r1, &(0x7f0000000040)=""/148, 0x17b) 20:22:45 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:45 executing program 5: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket(0xa, 0x80800, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000100)) getdents(r1, &(0x7f0000000040)=""/148, 0x17b) 20:22:45 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) stat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)) socket$inet6(0xa, 0x801, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(r1, 0x4b37) r2 = getpgrp(0x0) rt_sigqueueinfo(r2, 0x1a, &(0x7f00000000c0)={0x0, 0x80, 0x3, 0xcb}) fallocate(r1, 0x1, 0x0, 0x10000101) ioctl(r0, 0x8912, &(0x7f0000000040)="295ed277a420010036") open(&(0x7f0000000280)='./bus\x00', 0x800, 0x100) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x600, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0214f70b0200c686519fd0c9c1c3391f"], 0x10}}, 0xc040) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x7001, &(0x7f00000000c0)) 20:22:45 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:45 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x101200, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x800) 20:22:45 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0x0, 0x804) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000400)='/dev/binder#\x00') sendfile(r1, r0, &(0x7f00000000c0)=0x3, 0x800100000001) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x58, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x68, 0x48, &(0x7f0000000200)=[@fda={0x66646185, 0x5, 0x4, 0x27}, @ptr={0x70742a85, 0x0, &(0x7f0000000100), 0x1, 0x0, 0x2}, @fda={0x66646185, 0x9, 0x2, 0x3b}], &(0x7f0000000280)=[0x38, 0x28, 0x68, 0x78, 0x48, 0x38, 0x40, 0x48, 0x78]}}, @decrefs={0x40046307, 0x4}, @enter_looper, @decrefs={0x40046307, 0x2}], 0x5b, 0x0, &(0x7f0000000380)="892f3509a284647eae675c468bb17fb496465b047edc3f1c894625115db2db97b580bfc5210544f69f1328dda81fe1da295b34a563f645072350aa79c51e50428c40422cf06c4d0f0aa82e1c3cb12ff895598f7e36a894947426a0"}) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1]) 20:22:45 executing program 1: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000600)={0x100000000, 0x100000000, 0x1ba, 'queue1\x00'}) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$cgroup_int(r0, &(0x7f0000000300)=0x5, 0x12) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000540)) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000380)=""/65) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}}) write$FUSE_STATFS(r3, &(0x7f0000000400)={0x60, 0x0, 0x3, {{0x1, 0x6, 0x2, 0x4, 0x5, 0x6, 0x1000000, 0x1}}}, 0x60) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) 20:22:45 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) stat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)) socket$inet6(0xa, 0x801, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(r1, 0x4b37) r2 = getpgrp(0x0) rt_sigqueueinfo(r2, 0x1a, &(0x7f00000000c0)={0x0, 0x80, 0x3, 0xcb}) fallocate(r1, 0x1, 0x0, 0x10000101) ioctl(r0, 0x8912, &(0x7f0000000040)="295ed277a420010036") open(&(0x7f0000000280)='./bus\x00', 0x800, 0x100) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x600, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0214f70b0200c686519fd0c9c1c3391f"], 0x10}}, 0xc040) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x7001, &(0x7f00000000c0)) 20:22:45 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:45 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:45 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:45 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:45 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0x0, 0x804) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000400)='/dev/binder#\x00') sendfile(r1, r0, &(0x7f00000000c0)=0x3, 0x800100000001) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x58, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x68, 0x48, &(0x7f0000000200)=[@fda={0x66646185, 0x5, 0x4, 0x27}, @ptr={0x70742a85, 0x0, &(0x7f0000000100), 0x1, 0x0, 0x2}, @fda={0x66646185, 0x9, 0x2, 0x3b}], &(0x7f0000000280)=[0x38, 0x28, 0x68, 0x78, 0x48, 0x38, 0x40, 0x48, 0x78]}}, @decrefs={0x40046307, 0x4}, @enter_looper, @decrefs={0x40046307, 0x2}], 0x5b, 0x0, &(0x7f0000000380)="892f3509a284647eae675c468bb17fb496465b047edc3f1c894625115db2db97b580bfc5210544f69f1328dda81fe1da295b34a563f645072350aa79c51e50428c40422cf06c4d0f0aa82e1c3cb12ff895598f7e36a894947426a0"}) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1]) 20:22:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="f27f00000000000000000180"]) socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) ioctl(r0, 0x40, &(0x7f0000000180)="0a5cc80700315f85715070") socket$inet6(0xa, 0x80000, 0x8001) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0185879, 0x20000001) 20:22:45 executing program 6: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:45 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x3, 0x43, &(0x7f0000000080)="b6837fbc7367f1f6f8d4ec37da4c0a8c2cefc417be8716b91baecba3ddaa0923364b5dd97f011e11f85f0dfca6dc4746d03751e16e9c7e6653bca09e28ab29dc1f083c"}) getsockopt(r0, 0x0, 0x62, &(0x7f00000002c0)=""/203, &(0x7f0000000040)=0xcb) 20:22:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ff73137e91edb11efca89988a6354d4911f440bb69e978ade6a4"], 0x1a) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x7f}) 20:22:45 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r0) keyctl$get_security(0x11, r1, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:45 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x10000) mq_getsetattr(r1, &(0x7f0000000080)={0x400, 0xffffffff, 0x1f, 0x4, 0x2, 0x0, 0x8, 0x5}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x10b000, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e20, @loopback}}, 0x20, 0x20, 0x2d052f08, "ca28eb3e258fd00dfe0f6692c72d58d56744c913df8aaecb6cd7d470b89bfe76d54092d5fed674cbfd74677ee9b1618fb390717e3c8eb201c33ca1175d60192ae463e21f19c0abf9a970ff69b8eab250"}, 0xd8) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d000010030006000000000002000000e008000100000000000000000800120000000000fcffffffffbfffff060800000000000000000000000000002000ff00000000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e000f000d006000000000000000000000000008cb3e3bae1e6a6100800000002006af342248aef7e080992ed56d8e08d35bad697361898e75f0edaba7f759c8ec95702fb499b00d0c8a9b694a6eda95856527e98276e8bec"], 0x80}}, 0x0) 20:22:45 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r0) keyctl$get_security(0x11, r1, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:45 executing program 6: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r0, 0x127a, 0x70d000) r2 = dup(r0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x6) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000100)={0x5, 0x6, 0x9c}) 20:22:45 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40400, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000000)) 20:22:45 executing program 5: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r2, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r1) 20:22:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x8}}, 0x2e) close(r0) setrlimit(0x7, &(0x7f0000a9cff8)) eventfd(0x0) 20:22:45 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r0) keyctl$get_security(0x11, r1, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:45 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) ioprio_get$pid(0x1, r1) 20:22:45 executing program 6: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:45 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000e0dd33200000000000005d9fffc1000000000007002e2f66696c6530"], 0x2a) mkdir(&(0x7f00000007c0)='./file0\x00', 0x100) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000600)={{0x7ff, 0xd8e}, {0x40}, 0x9, 0x7ccdf13147df7b60}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r3 = getpgrp(0x0) perf_event_open(&(0x7f0000000740)={0x1, 0x70, 0x3, 0x3, 0x7, 0x400, 0x0, 0x6, 0x2004, 0x2, 0x195c83f0, 0x6, 0x80, 0x9, 0x9, 0x3ff, 0x1, 0x101, 0x9aef, 0x2, 0x0, 0x9, 0x20, 0x4, 0x1, 0xd8df, 0x0, 0x1, 0x4, 0x8842, 0x81, 0x1, 0x101, 0x400, 0xfffffffffffff000, 0x2, 0x9, 0x7, 0x0, 0x701, 0x4, @perf_bp={&(0x7f0000000700), 0xd}, 0x4000, 0x0, 0x1, 0x0, 0x20, 0xb4, 0x3}, r3, 0x7, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) fchmod(0xffffffffffffffff, 0x4c) accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ppp\x00', 0x1, 0x0) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f00000006c0)={0x2, 0x10000, 0x1}) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000180)={0x4e3, 0xffffffffffffff6b}) ioctl$TCSBRKP(r4, 0x5425, 0x6) r5 = fcntl$getown(r0, 0x9) sched_rr_get_interval(r5, &(0x7f0000000680)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="2c706f7369782700000000000000696f6e3d3970323030302c76657273696f6e3d3970323030302e4c2c76657273696f6e3d3970323030d68d752c6c6f6f73652c6163636573733d757365722c0055a85b1b9eb8ea182069d2fa6772e25e"]) renameat2(r4, &(0x7f0000000400)='./file0\x00', r4, &(0x7f0000000440)='./file0\x00', 0x1) umount2(&(0x7f0000000500)='./file0\x00', 0x0) 20:22:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:46 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x2, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000030c0), 0x1000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000240)=[{{0x77359400}, 0x17, 0x9, 0x1}, {{r3, r4/1000+30000}, 0x1, 0x2, 0x5a}, {{r5, r6/1000+30000}, 0x16, 0x200, 0x4}, {{0x77359400}, 0x17, 0x5, 0x8}, {{0x0, 0x2710}, 0x17, 0x4a0, 0xfff}, {{0x77359400}, 0x11, 0x4, 0x20ca}], 0x90) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x6, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4000}}}, 0x90) 20:22:46 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:46 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000003c0)=0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0xd) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x10000, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000140)="db1050c922", 0x5) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000700000000000000e7d2a26751220200000000030000000000000000000008000f0000000000964f0517afdf35a918a08b78fa750891aadc1bf2b70300e27d6855d1d33131b13f07f54b7af699352dfe21806aabecc925248956c51632f5fb71f02716ffc7b8a868e43d7e543153a9aeefca806cf0ea9927020fcf9212bf8ad358d50da523ce9bc212ad4b9a2b00d41c7e70c058af8b87195ff159a1b8c6b25ac99e833fa08e21b59945ba68973d5c3bac0cca576ec1b3a0681c8b8616309569a52b46ab8176"], 0x28}}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000500), 0x4) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') 20:22:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x32, &(0x7f0000000200)={@remote}, 0x20) 20:22:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:46 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:46 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x8}}, 0x2e) close(r0) setrlimit(0x7, &(0x7f0000a9cff8)) eventfd(0x0) 20:22:46 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x8}}, 0x2e) close(r0) setrlimit(0x7, &(0x7f0000a9cff8)) eventfd(0x0) 20:22:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:46 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:46 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00./file0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000480)) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000380)={'nr0\x00', 0x200}) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f0000000180)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000b00)={0xb, 0x75, 0x1}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x10, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r4 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RAUTH(r4, &(0x7f0000000340)={0x14}, 0x14) write$P9_RREMOVE(r4, &(0x7f0000000040)={0x7}, 0x7) [ 132.817071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7333 comm=syz-executor5 20:22:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:46 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) [ 132.838599] 9pnet_virtio: no channels available for device (null) [ 132.904906] 9pnet_virtio: no channels available for device (null) 20:22:46 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000e0dd33200000000000005d9fffc1000000000007002e2f66696c6530"], 0x2a) mkdir(&(0x7f00000007c0)='./file0\x00', 0x100) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000600)={{0x7ff, 0xd8e}, {0x40}, 0x9, 0x7ccdf13147df7b60}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r3 = getpgrp(0x0) perf_event_open(&(0x7f0000000740)={0x1, 0x70, 0x3, 0x3, 0x7, 0x400, 0x0, 0x6, 0x2004, 0x2, 0x195c83f0, 0x6, 0x80, 0x9, 0x9, 0x3ff, 0x1, 0x101, 0x9aef, 0x2, 0x0, 0x9, 0x20, 0x4, 0x1, 0xd8df, 0x0, 0x1, 0x4, 0x8842, 0x81, 0x1, 0x101, 0x400, 0xfffffffffffff000, 0x2, 0x9, 0x7, 0x0, 0x701, 0x4, @perf_bp={&(0x7f0000000700), 0xd}, 0x4000, 0x0, 0x1, 0x0, 0x20, 0xb4, 0x3}, r3, 0x7, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) fchmod(0xffffffffffffffff, 0x4c) accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ppp\x00', 0x1, 0x0) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f00000006c0)={0x2, 0x10000, 0x1}) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000180)={0x4e3, 0xffffffffffffff6b}) ioctl$TCSBRKP(r4, 0x5425, 0x6) r5 = fcntl$getown(r0, 0x9) sched_rr_get_interval(r5, &(0x7f0000000680)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="2c706f7369782700000000000000696f6e3d3970323030302c76657273696f6e3d3970323030302e4c2c76657273696f6e3d3970323030d68d752c6c6f6f73652c6163636573733d757365722c0055a85b1b9eb8ea182069d2fa6772e25e"]) renameat2(r4, &(0x7f0000000400)='./file0\x00', r4, &(0x7f0000000440)='./file0\x00', 0x1) umount2(&(0x7f0000000500)='./file0\x00', 0x0) 20:22:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:46 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000003c0)=0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0xd) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x10000, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000140)="db1050c922", 0x5) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000700000000000000e7d2a26751220200000000030000000000000000000008000f0000000000964f0517afdf35a918a08b78fa750891aadc1bf2b70300e27d6855d1d33131b13f07f54b7af699352dfe21806aabecc925248956c51632f5fb71f02716ffc7b8a868e43d7e543153a9aeefca806cf0ea9927020fcf9212bf8ad358d50da523ce9bc212ad4b9a2b00d41c7e70c058af8b87195ff159a1b8c6b25ac99e833fa08e21b59945ba68973d5c3bac0cca576ec1b3a0681c8b8616309569a52b46ab8176"], 0x28}}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000500), 0x4) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') 20:22:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc8070031") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) [ 132.932526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7353 comm=syz-executor5 20:22:46 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:46 executing program 0: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000003c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0x0, 0x2, 0x8, 0x5, 0x0, 0xb2, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x2, 0x5, 0x400, 0x800, 0x0, 0x1, 0x80000001, 0xfffffffffffffffe, 0x8, 0x9, 0x101, 0x2, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x0, 0x0, 0x0, 0x6, 0x1ff, 0x1700000000000000}, r0, 0xc, r1, 0xb) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000380)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) 20:22:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc8070031") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001500010000000000000000000af70000", @ANYRES32=0x0, @ANYBLOB="1400010000000000000000000000000000000000"], 0x2c}}, 0x0) keyctl$session_to_parent(0x12) 20:22:46 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") fcntl$dupfd(r0, 0x406, r0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000100)=0x3, 0x4) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @rand_addr}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000080), 0x4) 20:22:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc8070031") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:46 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:46 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x4) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000017c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f0000001800)={@empty, @remote}, 0x8) close(r0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x801) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000001680)={0x8, {{0xa, 0x4e23, 0x8, @local, 0x2}}, {{0xa, 0x4e23, 0x1, @loopback, 0x100000001}}}, 0x108) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) write$P9_RRENAME(r3, &(0x7f0000000080)={0x7}, 0x7) connect$l2tp(r2, &(0x7f0000001880)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @rand_addr=0x9}, 0x2, 0x4, 0x1, 0x1}}, 0x26) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f00000000c0)="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") syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f00000010c0)='./file0\x00', 0x4, 0x6, &(0x7f0000001500)=[{&(0x7f0000001100)="c089979c477b7a10fce32688dc489f3a476e58c6b9e18c5256b1023eaaaad87903103cb59d44967148d1e9f8ca3c32fa2a52aebd65ae7b8697f91fcd208de85d9d6b2439d78cb94e51e03acc6947ef053fc6715b00a30b939f395bf8c93be78d517bf3b18413b1f49d175f6fc627abea0254d0470cd5cc41f22e1d0fcdad22fc997f9659f8efd8d45df97868aed81e947127b38845eac9b6b92ffe58c18ddde955495910e52e671a", 0xa8}, {&(0x7f00000011c0)="9311f01481af2955788df037762c3ee8f80b54c76db03c5794486efeb9a52520ef218a63f1603f7280f86a8f488e0f16659810df47b174259d75eb70376557b1bbd0e7e2ad0389f2766908e11bfa57659be7b7653446ddd669419654ac19a47721de409e4054055d9f57128cc1a1d22c5ca1595ea0a35cf6149d4202e58c9bf2fa4e6b3fe2e018a3fa3c6ef3cae17f777716d28412e26852959afafba52e1060409b7d670dfaa7a0028445689046def252c7e06075a4ec2e07f8b7c3ce23d0a606e71f07b8", 0xc5, 0x80000000}, {&(0x7f00000012c0)="38c581264ab2aa6611cfe40cbf4620ed63e32d73fc1665340c8c0c399461b338f37312240ed6bc5a60a9cd0906259118cd62471acda857a2234635f88262118b434a2202a8b705fed3e4c9874c5eac18132123b3787a0d31f0a4080530ff39b77a0901b393251857b18e4437cc05d5516769ced64d121c362ac4653ef46237f56f38b0c022b398dd6dcf1be6371a415385e2dabe7f4a7844da32b27086202e283037894dac8e77fb2a0e71d92bcd7fc1f0f27255ee26", 0xb6, 0x7f}, {&(0x7f0000001380)="6cf83cd689a6393221d42a5445a957eb8ad27625b90a5f364e3af4a83a077b68421872c4210901251403547621b1ff686bf16d8e7d2c9a3539272e8578815eaab90178cda9200af85cbc55c1382195f44d598074f87c509c6168ccbf4b6ba4b865ee0ef1cc8a11673b9e0b99455b8a749c7fa23a631863d547185a04b460a8408189e20849d56c499c092736f829959ac181516bf60c05fc874d0ba9b10a797b7cbce6c1431f4df8116629e07cdc622a78a16653279524bbd9a09d9c58faf0fc042d12f446b82c", 0xc7, 0x6}, {&(0x7f0000001480)="7f7e66da1b7e35ccc1b037354706c247a9d76e906e926ddbe61346b8288132c7fbdf85dad44d5027aad7107f", 0x2c, 0x7fff}, {&(0x7f00000014c0)="0ed106570a66cd6e7a31f6770eec3dffd150ee925a", 0x15, 0x1}], 0x4000, &(0x7f00000015c0)={[{@noacl='noacl'}, {@space_cache_v2='space_cache=v2'}, {@check_int_data='check_int_data'}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@nodiscard='nodiscard'}, {@noenospc_debug='noenospc_debug'}]}) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000001840)) openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x400, 0x0) 20:22:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23}, 0x4, 0x0, 0x0, 0x2}}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000240)="6e65742f697076365f726f757465009829553bb9ecd9e6ca2ebba8172c94f992af985650f43e9ed5256831e39e3a3da9c5e222674b8134c3275e3a703bfa8417ab9a0520b59f0b859fb2b5f23b5333301bdeb9084d21125a2713a0359e42f092feea6641eb5a0d3b4703001f15d85c277ddc9cf49ac604f0bd5436ac85382cccfc55d64379a28935efb7bb17c3ac9e6f08d6666b4e7702f0637b94e978235c4dba73787a8b1d013b8af5f8a777e46a0adb303215350eae960a110b705de4e7d06aa33ff583bb187e65906ac1d9538f1c7f0683d13325f182019cd57115d68ebaa6e93b59830d0c4cdccb2d33068c") r2 = socket$inet6(0xa, 0x4, 0x440000000) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x5) ioctl(r2, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") sendfile(r0, r1, &(0x7f00005d4ff8), 0x2000000000000ff) openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x80000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x200000, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000180)={0x7, 0x4b, 0x2}, 0x7) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000000)) 20:22:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f8571") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:46 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) [ 133.188687] 9pnet_virtio: no channels available for device (null) 20:22:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x15c7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9911}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) mlock(&(0x7f0000005000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 20:22:46 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = getpid() sched_getaffinity(r0, 0x8, &(0x7f00000000c0)) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat(r1, &(0x7f0000000240)="2e2f636f6e74726f6cff05", 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='./file0\x00', 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x4) symlinkat(&(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)="2e2f636f6e74726f6cff0500") unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) ptrace$setregset(0x4205, r0, 0x3, &(0x7f0000000140)={&(0x7f0000000340)="0c43c383d6b37e7aa181e8296fec926d10b9fa311eee4455c77f65b62bdea566598d23ab3a770f13a6ac46d594933718b5b24caaae1a88c3c5b346784c05ec72cdc044f55fa12f0c2f3986e0826100d12dede16ac83e6d213c65db5ca9c18a53c6ee3a5b96c7785042c23cd7ee3fca", 0x6f}) 20:22:46 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000003c0)=0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0xd) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x10000, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000140)="db1050c922", 0x5) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000700000000000000e7d2a26751220200000000030000000000000000000008000f0000000000964f0517afdf35a918a08b78fa750891aadc1bf2b70300e27d6855d1d33131b13f07f54b7af699352dfe21806aabecc925248956c51632f5fb71f02716ffc7b8a868e43d7e543153a9aeefca806cf0ea9927020fcf9212bf8ad358d50da523ce9bc212ad4b9a2b00d41c7e70c058af8b87195ff159a1b8c6b25ac99e833fa08e21b59945ba68973d5c3bac0cca576ec1b3a0681c8b8616309569a52b46ab8176"], 0x28}}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000500), 0x4) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') 20:22:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f8571") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f8571") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) [ 133.418343] mmap: syz-executor3 (7438) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 20:22:47 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x4) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000017c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f0000001800)={@empty, @remote}, 0x8) close(r0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x801) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000001680)={0x8, {{0xa, 0x4e23, 0x8, @local, 0x2}}, {{0xa, 0x4e23, 0x1, @loopback, 0x100000001}}}, 0x108) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) write$P9_RRENAME(r3, &(0x7f0000000080)={0x7}, 0x7) connect$l2tp(r2, &(0x7f0000001880)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @rand_addr=0x9}, 0x2, 0x4, 0x1, 0x1}}, 0x26) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f00000000c0)="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") syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f00000010c0)='./file0\x00', 0x4, 0x6, &(0x7f0000001500)=[{&(0x7f0000001100)="c089979c477b7a10fce32688dc489f3a476e58c6b9e18c5256b1023eaaaad87903103cb59d44967148d1e9f8ca3c32fa2a52aebd65ae7b8697f91fcd208de85d9d6b2439d78cb94e51e03acc6947ef053fc6715b00a30b939f395bf8c93be78d517bf3b18413b1f49d175f6fc627abea0254d0470cd5cc41f22e1d0fcdad22fc997f9659f8efd8d45df97868aed81e947127b38845eac9b6b92ffe58c18ddde955495910e52e671a", 0xa8}, {&(0x7f00000011c0)="9311f01481af2955788df037762c3ee8f80b54c76db03c5794486efeb9a52520ef218a63f1603f7280f86a8f488e0f16659810df47b174259d75eb70376557b1bbd0e7e2ad0389f2766908e11bfa57659be7b7653446ddd669419654ac19a47721de409e4054055d9f57128cc1a1d22c5ca1595ea0a35cf6149d4202e58c9bf2fa4e6b3fe2e018a3fa3c6ef3cae17f777716d28412e26852959afafba52e1060409b7d670dfaa7a0028445689046def252c7e06075a4ec2e07f8b7c3ce23d0a606e71f07b8", 0xc5, 0x80000000}, {&(0x7f00000012c0)="38c581264ab2aa6611cfe40cbf4620ed63e32d73fc1665340c8c0c399461b338f37312240ed6bc5a60a9cd0906259118cd62471acda857a2234635f88262118b434a2202a8b705fed3e4c9874c5eac18132123b3787a0d31f0a4080530ff39b77a0901b393251857b18e4437cc05d5516769ced64d121c362ac4653ef46237f56f38b0c022b398dd6dcf1be6371a415385e2dabe7f4a7844da32b27086202e283037894dac8e77fb2a0e71d92bcd7fc1f0f27255ee26", 0xb6, 0x7f}, {&(0x7f0000001380)="6cf83cd689a6393221d42a5445a957eb8ad27625b90a5f364e3af4a83a077b68421872c4210901251403547621b1ff686bf16d8e7d2c9a3539272e8578815eaab90178cda9200af85cbc55c1382195f44d598074f87c509c6168ccbf4b6ba4b865ee0ef1cc8a11673b9e0b99455b8a749c7fa23a631863d547185a04b460a8408189e20849d56c499c092736f829959ac181516bf60c05fc874d0ba9b10a797b7cbce6c1431f4df8116629e07cdc622a78a16653279524bbd9a09d9c58faf0fc042d12f446b82c", 0xc7, 0x6}, {&(0x7f0000001480)="7f7e66da1b7e35ccc1b037354706c247a9d76e906e926ddbe61346b8288132c7fbdf85dad44d5027aad7107f", 0x2c, 0x7fff}, {&(0x7f00000014c0)="0ed106570a66cd6e7a31f6770eec3dffd150ee925a", 0x15, 0x1}], 0x4000, &(0x7f00000015c0)={[{@noacl='noacl'}, {@space_cache_v2='space_cache=v2'}, {@check_int_data='check_int_data'}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@nodiscard='nodiscard'}, {@noenospc_debug='noenospc_debug'}]}) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000001840)) openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x400, 0x0) 20:22:47 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f857150") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:47 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') write$P9_RSTATFS(r0, &(0x7f0000000140)={0x43, 0x9, 0x1, {0xce7, 0x6ecd, 0x5, 0x3, 0x7, 0xc00000000000000, 0x8e67, 0x2981, 0x2}}, 0x43) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r1, r0, &(0x7f0000000100)=0x5d, 0x79ffffffffffff) 20:22:47 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = getpid() sched_getaffinity(r0, 0x8, &(0x7f00000000c0)) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat(r1, &(0x7f0000000240)="2e2f636f6e74726f6cff05", 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='./file0\x00', 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x4) symlinkat(&(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)="2e2f636f6e74726f6cff0500") unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) ptrace$setregset(0x4205, r0, 0x3, &(0x7f0000000140)={&(0x7f0000000340)="0c43c383d6b37e7aa181e8296fec926d10b9fa311eee4455c77f65b62bdea566598d23ab3a770f13a6ac46d594933718b5b24caaae1a88c3c5b346784c05ec72cdc044f55fa12f0c2f3986e0826100d12dede16ac83e6d213c65db5ca9c18a53c6ee3a5b96c7785042c23cd7ee3fca", 0x6f}) 20:22:47 executing program 0: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000003c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0x0, 0x2, 0x8, 0x5, 0x0, 0xb2, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x2, 0x5, 0x400, 0x800, 0x0, 0x1, 0x80000001, 0xfffffffffffffffe, 0x8, 0x9, 0x101, 0x2, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x0, 0x0, 0x0, 0x6, 0x1ff, 0x1700000000000000}, r0, 0xc, r1, 0xb) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000380)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) 20:22:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f857150") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) [ 133.901908] syz-executor0 (7382) used greatest stack depth: 23688 bytes left 20:22:47 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') write$P9_RSTATFS(r0, &(0x7f0000000140)={0x43, 0x9, 0x1, {0xce7, 0x6ecd, 0x5, 0x3, 0x7, 0xc00000000000000, 0x8e67, 0x2981, 0x2}}, 0x43) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r1, r0, &(0x7f0000000100)=0x5d, 0x79ffffffffffff) 20:22:47 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f857150") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, r2, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:47 executing program 1: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000003c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0x0, 0x2, 0x8, 0x5, 0x0, 0xb2, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x2, 0x5, 0x400, 0x800, 0x0, 0x1, 0x80000001, 0xfffffffffffffffe, 0x8, 0x9, 0x101, 0x2, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x0, 0x0, 0x0, 0x6, 0x1ff, 0x1700000000000000}, r0, 0xc, r1, 0xb) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000380)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) 20:22:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = getpid() sched_getaffinity(r0, 0x8, &(0x7f00000000c0)) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat(r1, &(0x7f0000000240)="2e2f636f6e74726f6cff05", 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='./file0\x00', 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x4) symlinkat(&(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)="2e2f636f6e74726f6cff0500") unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) ptrace$setregset(0x4205, r0, 0x3, &(0x7f0000000140)={&(0x7f0000000340)="0c43c383d6b37e7aa181e8296fec926d10b9fa311eee4455c77f65b62bdea566598d23ab3a770f13a6ac46d594933718b5b24caaae1a88c3c5b346784c05ec72cdc044f55fa12f0c2f3986e0826100d12dede16ac83e6d213c65db5ca9c18a53c6ee3a5b96c7785042c23cd7ee3fca", 0x6f}) 20:22:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) keyctl$get_security(0x11, r1, &(0x7f000027e000)=""/87, 0x7f07bdf4) [ 136.987085] IPVS: Creating netns size=2536 id=9 [ 137.162517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 137.176874] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 137.233669] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.248214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.305949] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 137.319593] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 137.334078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.349666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.045847] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 138.085593] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 138.091826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.098469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 20:22:51 executing program 5: r0 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write$cgroup_int(r0, &(0x7f00000004c0), 0x12) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000004, 0x11, r0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)) 20:22:51 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000f02ffb), &(0x7f0000000000), 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) keyctl$get_security(0x11, 0x0, &(0x7f000027e000)=""/87, 0x7f07bdf4) 20:22:51 executing program 4: rt_sigaction(0x400000000000007, &(0x7f0000000040)={0x4064d4, {0xffffffbfffbff271}}, &(0x7f0000000000), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)="6f6f6d5f73627572655fa5d94af441d0bc54c3901b356f33462dcf38dc") timer_create(0x9, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000080)}}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x0, r1+10000000}}, &(0x7f00000001c0)) recvfrom$inet(r0, &(0x7f0000000280)=""/239, 0xef, 0x40012141, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000000c0)={0xc32, 0x9, 0x3ff, {0x0, 0x989680}, 0xd2aa}) 20:22:51 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = getpid() sched_getaffinity(r0, 0x8, &(0x7f00000000c0)) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat(r1, &(0x7f0000000240)="2e2f636f6e74726f6cff05", 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='./file0\x00', 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x4) symlinkat(&(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)="2e2f636f6e74726f6cff0500") unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) ptrace$setregset(0x4205, r0, 0x3, &(0x7f0000000140)={&(0x7f0000000340)="0c43c383d6b37e7aa181e8296fec926d10b9fa311eee4455c77f65b62bdea566598d23ab3a770f13a6ac46d594933718b5b24caaae1a88c3c5b346784c05ec72cdc044f55fa12f0c2f3986e0826100d12dede16ac83e6d213c65db5ca9c18a53c6ee3a5b96c7785042c23cd7ee3fca", 0x6f}) 20:22:51 executing program 1: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x12c) read(r0, &(0x7f0000000200)=""/126, 0x42aa3fc0bdeb7eb1) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc)) dup2(r0, r2) 20:22:51 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x841, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000001c0)={0x17, 0x21, 0x8, 0x1e, 0x5, 0x5, 0x6, 0x48, 0xffffffffffffffff}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000240)=ANY=[@ANYBLOB="021c8e75cb0000"], 0x10}}, 0x0) 20:22:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udplite6\x00') ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) [ 138.379674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7872 comm=syz-executor5 20:22:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) preadv(r0, &(0x7f0000001640)=[{&(0x7f00000016c0)=""/215, 0xd7}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000240)=""/149, 0x95}, {&(0x7f0000001400)=""/253, 0xfd}, {&(0x7f0000001500)=""/108, 0x6c}, {&(0x7f00000001c0)=""/11, 0xb}], 0x6, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x800}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f0000001600)={&(0x7f0000000380), 0x8}) ioctl$BLKFRASET(r1, 0x1264, &(0x7f00000000c0)=0x1) 20:22:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0xa, 0x1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result={0x0, 0x8}}], 0x30) dup2(r1, r2) 20:22:51 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000680), 0x4) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x800000000004e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xffffffff00000000]}, 0x10) recvfrom(r1, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 20:22:51 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xc9ffffffcead0024, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000810000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c900", 0x48}]) 20:22:51 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0x5a) 20:22:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0xa, 0x1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result={0x0, 0x8}}], 0x30) dup2(r1, r2) 20:22:51 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:52 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0xa, 0x1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result={0x0, 0x8}}], 0x30) dup2(r1, r2) 20:22:52 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x6) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r3, &(0x7f00000000c0)="27ee7974554c3060a38148a4e5c1778a495b41f66d56e0c1b98c1a69", 0x1c, 0x0) syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @empty, 0x5}, 0x1c) removexattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000100)=@random={'osx.', 'security.capability\x00'}) readlinkat(r3, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000500)=""/216, 0xd8) fallocate(r3, 0x0, 0x0, 0x1000f4) syz_genetlink_get_family_id$fou(&(0x7f0000000480)='fou\x00') r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000380)=""/64, 0x40) ioctl$fiemap(r1, 0x40086602, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r2]) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast2}}, 0xdf, 0x5, 0x8001, "b78694196e19e5783b277570e086fff95e9cf35d7e4dcec1fb6ff4964ba475b05de87144b27911a71f9d42d6506016e18f044ec4e94d3e19c33d4999433b547c1d67c86b867e89062467e35b70c66bde"}, 0xd8) socket(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:22:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xc9ffffffcead0024, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000810000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c900", 0x48}]) 20:22:52 executing program 3: clone(0x200, &(0x7f0000000100), &(0x7f0000000100), &(0x7f0000fef000), &(0x7f0000000180)) mknod(&(0x7f00000000c0)='./file0\x00', 0x103e, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000578fe8), &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') preadv(r0, &(0x7f00000027c0)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x8, 0x0) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540), &(0x7f00000006c0)) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200)="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", 0xe00, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001200)='keyring\x00', &(0x7f0000001240)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0x0) 20:22:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)) 20:22:54 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) mq_notify(r0, &(0x7f00000002c0)) 20:22:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000002000010000000000000000000200100000000000000000001c00000008000b000000000008000b0000000000080001000000000008000200e0000001e60050e384f051d03bd71ab5ce5964939c65e824c5c7d6cac676160502403639a7b827d933ed33348ba5fc987b95ced6dda974a1bad21d53f339924c638eda3680352ebade60518ba3207f2e3d5c74f35e12a32bd19428065ed3d99d509b3883b75bf4c5a8487c438fda2a7daed19ee1aeed43c428b291f8046f940908e5e8162e28d4cd"], 0x1}}, 0x0) 20:22:54 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x1bb, 0x401}) 20:22:54 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x3, 0x0, "84d741a64045464ef9c59fa5a7448a688b026f5cb1f9f1288b4d3b444adeca6a035858ac3561aa0d5fde51439f5202eab208028329b57c00c7a502ba18131c8f22b54eef5baf850ce75d7b2bd04441f0"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @multicast2}}, 0x20d8, 0x3, 0x7, "2e7a0c9021992a423036260724140860bee4f9b4931166ef93303f598bc9fdea201a3e67a4eef24a12c2772d60b18a818198b8e5b1973f475ebbe07ab4571240f58e107aace61357b85d22c3e32adc3f"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in, 0x0, 0x0, 0x0, "e6b68c861975c7a61118a7bee192e6e8b7c82052664b7b43e08f60ada7f21b10d52c59185bea93367629af0961e083cb1dead8efb30aa8569a33e88a06e9748a5dfa38757a2d0e11b7eafa492ef7ca4d"}, 0xd8) 20:22:54 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x80000000000, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, {0x7, @local}, 0x40, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 'ipddp0\x00'}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000280)=@add_del={0x2, &(0x7f0000000240)='yam0\x00', 0x5}) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000140)={'mangle\x00'}, &(0x7f00000001c0)=0x54) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'lo\x00', 0x7}) 20:22:54 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000440)="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", 0xfc) 20:22:54 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 20:22:54 executing program 4: pipe(&(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_getscheduler(0x0) 20:22:54 executing program 0: socket$inet6(0xa, 0x0, 0x1000000000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast1}, 0x27}) 20:22:54 executing program 1: pipe(&(0x7f0000e2aff8)={0xffffffffffffffff}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000564000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) r1 = gettid() readv(0xffffffffffffffff, &(0x7f0000616fa0), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a44000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x7) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00002cb000)={0x0, r1}) recvmsg(r3, &(0x7f000070bfc8)={&(0x7f00001d6ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r0, r3) tkill(r1, 0x16) 20:22:54 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:54 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x4058534c, &(0x7f00000003c0)) 20:22:54 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x200, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) getgroups(0x6, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x0]) r1 = getgid() getgroups(0x2, &(0x7f00000000c0)=[r0, r1]) 20:22:54 executing program 7: syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bea295", 0x0, "d20434"}}}}}}, &(0x7f0000000280)) 20:22:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0a5cc80700315f85715070") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') read(r1, &(0x7f0000000100)=""/252, 0xfc) [ 141.680833] IPVS: Creating netns size=2536 id=10 [ 141.873823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 141.889457] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 141.952550] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 141.967640] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 142.029046] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 142.045277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 142.060389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.076519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.760422] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 142.796584] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 142.802951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.809555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 20:22:56 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/keychord\x00', 0x40, 0x0) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4014}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000140)}) 20:22:56 executing program 4: pipe(&(0x7f0000000140)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000002c0)) r0 = open(&(0x7f0000000080)='.\x00', 0x200501043, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000180)={0xfffffffffffffd65}, 0x7) 20:22:56 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180), 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:56 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000080)="a4c61f803306f0a084643bd361cba466bd115eaffa4d2cfab5c4ef788ffa29b82a4f36d21a53191e2f2e74c67223bec9d0041375fe4498c38534e3621b57e1a12839a0cb78854ad01526991e28ee212e0da0e5564e9fddbef615b5a9f3fd53ecb2710a5df2a9bf128a718fe125fbb764c7dd6b75e40ff1a01a79fbeb8e95ecbd0caff36e1327aa21c3c1aa357023fd2fd4ba84c9296d20bb06cffbb6f0ca7210cc875df0157758b3fc5810161af8470f73b8fe3baa9e4def4cd51dffddbc099b0b5ff23504cac2f7e68fb643545bebdf2dfc7c7c686672181910f34a39658f1fc142", 0xe2, 0x8, &(0x7f00000001c0)={r1, r2+30000000}) pselect6(0x40, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000000040)={0x53d, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000240)={{0x567, 0x2}, {0x7, 0xff}, 0x3, 0x7, 0xff}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) 20:22:56 executing program 0: openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000000)=""/10) r0 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x541b, 0x708ffc) 20:22:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 20:22:56 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x5) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f"], 0x1) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) 20:22:56 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c20000000180c20000008100000008060006080006040001f8bf88df5b1bac1414bbaaaabaaaaa00ac1414bbb2f45306adfbcdc6f4b35349bebc2f7b23968ea9b9e98ed97651fcf7353e5eeefab6737422ff8f4bdaa2cd0b6bfa08c5e4ec5d332e9611e8ce1aee9aabb6b842ddaee5f558ccbc4e231ba7f09c8661728260329746bfd69281bf763b9b7e13c468679584af898b4e76667f5fcdd6d24e44a4dd9ad8841d1ea8b0bb79bc761366cac03a140e22346d27d17af0321b040864633fa305781fc50cc86df2ffef2130c11e"], &(0x7f0000000040)={0x3, 0x1}) 20:22:56 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") write$cgroup_pid(r1, &(0x7f0000000500), 0x12) 20:22:56 executing program 0: syz_mount_image$f2fs(&(0x7f0000000280)='f2fs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000000)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f00000001c0)={[{@two_active_logs='active_logs=2'}, {@nobarrier='nobarrier'}]}) 20:22:56 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/117) r1 = pkey_alloc(0x0, 0x3) modify_ldt$read_default(0x2, &(0x7f0000000400)=""/4096, 0x1000) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, r1) r2 = getpid() write$cgroup_pid(r0, &(0x7f0000000100)=r2, 0x12) 20:22:56 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) getpid() ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 20:22:56 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180), 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 20:22:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="d9", 0x1, 0x20008005, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) recvfrom$inet(r1, &(0x7f0000000100)=""/179, 0xc7cb61d34aa85ce7, 0x1, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x7043c5) 20:22:56 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) openat$keychord(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/keychord\x00', 0x40, 0x0) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4014}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000140)}) [ 143.256085] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 143.304592] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 143.343733] attempt to access beyond end of device 20:22:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000540)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1d6) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, "13701b21bd0a60480000000000039b3fd5cec307e8ef3d13f90d229db6926c475b78f8b2000000000f0000000000000009fba8f376589701a400", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc5, @time={0x77359400}}) sched_setattr(0x0, &(0x7f0000000300)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40a85321, &(0x7f0000000000)={0x0, 0x0, 'client1\x00', 0x0, "15d5acdcca3dd6bd", "a5f0988faa9b6b7f4f08c73923729e0bceb3378512ebe2c3b9e4f0d336724750"}) 20:22:56 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000001340)='Y', 0x1, 0x8020000005, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) r2 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000540)="5681a000b59769dafc5aa3b7d3b7ae0ebddc264dcb8c70f7563064403978f9dc106b67124926ac45f401b418fc0e6fcc285013c73f2e3b9a3dccc4c2d686c2ed882daf33d14c4013193fe5383537f896337f6046883b05121035f16b864b8ef6060b3fc7dea092b2b1dc07027f9d6a76b6654303dd59f0f16f2e3322df7bc7fa8a1eb82da6ba7e0c2ebf62a2eef819e784bbbe48e8db4e705071e27785b2cd299608d64d3b8f44ed74c222af6d9ae4975f53ca18", 0xb4, 0xfffffffffffffffa) keyctl$search(0xa, r2, &(0x7f0000000640)='ceph\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a, 0x1}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000200000002cbd3f5ac57dca9a6138ada23ae3b1a3a97000000000000a001009040000000000000000000000"], 0x1}}, 0x4000000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f00000006c0)="a57022c960708a7fd316019e08dc6c793a750d17d18fc5f347b28fbb5cfc1be50bfac52d630cc28829f43373190493b48be69b4fb97a3a0455e05037e8c4ae48ce4c49b53dd4f2bb1b9082a6fa9f8456dca25efd9a716adb59c2e688e822a54c67a2ee287cd330de3b7932b877306c1fa78345efd56aef2a03652e290e8d", 0x7e) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f00000ddff8)=0xa00, 0xffffffff) 20:22:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 20:22:56 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180), 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:56 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:22:56 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') read(r0, &(0x7f0000000040)=""/230, 0xe6) socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r0, &(0x7f0000000000)=""/56, 0x38) [ 143.366766] loop0: rw=48, want=8200, limit=20 [ 143.378675] F2FS-fs (loop0): invalid crc value [ 143.384877] attempt to access beyond end of device [ 143.390002] loop0: rw=48, want=12296, limit=20 [ 143.395243] F2FS-fs (loop0): invalid crc value 20:22:56 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) openat$keychord(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/keychord\x00', 0x40, 0x0) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4014}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000140)}) [ 143.411951] F2FS-fs (loop0): Failed to get valid F2FS checkpoint 20:22:56 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') read(r0, &(0x7f0000000040)=""/230, 0xe6) socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r0, &(0x7f0000000000)=""/56, 0x38) 20:22:56 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) r0 = getpid() syz_open_procfs(r0, &(0x7f0000000080)='net/ip6_tables_names\x00') pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) [ 143.437894] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 143.448916] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 143.480315] attempt to access beyond end of device [ 143.493295] loop0: rw=48, want=8200, limit=20 [ 143.507827] F2FS-fs (loop0): invalid crc value [ 143.518430] attempt to access beyond end of device [ 143.529538] loop0: rw=48, want=12296, limit=20 [ 143.541893] F2FS-fs (loop0): invalid crc value [ 143.549143] F2FS-fs (loop0): Failed to get valid F2FS checkpoint 20:22:57 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7}, 0x7) ftruncate(r1, 0x8200) 20:22:57 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 20:22:57 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a699fd6ec1f89c9b", 0x77, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:57 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') read(r0, &(0x7f0000000040)=""/230, 0xe6) socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r0, &(0x7f0000000000)=""/56, 0x38) 20:22:57 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x5) 20:22:57 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) openat$keychord(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/keychord\x00', 0x40, 0x0) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4014}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000140)}) 20:22:57 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x80000000040407e, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x7) [ 143.588298] attempt to access beyond end of device [ 143.593401] loop0: rw=48, want=8200, limit=20 [ 143.598052] attempt to access beyond end of device [ 143.603296] loop0: rw=48, want=12296, limit=20 [ 143.608076] attempt to access beyond end of device [ 143.613168] loop0: rw=48, want=8200, limit=20 [ 143.617717] attempt to access beyond end of device [ 143.622692] loop0: rw=48, want=12296, limit=20 20:22:57 executing program 5: 20:22:57 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') read(r0, &(0x7f0000000040)=""/230, 0xe6) socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r0, &(0x7f0000000000)=""/56, 0x38) 20:22:57 executing program 0: 20:22:57 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 20:22:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 20:22:57 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:57 executing program 1: 20:22:57 executing program 4: 20:22:57 executing program 0: 20:22:57 executing program 1: 20:22:57 executing program 4: 20:22:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 20:22:57 executing program 5: 20:22:57 executing program 0: 20:22:57 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') read(r0, &(0x7f0000000040)=""/230, 0xe6) read(r0, &(0x7f0000000000)=""/56, 0x38) 20:22:57 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb40100", 0x3c, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:57 executing program 1: 20:22:57 executing program 5: 20:22:57 executing program 4: 20:22:57 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x50000, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0x2, 0x5, 0x9, 0xfb75}) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f0000000080)={&(0x7f0000000380), 0x8}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x802, 0x0) 20:22:57 executing program 0: 20:22:57 executing program 5: 20:22:57 executing program 1: 20:22:57 executing program 0: 20:22:57 executing program 4: 20:22:57 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb40100", 0x3c, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 20:22:57 executing program 5: 20:22:57 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) sched_rr_get_interval(r1, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x5, @local, 0x6}, 0x1c) sched_rr_get_interval(r1, &(0x7f0000000140)) 20:22:57 executing program 1: 20:22:57 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') read(r0, &(0x7f0000000040)=""/230, 0xe6) read(r0, &(0x7f0000000000)=""/56, 0x38) 20:22:57 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb40100", 0x3c, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:57 executing program 5: 20:22:57 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 20:22:57 executing program 4: 20:22:57 executing program 0: 20:22:57 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') read(r0, &(0x7f0000000040)=""/230, 0xe6) read(r0, &(0x7f0000000000)=""/56, 0x38) 20:22:57 executing program 1: 20:22:57 executing program 4: 20:22:57 executing program 0: 20:22:57 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 20:22:57 executing program 5: 20:22:57 executing program 4: 20:22:57 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) socket$inet6(0xa, 0x804, 0x7fffffff) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:22:57 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff", 0x5a, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:57 executing program 1: 20:22:57 executing program 5: 20:22:57 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r0, &(0x7f0000000000)=""/56, 0x38) 20:22:57 executing program 0: 20:22:58 executing program 5: 20:22:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r2, &(0x7f0000001200), 0x1000) 20:22:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 20:22:58 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff", 0x5a, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:58 executing program 4: 20:22:58 executing program 5: 20:22:58 executing program 0: 20:22:58 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r0, &(0x7f0000000000)=""/56, 0x38) 20:22:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 20:22:58 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) dup2(r0, r0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x4, 0x5, 0x5, 0x1, 0x80000000}) 20:22:58 executing program 4: 20:22:58 executing program 0: 20:22:58 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff", 0x5a, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r2, &(0x7f0000001200), 0x1000) 20:22:58 executing program 5: 20:22:58 executing program 4: 20:22:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 20:22:58 executing program 0: 20:22:58 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r0, &(0x7f0000000000)=""/56, 0x38) 20:22:58 executing program 5: 20:22:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r2, &(0x7f0000001200), 0x1000) 20:22:58 executing program 4: 20:22:58 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1", 0x69, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:58 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x4, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:22:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 20:22:58 executing program 0: 20:22:58 executing program 5: 20:22:58 executing program 7: read(0xffffffffffffffff, &(0x7f0000000040)=""/230, 0xe6) socket$inet_icmp_raw(0x2, 0x3, 0x1) read(0xffffffffffffffff, &(0x7f0000000000)=""/56, 0x38) 20:22:58 executing program 4: 20:22:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r2, &(0x7f0000001200), 0x1000) 20:22:58 executing program 5: 20:22:58 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1", 0x69, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:58 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) write$selinux_access(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='system_u:object_r:fsadm_lof_t:s0 /usr/lir/thy/miol-5 00000000000000000008\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5b) pselect6(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, &(0x7f0000000040), &(0x7f0000000300)={0x0, 0xffffffffffffffff}, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380)={0x80}, 0x8}) 20:22:58 executing program 4: 20:22:58 executing program 0: 20:22:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 20:22:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000001200), 0x1000) 20:22:58 executing program 7: read(0xffffffffffffffff, &(0x7f0000000040)=""/230, 0xe6) socket$inet_icmp_raw(0x2, 0x3, 0x1) read(0xffffffffffffffff, &(0x7f0000000000)=""/56, 0x38) 20:22:58 executing program 5: 20:22:58 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1", 0x69, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:58 executing program 0: 20:22:58 executing program 4: 20:22:58 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1f, 0x400, 0x6}, {{r1, r2/1000+30000}, 0x17, 0x4, 0x300000000000000}, {{0x77359400}, 0x12, 0x1, 0x1f}, {{0x0, 0x2710}, 0x16, 0x92c, 0xc206}, {{0x0, 0x2710}, 0x0, 0x5, 0x1ff}, {{0x77359400}, 0x1f, 0x9b, 0x101}, {{r3, r4/1000+10000}, 0x14, 0x2, 0x7fff}], 0xa8) 20:22:58 executing program 7: read(0xffffffffffffffff, &(0x7f0000000040)=""/230, 0xe6) socket$inet_icmp_raw(0x2, 0x3, 0x1) read(0xffffffffffffffff, &(0x7f0000000000)=""/56, 0x38) 20:22:58 executing program 5: 20:22:58 executing program 4: 20:22:58 executing program 0: 20:22:58 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) 20:22:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 20:22:58 executing program 0: 20:22:58 executing program 5: 20:22:58 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564fdf62a6", 0x70, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:58 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/icmp6\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) 20:22:58 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') read(0xffffffffffffffff, &(0x7f0000000040)=""/230, 0xe6) socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r0, &(0x7f0000000000)=""/56, 0x38) 20:22:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:22:58 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') lseek(r0, 0x0, 0x0) 20:22:58 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) sync() 20:22:58 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) 20:22:58 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1", 0x69, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:58 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') read(0xffffffffffffffff, &(0x7f0000000040)=""/230, 0xe6) socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r0, &(0x7f0000000000)=""/56, 0x38) 20:22:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0x3}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000300)="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", 0x308) [ 145.198676] binder: 8766:8771 got transaction with invalid offsets size, 17 [ 145.229142] binder: 8766:8771 transaction failed 29201/-22, size 40-17 line 3172 20:22:58 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') read(0xffffffffffffffff, &(0x7f0000000040)=""/230, 0xe6) socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r0, &(0x7f0000000000)=""/56, 0x38) 20:22:58 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) 20:22:58 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xd, 0x0, 0x0, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast2}}}}}, &(0x7f0000000180)) 20:22:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 20:22:58 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1", 0x69, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) [ 145.275683] binder_alloc: binder_alloc_mmap_handler: 8766 20000000-20002000 already mapped failed -16 [ 145.293372] binder: BINDER_SET_CONTEXT_MGR already set [ 145.298843] binder: 8766:8771 ioctl 40046207 0 returned -16 20:22:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000003b40)=0x2665, 0x4) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @local}, 0x1c) 20:22:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) 20:22:58 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') read(r0, &(0x7f0000000040)=""/230, 0xe6) socket$inet_icmp_raw(0x2, 0x3, 0x1) read(0xffffffffffffffff, &(0x7f0000000000)=""/56, 0x38) [ 145.312844] binder_alloc: 8766: binder_alloc_buf, no vma 20:22:58 executing program 2: r0 = creat(&(0x7f0000000540)='./file0\x00', 0x8) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) get_robust_list(r1, &(0x7f0000000280)=&(0x7f0000000240)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)}}, &(0x7f00000002c0)=0x18) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000580)) pselect6(0x40, &(0x7f0000000000)={0x8, 0x4, 0x0, 0x0, 0x3, 0x0, 0x10}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfe}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x101000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x105) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000300)) [ 145.312865] binder: 8766:8792 transaction failed 29189/-3, size 40-17 line 3136 20:22:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:22:58 executing program 5: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000100)="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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4a) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x39a191, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) 20:22:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) 20:22:58 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1", 0x69, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:58 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) write$input_event(r0, &(0x7f0000000140)={{0x0, 0x7530}, 0x12, 0x7, 0xb2}, 0xfffffffffffffffa) ioctl$int_out(r0, 0x2, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:22:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000200)="0a5cc80700315f85715070") [ 145.499976] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 145.519286] binder: 8840:8843 got transaction with invalid offsets size, 17 [ 145.526599] binder: 8840:8843 transaction failed 29201/-22, size 40-17 line 3172 20:22:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0x3}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000300)="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", 0x308) 20:22:59 executing program 7: 20:22:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) 20:22:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)) 20:22:59 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf564f", 0x6d, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:22:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:22:59 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89bd, &(0x7f0000000080)={'bond0\x00', @ifru_flags=0x2400}) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:22:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) 20:22:59 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={&(0x7f00003c7ff4), 0xc, &(0x7f0000000000)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 20:22:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) 20:22:59 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cf", 0x6a, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) [ 146.099362] binder: 8861:8866 got transaction with invalid offsets size, 17 [ 146.108421] binder: 8861:8866 transaction failed 29201/-22, size 40-17 line 3172 20:22:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xc9ffffffcead0100, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000810000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) 20:22:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:22:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) 20:22:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)) 20:22:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r1 = accept4(r0, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f0000000180)=0x80, 0x80000) bind(r1, &(0x7f00000001c0)=@llc={0x1a, 0x104, 0x1, 0x20, 0x100000000, 0x16d, @dev={[], 0xa}}, 0x80) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) [ 146.323854] binder: 8896:8906 got transaction with invalid offsets size, 17 [ 146.333630] binder: 8896:8906 transaction failed 29201/-22, size 40-17 line 3172 [ 146.354034] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 146.367366] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 146.373863] loop5: p1 p2 p3 p4 20:23:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0x3}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000300)="7b987b577425147e1f639df91e4f9be0acc155f282811c1275db5d2f016eda6bb51e55045450222d2e5bc4a85af087a5664fb7023cdf5f73cab4f7bb3284c5ffde954038e26b3b71998b7730c9da389aa152faa8651fce0d00dabb7e700d0f11c239e0f8ad8ece7d2e093db9589bfb5edd97e5d9733859697eaea6a25211e64b13cb7de150a3de341e093f3c2a4f3e5649cc969a077fa90de73374634a3a955fcd24b5a21e762b98096cb2207129fd7ee79644ebe72279a95b9c05b796cec92cd966959736cdb902017b096141335f4a9bc2080bca7175626ad36b21929d0b05494f454f9da8506877c8e53b111321f9dad657bf6ce6e57f24c647217c6747a069838fd6d6639edfea046a62ba34cb7067bb1f0963c732da7d1ffa7776d355a3d6f8fd5f93aaacc267459026002e04a29a2898cbbdbe21759fe23f8ddd3fcbb3e2a935aa30d79d37b74a45fe01c85a4ee6354e85bf8aa32081377f1dc602883ec6cad00d403a86b8e299c3344d82b495e6944369f6d312810220308f9f3e2c860c664747dec96cd3b1ab1882639a9ad5bc18a58f9f8d2f33b75f327befad0b658f811818b9d51d24f2570c648b81e74d461ce6a76cb49d4e9907d55dfc7a5c5100ff56ca9c5b34ca4a73045068b255988cbfdd556cb7ab8b637a6314297c6bf5cd50458d8f2ab5b70889991fbbd84200ec14efaa2f2e98cc2889fd9079dd9ae70ed8cfc069683605f8f87ad6d039184493d0feb768853675d978cfd09e7af2d88f89b67007f6ee672d29662d6e5670d8980984752e3b63eb24066185e696cfb8cc9a8f5f8a2c4af1dcc8e08644eda101477787ada1f9f1dd884bf360a19c55d5e7618dc2aad309c2841f319e6c61e335ff1bbd538f5d4dfb9440c8c4a327ed6ab33b9997b9190040dcc6c98b7f26e392d6c36983273e3c3688a8674a06299a796afd5187fadbfec8bf2e8ffb562848acb88a2a7d3888e31dfeadd57c729b93a986261594363b31cc58d6c12df9f8d93ae8e6d8ca02f5c5b378f01556624ffd68630aa02ef94aecc995a2b68e6467d2b4c263eb4c0c38389cea7dede35950370f24a2b60e205ac7a2", 0x308) 20:23:00 executing program 7: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/234, 0x2ff) 20:23:00 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cf", 0x6a, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:23:00 executing program 1: r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) 20:23:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)) 20:23:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:23:00 executing program 2: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="2a98b3fd06a8a1f0758e84f49288b223", 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x800000000008}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f0000000080)={&(0x7f0000000380), 0x8}) 20:23:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xc9ffffffcead0100, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000810000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) 20:23:00 executing program 1: r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) 20:23:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:23:00 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cf", 0x6a, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:23:00 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) r1 = gettid() setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x5, 0xed0, [0x0, 0x20000400, 0x20000518, 0x200006a0], 0x0, &(0x7f0000000140), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x21, 0xdafe, 'veth1\x00', 'bcsf0\x00', 'bond_slave_0\x00', 'veth0_to_bridge\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @dev={[], 0x17}, [0xff, 0xff, 0xff, 0xff, 0x918a244f83c53fc9, 0xff], 0x70, 0x70, 0xe8}}, @common=@nflog={'nflog\x00', 0x50, {{0x7ff, 0x101, 0x100, 0x0, 0x0, "e1a38b5feb49596b3e4f7b2239cfdaaa6d67af9a7c78464663d98b901c87e67a3f78cd376361e723335437488d43740ed5c8325526620cad5fc2150216c73ec1"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x13, 0x20, 0x8867, 'ip6_vti0\x00', 'bond_slave_0\x00', 'ipddp0\x00', 'veth1_to_bridge\x00', @broadcast, [0x0, 0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x70, 0x108, 0x158}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0xfffffffffffffffd, 0x2}}}, @common=@ERROR={'ERROR\x00', 0x20, {"9534973709a49fc1cb5691e5493c81760521b8ffe13232cd6228851beb11"}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x5, 'syz0\x00', 0x81}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x13, 0x0, 0xe80f, 'bpq0\x00', 'nr0\x00', 'syz_tun\x00', 'bridge_slave_1\x00', @random="9436673b3343", [0xff, 0xff, 0x0, 0xff, 0xff], @dev={[], 0x1d}, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0xf8, 0x170}, [@common=@dnat={'dnat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7, 0x1ff}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x3, 0xee5, 0x8, 0x0, 0x0, "800b94e645710d1a10a9cd4b1b91b8be6d146836543d36646eee66db62e02c67d5e3586a220315ca128deb4d196e5d4ad068f411590c43ec8835b8cbebd56207"}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{{{0x9, 0x0, 0x6003, 'bond_slave_1\x00', 'eql\x00', 'ifb0\x00', 'tunl0\x00', @remote, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @dev={[], 0x12}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0xb0, 0xf8, 0x128, [@time={'time\x00', 0x18, {{0x0, 0x200, 0xed4b, 0x27f7, 0x4, 0x1f, 0x2}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0xea, 0x101, 0x9}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}}, {{{0x7, 0x10, 0x805, 'dummy0\x00', 'bond_slave_0\x00', 'veth1\x00', 'ifb0\x00', @local, [0xff], @random="42a7801f9293", [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x900, 0x900, 0x938, [@among={'among\x00', 0x868, {{0x9, 0x1, 0x1, {[0x327, 0x7, 0x7ff, 0x8000, 0xa951, 0x1, 0x200, 0x3, 0x9, 0x7, 0x8, 0x27, 0xffe000000, 0x400, 0x3453, 0x7, 0x10001, 0xffffffff, 0x6, 0x3e, 0x8, 0x101, 0x3, 0x0, 0x7fa1, 0x80000001, 0x1, 0xffffffff7fffffff, 0x7, 0x8, 0x40, 0x2, 0x0, 0x3, 0x7, 0x8, 0x2, 0x4, 0x4, 0x1, 0x7f, 0x9, 0x80000001, 0xffffffffffff6520, 0xff, 0x3, 0x1ff, 0x1, 0x80000000, 0x2, 0x43, 0x1, 0x4, 0x0, 0x1, 0x6, 0x5, 0x125, 0xffffffff, 0xffffffffffffffe1, 0x101, 0x9, 0xffffffffffffff77, 0x3, 0x0, 0x9, 0x100, 0x1000, 0xa5b, 0x81, 0xdf, 0x0, 0xfffffffffffffb4f, 0x12000000, 0xffff, 0x3, 0x7, 0x2, 0x7, 0x3, 0xa3, 0x80000001, 0xb6e1, 0x6, 0x7, 0x2f6c80000000000, 0x1, 0x2, 0xbd, 0xffffffff7fffffff, 0x5f, 0x3, 0x1f, 0x2, 0x3, 0x3f, 0x8cd7, 0x400, 0x81, 0x20, 0xfffffffffffffffa, 0x16ba, 0x6, 0x1000, 0x800000, 0x0, 0x3, 0x7f, 0x4, 0x5, 0x5, 0x9, 0xe9d, 0x0, 0x3, 0x80000001, 0x10001, 0x1, 0x2, 0x2, 0x500, 0x1c0000000000000, 0x0, 0x44, 0xffffffff80000000, 0x6, 0x1, 0x4583, 0x0, 0xffffffff, 0x0, 0xc00000000, 0x4, 0x1e, 0x2, 0x7, 0xffffffffffff8001, 0x7b, 0x9, 0x6, 0x8, 0x1, 0x5, 0xea4d, 0x7, 0x6, 0x7, 0x85, 0x8, 0x33, 0x6, 0xffffffff, 0x1, 0x100, 0x8000000000, 0x1, 0x1, 0x5, 0xfffffffffffffff7, 0x2, 0x8, 0x400, 0x0, 0x0, 0x2, 0x1f, 0x6, 0x7fff, 0x9, 0x1ff, 0x1, 0x7, 0x100, 0x80000001, 0x0, 0x1f, 0x10000000000000, 0x1ff, 0x4, 0x5, 0x3ff, 0xa98d, 0x8, 0x3f, 0x0, 0x2, 0x80000000, 0x8, 0x3, 0x9e95, 0x2, 0x8, 0x7, 0x8, 0x3717, 0x20, 0x9, 0x4, 0x0, 0xffffffffffffff81, 0x4, 0x7, 0x869, 0x815, 0x8, 0xffff, 0x7524c900, 0x5, 0x200, 0x2, 0xc, 0x1, 0x10001, 0x5, 0x80000000, 0x5, 0x6, 0x3a1, 0x2, 0x1cd715f3, 0x7a4, 0x1, 0x447, 0x10001, 0x10000, 0x4, 0x2, 0x3, 0x1, 0x200, 0x1f, 0x8001, 0x7, 0x6, 0xc32, 0x5a48, 0x95b4, 0x7, 0x400, 0x6, 0x43b1, 0x9, 0x80000000, 0x2, 0xc6a2, 0xc4fd, 0x9, 0x3, 0x401, 0x1f, 0x5, 0x80000, 0x3, 0xa, 0xffff, 0x8, 0x100000001], 0x5, [{[0xbd85, 0x3], @dev={0xac, 0x14, 0x14, 0x12}}, {[0x48d, 0x1c220cf9], @local}, {[0x400, 0x100]}, {[0x1ff, 0x5]}, {[0x2, 0x6], @local}]}, {[0x0, 0x3fb, 0x9, 0x6, 0x1, 0x100, 0x75fbf820, 0x2, 0x7, 0x8, 0xe3, 0x9, 0x800000000, 0x0, 0xe3, 0x4, 0x4, 0x5, 0x9, 0x1, 0x6, 0xa, 0x2, 0x1, 0xc03, 0x100, 0x4, 0x65, 0x2, 0x0, 0x5f8, 0xe3e, 0x52249ed0, 0xfff, 0x1, 0x20, 0x1b8c, 0xffff, 0x8, 0x7, 0xffffffffffffffff, 0xffff, 0xe9a, 0x2, 0x6, 0x7f, 0xc9f0, 0x1, 0x7f, 0xa82c, 0x1, 0x2, 0x5, 0x9, 0x5, 0xfffffffffffffffc, 0x23, 0x5a6e, 0x1ff, 0x46e, 0x7a9, 0x3, 0x3, 0x6, 0x27bb, 0x800, 0x7d, 0x6, 0x6, 0x5, 0x6, 0x8, 0x8, 0x9, 0x1, 0x0, 0x2, 0x7ff, 0x5c, 0xea, 0x7f, 0x2, 0x1, 0x6, 0x11a, 0x8e6, 0xfffffffffffffff7, 0x1f4, 0x6a4, 0x2, 0x68bd, 0x3, 0xfffffffffffff500, 0x81, 0x7, 0x9, 0x7, 0x20, 0x3, 0x8000, 0x45bb, 0x7b8, 0x9, 0x6, 0x2, 0xf5, 0x2, 0x6, 0x38dd, 0x80000001, 0x6, 0xff, 0x4, 0x7f, 0x100, 0x5, 0x925cc61, 0xb1f3, 0x9, 0x1, 0xce, 0x0, 0xff, 0x81, 0x4, 0x9, 0x3, 0x5, 0xf4a, 0x10001, 0x0, 0x261f, 0x2, 0x1, 0x2, 0x7ff, 0x1, 0x9, 0xffffffffffffe8a5, 0x80000000, 0x9, 0x0, 0x0, 0x5, 0x40, 0xffff, 0x1, 0x8, 0x1, 0x2, 0x1000, 0xffffffffffffff81, 0x6, 0xb76, 0x0, 0x0, 0x6, 0x7fff, 0x1, 0x4484, 0x80, 0xa, 0x4, 0x1, 0x4, 0xffff, 0x5, 0x400, 0x0, 0x3f, 0x9, 0x1, 0xff, 0x5, 0x0, 0x100000001, 0x1, 0x8, 0x3, 0x401, 0x5, 0x0, 0xfffffffffffffffc, 0x2, 0x7, 0x8001, 0x7fff, 0x82, 0x94f, 0x1, 0x6, 0x9, 0x80000000, 0x0, 0x8001, 0x6, 0x6, 0x6, 0x80000001, 0x7, 0xfffffffffffffffb, 0x10001, 0x0, 0x6, 0x7, 0x4, 0x100, 0xd3, 0xfffffffffffffff8, 0x2, 0x7fffffff, 0x3, 0x80, 0x4, 0x9, 0x2, 0x6, 0x8, 0xffffffff, 0x80000001, 0x9, 0x9, 0x8, 0x77687ac, 0xb5e1, 0x7, 0x6, 0x0, 0x8, 0x2, 0x7f, 0x3, 0x1, 0x2, 0x10001, 0x0, 0xad, 0x4, 0x2, 0x53bc, 0x4, 0x6d9, 0xd44f, 0x5, 0x0, 0x4, 0x2504, 0x3f, 0x91bbb7, 0x0, 0x3, 0x81, 0x0, 0x3, 0x0, 0x401, 0x8001], 0x1, [{[0x3, 0x6], @remote}]}}}}]}}, @common=@dnat={'dnat\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}}]}]}, 0xf48) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x8, 0x800, 0x9, 0x6, 0x0, 0x7, 0x100, 0xe, 0x8, 0x0, 0x6, 0x8000, 0x3, 0x4, 0x382, 0xffff, 0x2, 0x5, 0x1a78, 0x6, 0x5, 0x8, 0x7400000000000000, 0x2, 0x2, 0x3, 0x7fff, 0x5, 0x1, 0x5, 0x8, 0x1ff, 0x1ff, 0x5, 0x4, 0x2, 0x0, 0xe0, 0x3, @perf_bp={&(0x7f0000000080), 0x4}, 0x800, 0x1, 0x80, 0x7, 0x2, 0x0, 0x1}, r1, 0x8, r0, 0x3) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:23:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc8070031") [ 146.902519] binder: 8926:8928 transaction failed 29189/-22, size 40-17 line 3013 20:23:00 executing program 1: r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) 20:23:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:23:00 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf56", 0x6c, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) [ 146.975197] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 146.980736] binder: 8948:8954 transaction failed 29189/-22, size 40-17 line 3013 [ 147.017565] binder: 8957:8959 transaction failed 29189/-22, size 40-17 line 3013 [ 147.059537] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 147.068915] loop5: p1 p2 p3 p4 20:23:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0x3}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000300)="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", 0x308) 20:23:01 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000400), &(0x7f0000000440)) 20:23:01 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc8070031") 20:23:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:23:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x0, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r2, &(0x7f0000001200), 0x1000) 20:23:01 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf", 0x6b, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:23:01 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:23:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getflags(r0, 0x5) 20:23:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:23:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x0, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r2, &(0x7f0000001200), 0x1000) 20:23:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) 20:23:01 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x286200, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:23:01 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc8070031") [ 147.923948] binder_alloc: 8983: binder_alloc_buf, no vma [ 147.934770] binder: 8983:8985 transaction failed 29189/-3, size 40-17 line 3136 20:23:01 executing program 7: fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) recvmsg(r0, &(0x7f0000001600)={&(0x7f00000001c0)=@nfc, 0xb47c, &(0x7f0000000000), 0x0, &(0x7f0000001580)=""/106, 0xfffffffffffffe73}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000000c0), 0x400000000000254, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x0) 20:23:01 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf", 0x6b, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:23:01 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x200, 0x0) pselect6(0xfffffffffffffeb1, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x10, 0xffffffffffffff00}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) [ 148.022472] binder_alloc: 9008: binder_alloc_buf, no vma [ 148.055601] binder: 9008:9012 transaction failed 29189/-3, size 40-17 line 3136 20:23:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0x3}) write(r2, &(0x7f0000000300)="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", 0x308) 20:23:01 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000480)) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r0, &(0x7f0000000500)={0x90, 0x0, 0x2, [{0x82, 0x0, 0xb, 0x0, 'em1nodevem1'}, {0x0, 0x0, 0x1, 0x0, ','}, {0x0, 0x0, 0x1c, 0x0, "2b73797374656dcc6370757365746367726f7570246367726f757015"}]}, 0x90) 20:23:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x0, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r2, &(0x7f0000001200), 0x1000) 20:23:01 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f8571") 20:23:01 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf", 0x6b, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback, 0x2}, 0x1c) 20:23:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:23:01 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000080)={0x7, {{0xa, 0x4e22, 0x0, @mcast1, 0x1000}}}, 0x88) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:23:01 executing program 7: fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) recvmsg(r0, &(0x7f0000001600)={&(0x7f00000001c0)=@nfc, 0xb47c, &(0x7f0000000000), 0x0, &(0x7f0000001580)=""/106, 0xfffffffffffffe73}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000000c0), 0x400000000000254, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x0) 20:23:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:23:01 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f857150") [ 148.522017] binder_alloc: 9038: binder_alloc_buf, no vma [ 148.527554] binder: 9038:9040 transaction failed 29189/-3, size 40-17 line 3136 20:23:01 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf56", 0x6c, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x4, @loopback, 0x2}, 0x1c) 20:23:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r2, &(0x7f0000001200), 0x1000) 20:23:01 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x80000000000, @ipv4={[], [], @multicast1}, 0x1}, {0xa, 0x4e23, 0x1f6, @empty, 0x7}, 0xff, [0x2d27, 0x7, 0x0, 0x43, 0x800, 0x6, 0xffff, 0xa7f3]}, 0x5c) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000100)={{0xbf, @remote, 0x4e20, 0x0, 'fo\x00', 0x8, 0x1a66, 0x40}, {@remote, 0x4e22, 0x5, 0x9, 0x6, 0x6}}, 0x44) 20:23:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) [ 148.574165] binder: 9051:9054 transaction failed 29189/-22, size 40-17 line 3013 20:23:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000300)="0a5cc80700315f85715070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={&(0x7f00003c7ff4), 0xc, &(0x7f0000000000)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 20:23:02 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf56", 0x6c, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x4, @loopback, 0x2}, 0x1c) [ 148.672874] binder: 9071:9073 transaction failed 29189/-22, size 40-17 line 3013 20:23:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r2, &(0x7f0000000300)="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", 0x308) 20:23:02 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000480)) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r0, &(0x7f0000000500)={0x90, 0x0, 0x2, [{0x82, 0x0, 0xb, 0x0, 'em1nodevem1'}, {0x0, 0x0, 0x1, 0x0, ','}, {0x0, 0x0, 0x1c, 0x0, "2b73797374656dcc6370757365746367726f7570246367726f757015"}]}, 0x90) 20:23:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r2, &(0x7f0000001200), 0x1000) 20:23:02 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf56", 0x6c, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x4, @loopback, 0x2}, 0x1c) 20:23:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:23:02 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:23:02 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') lseek(r0, 0x0, 0x2) 20:23:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000140)=""/205, 0xfce3) 20:23:02 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2f, 0x6, 0x0, {0x0, 0x0, 0x6, 0x0, 'system'}}, 0x2f) 20:23:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r2, &(0x7f0000001200), 0x1000) 20:23:02 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf56", 0x6c, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x0, @loopback, 0x2}, 0x1c) 20:23:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:23:02 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x80000, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000080)=""/157) [ 149.355563] binder: 9099:9101 transaction failed 29189/-22, size 40-17 line 3013 20:23:02 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r2, &(0x7f0000001200), 0x1000) read$FUSE(r2, &(0x7f0000000200), 0x1000) 20:23:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:23:02 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3f00, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000400), &(0x7f0000000440)) 20:23:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r2, &(0x7f0000000300)="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", 0x308) 20:23:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) 20:23:03 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) unshare(0x20400) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x34000020) 20:23:03 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000000040)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110fdc4ef2e1118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf56", 0x6c, 0x0, &(0x7f00000002c0)={0xa, 0x200800800, 0x4, @loopback}, 0x1c) 20:23:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:23:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x93e, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) 20:23:03 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x101000, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) openat$cgroup_ro(r0, &(0x7f00000002c0)='cpuacct.usage_all\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5bce, 0xff, 0x2b, 0x3800000000, 0x2, 0x3, 0x100000000, 0x401}, &(0x7f0000000100)={0x10001, 0x8, 0x0, 0x4, 0x800, 0xd01f, 0xa0, 0xffff}, &(0x7f0000000140)={0xd9, 0x10000000, 0x9, 0xfffffffffffffc00, 0x1, 0x1f, 0x8}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={0x10000}, 0x8}) 20:23:03 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) getpid() close(r0) 20:23:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) 20:23:03 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:23:03 executing program 6: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x34000020) 20:23:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) 20:23:03 executing program 7: r0 = socket$inet(0x2, 0x3, 0xb) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) 20:23:03 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000000c0)) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 150.171851] bridge_slave_0: FDB only supports static addresses [ 150.209606] bridge_slave_0: FDB only supports static addresses 20:23:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x0, 0x0, &(0x7f0000664fc0)) sendfile(r0, r1, &(0x7f0000001300), 0x102002f01) 20:23:03 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 150.267673] binder: 9175:9188 got transaction with invalid offsets size, 17 [ 150.308727] binder: 9175:9188 transaction failed 29201/-22, size 40-17 line 3172 20:23:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(r2, &(0x7f0000000300)="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", 0x308) 20:23:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r2, &(0x7f0000001200), 0x1000) 20:23:04 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x100, 0x0) write$P9_ROPEN(r0, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x86, 0x4}, 0xffff}}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:23:04 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x100000000002, 0x0) sendto$inet6(r1, &(0x7f0000000300), 0x80, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @remote}, 0x1c) 20:23:04 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) 20:23:04 executing program 7: 20:23:04 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:23:04 executing program 5: 20:23:04 executing program 5: 20:23:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r2, &(0x7f0000001200), 0x1000) 20:23:04 executing program 7: 20:23:04 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x8) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) write(r0, &(0x7f0000000240)="84b3b43188783e5c991dd78c3eea155c3f9f958297e205f8eac9610381683b00d8eecbb2b12c57f0afab7dcab2e2343864891c269aa5decae97a76d8d58fd9c915f90e909ec70de291787e428b353485a6a439a75e461bf9e9633a4fd22ac3ae9bee5923d2f95ca1ce456977ff109a6d07d3273ca7e6a3038a439ba039a0e6679a946c6ee79383dd0ef674139724270921143d1900463415d4d066dbd777386a988e23bd", 0x289) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x210041, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000100)={'ip6tnl0\x00', 0x4}) 20:23:04 executing program 5: 20:23:04 executing program 6: [ 150.987133] binder: 9216:9220 got transaction with invalid offsets size, 17 20:23:04 executing program 7: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xc9ffffffcead0100, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="fffffff50000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) 20:23:04 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={0x888}, 0x8) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0', [{0x20, ',$ppp0'}, {}, {}, {0x20, "0f"}], 0xa, "e010db6f88fff64b46d64cbae3d09c444baabad743f4e6bd4eb85c0bfe9d9572912c002df7621a82cdd6e7f8d7146f5e91d13e0642c0ea121995e4cf61cc7cd21152d33def7bbfff96ef7e5c220936ddd7591930023aa3f4311167b782cf323ca09359deeb23bf0ff7962ca183df2ec5ff6c319bc66cfb206b419593fa918f50bbe8d07400feb48563c6b84722f51c5884fa98000ea5ded396b3589b9c713565b7b99ec52287640edf4f3648d7c4a798d367b42531d0ae28e99222ad76f5629a4d4bbaf71e2d6ef5a89f"}, 0xe0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r0, r1, 0x80000) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) [ 151.067626] binder: 9216:9220 transaction failed 29201/-22, size 40-17 line 3172 [ 151.085708] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -88 [ 151.133249] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 151.143288] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 151.149740] loop7: p1 p2 p3 p4 20:23:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0x3}) write(0xffffffffffffffff, &(0x7f0000000300)="7b987b577425147e1f639df91e4f9be0acc155f282811c1275db5d2f016eda6bb51e55045450222d2e5bc4a85af087a5664fb7023cdf5f73cab4f7bb3284c5ffde954038e26b3b71998b7730c9da389aa152faa8651fce0d00dabb7e700d0f11c239e0f8ad8ece7d2e093db9589bfb5edd97e5d9733859697eaea6a25211e64b13cb7de150a3de341e093f3c2a4f3e5649cc969a077fa90de73374634a3a955fcd24b5a21e762b98096cb2207129fd7ee79644ebe72279a95b9c05b796cec92cd966959736cdb902017b096141335f4a9bc2080bca7175626ad36b21929d0b05494f454f9da8506877c8e53b111321f9dad657bf6ce6e57f24c647217c6747a069838fd6d6639edfea046a62ba34cb7067bb1f0963c732da7d1ffa7776d355a3d6f8fd5f93aaacc267459026002e04a29a2898cbbdbe21759fe23f8ddd3fcbb3e2a935aa30d79d37b74a45fe01c85a4ee6354e85bf8aa32081377f1dc602883ec6cad00d403a86b8e299c3344d82b495e6944369f6d312810220308f9f3e2c860c664747dec96cd3b1ab1882639a9ad5bc18a58f9f8d2f33b75f327befad0b658f811818b9d51d24f2570c648b81e74d461ce6a76cb49d4e9907d55dfc7a5c5100ff56ca9c5b34ca4a73045068b255988cbfdd556cb7ab8b637a6314297c6bf5cd50458d8f2ab5b70889991fbbd84200ec14efaa2f2e98cc2889fd9079dd9ae70ed8cfc069683605f8f87ad6d039184493d0feb768853675d978cfd09e7af2d88f89b67007f6ee672d29662d6e5670d8980984752e3b63eb24066185e696cfb8cc9a8f5f8a2c4af1dcc8e08644eda101477787ada1f9f1dd884bf360a19c55d5e7618dc2aad309c2841f319e6c61e335ff1bbd538f5d4dfb9440c8c4a327ed6ab33b9997b9190040dcc6c98b7f26e392d6c36983273e3c3688a8674a06299a796afd5187fadbfec8bf2e8ffb562848acb88a2a7d3888e31dfeadd57c729b93a986261594363b31cc58d6c12df9f8d93ae8e6d8ca02f5c5b378f01556624ffd68630aa02ef94aecc995a2b68e6467d2b4c263eb4c0c38389cea7dede35950370f24a2b60e205ac7a2", 0x308) 20:23:05 executing program 5: 20:23:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r2, &(0x7f0000001200), 0x1000) 20:23:05 executing program 6: 20:23:05 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={0x888}, 0x8) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0', [{0x20, ',$ppp0'}, {}, {}, {0x20, "0f"}], 0xa, "e010db6f88fff64b46d64cbae3d09c444baabad743f4e6bd4eb85c0bfe9d9572912c002df7621a82cdd6e7f8d7146f5e91d13e0642c0ea121995e4cf61cc7cd21152d33def7bbfff96ef7e5c220936ddd7591930023aa3f4311167b782cf323ca09359deeb23bf0ff7962ca183df2ec5ff6c319bc66cfb206b419593fa918f50bbe8d07400feb48563c6b84722f51c5884fa98000ea5ded396b3589b9c713565b7b99ec52287640edf4f3648d7c4a798d367b42531d0ae28e99222ad76f5629a4d4bbaf71e2d6ef5a89f"}, 0xe0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r0, r1, 0x80000) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) 20:23:05 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x80800) ptrace$peekuser(0x3, r1, 0xfa) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xc) 20:23:05 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:23:05 executing program 7: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xc9ffffffcead0100, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="fffffff50000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) 20:23:05 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) 20:23:05 executing program 6: 20:23:05 executing program 5: 20:23:05 executing program 6: 20:23:05 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) 20:23:05 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:23:05 executing program 5: 20:23:05 executing program 6: [ 151.820090] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -88 [ 151.834977] binder: 9272:9276 got transaction with invalid offsets size, 17 [ 151.835304] binder: 9272:9276 transaction failed 29201/-22, size 40-17 line 3172 [ 151.852963] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 151.853001] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 151.853201] loop7: p1 p2 p3 p4 [ 151.901827] binder: 9291:9297 got transaction with invalid offsets size, 17 [ 151.901982] binder: 9291:9297 transaction failed 29201/-22, size 40-17 line 3172 [ 152.037785] loop_reread_partitions: partition scan of loop7 () failed (rc=-16) [ 152.045737] blk_update_request: I/O error, dev loop7, sector 1 [ 152.045759] blk_update_request: I/O error, dev loop7, sector 101 [ 152.045801] Buffer I/O error on dev loop7p2, logical block 0, async page read [ 152.045834] blk_update_request: I/O error, dev loop7, sector 105 [ 152.045839] Buffer I/O error on dev loop7p2, logical block 1, async page read [ 152.045887] blk_update_request: I/O error, dev loop7, sector 101 [ 152.045894] Buffer I/O error on dev loop7p2, logical block 0, async page read [ 152.045922] blk_update_request: I/O error, dev loop7, sector 105 [ 152.045927] Buffer I/O error on dev loop7p2, logical block 1, async page read [ 152.045966] blk_update_request: I/O error, dev loop7, sector 101 [ 152.045972] Buffer I/O error on dev loop7p2, logical block 0, async page read [ 152.045999] blk_update_request: I/O error, dev loop7, sector 105 [ 152.046005] Buffer I/O error on dev loop7p2, logical block 1, async page read [ 152.046041] blk_update_request: I/O error, dev loop7, sector 101 [ 152.046047] Buffer I/O error on dev loop7p2, logical block 0, async page read [ 152.046090] blk_update_request: I/O error, dev loop7, sector 105 [ 152.046096] Buffer I/O error on dev loop7p2, logical block 1, async page read [ 152.046136] blk_update_request: I/O error, dev loop7, sector 101 [ 152.046142] Buffer I/O error on dev loop7p2, logical block 0, async page read [ 152.046171] Buffer I/O error on dev loop7p2, logical block 1, async page read 20:23:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x0, 0x3}) write(r1, &(0x7f0000000300)="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", 0x308) 20:23:05 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x500, 0x0) mq_timedreceive(r0, &(0x7f0000000080)=""/132, 0x84, 0x100000000, &(0x7f0000000140)={0x0, 0x1c9c380}) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 20:23:05 executing program 6: 20:23:05 executing program 5: 20:23:05 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:23:05 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r1, &(0x7f0000001200), 0x1000) 20:23:05 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={0x888}, 0x8) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0', [{0x20, ',$ppp0'}, {}, {}, {0x20, "0f"}], 0xa, "e010db6f88fff64b46d64cbae3d09c444baabad743f4e6bd4eb85c0bfe9d9572912c002df7621a82cdd6e7f8d7146f5e91d13e0642c0ea121995e4cf61cc7cd21152d33def7bbfff96ef7e5c220936ddd7591930023aa3f4311167b782cf323ca09359deeb23bf0ff7962ca183df2ec5ff6c319bc66cfb206b419593fa918f50bbe8d07400feb48563c6b84722f51c5884fa98000ea5ded396b3589b9c713565b7b99ec52287640edf4f3648d7c4a798d367b42531d0ae28e99222ad76f5629a4d4bbaf71e2d6ef5a89f"}, 0xe0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r0, r1, 0x80000) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) 20:23:05 executing program 7: 20:23:05 executing program 6: 20:23:05 executing program 5: 20:23:05 executing program 7: 20:23:06 executing program 7: 20:23:06 executing program 5: 20:23:06 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={0x888}, 0x8) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0', [{0x20, ',$ppp0'}, {}, {}, {0x20, "0f"}], 0xa, "e010db6f88fff64b46d64cbae3d09c444baabad743f4e6bd4eb85c0bfe9d9572912c002df7621a82cdd6e7f8d7146f5e91d13e0642c0ea121995e4cf61cc7cd21152d33def7bbfff96ef7e5c220936ddd7591930023aa3f4311167b782cf323ca09359deeb23bf0ff7962ca183df2ec5ff6c319bc66cfb206b419593fa918f50bbe8d07400feb48563c6b84722f51c5884fa98000ea5ded396b3589b9c713565b7b99ec52287640edf4f3648d7c4a798d367b42531d0ae28e99222ad76f5629a4d4bbaf71e2d6ef5a89f"}, 0xe0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r0, r1, 0x80000) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) 20:23:06 executing program 6: [ 152.617201] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -88 20:23:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r2, &(0x7f0000001200), 0x1000) [ 152.682095] binder: 9319:9334 got transaction with invalid offsets size, 17 [ 152.689457] l2tp_core: tunl 4: sockfd_lookup(fd=4) returned -88 [ 152.739036] binder: 9319:9334 transaction failed 29201/-22, size 40-17 line 3172 20:23:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0x3}) write(r2, &(0x7f0000000300)="7b987b577425147e1f639df91e4f9be0acc155f282811c1275db5d2f016eda6bb51e55045450222d2e5bc4a85af087a5664fb7023cdf5f73cab4f7bb3284c5ffde954038e26b3b71998b7730c9da389aa152faa8651fce0d00dabb7e700d0f11c239e0f8ad8ece7d2e093db9589bfb5edd97e5d9733859697eaea6a25211e64b13cb7de150a3de341e093f3c2a4f3e5649cc969a077fa90de73374634a3a955fcd24b5a21e762b98096cb2207129fd7ee79644ebe72279a95b9c05b796cec92cd966959736cdb902017b096141335f4a9bc2080bca7175626ad36b21929d0b05494f454f9da8506877c8e53b111321f9dad657bf6ce6e57f24c647217c6747a069838fd6d6639edfea046a62ba34cb7067bb1f0963c732da7d1ffa7776d355a3d6f8fd5f93aaacc267459026002e04a29a2898cbbdbe21759fe23f8ddd3fcbb3e2a935aa30d79d37b74a45fe01c85a4ee6354e85bf8aa32081377f1dc602883ec6cad00d403a86b8e299c3344d82b495e6944369f6d312810220308f9f3e2c860c664747dec96cd3b1ab1882639a9ad5bc18a58f9f8d2f33b75f327befad0b658f811818b9d51d24f2570c648b81e74d461ce6a76cb49d4e9907d55dfc7a5c5100ff56ca9c5b34ca4a73045068b255988cbfdd556cb7ab8b637a6314297c6bf5cd50458d8f2ab5b70889991fbbd84200ec14efaa2f2e98cc2889fd9079dd9ae70ed8cfc069683605f8f87ad6d039184493d0feb768853675d978cfd09e7af2d88f89b67007f6ee672d29662d6e5670d8980984752e3b63eb24066185e696cfb8cc9a8f5f8a2c4af1dcc8e08644eda101477787ada1f9f1dd884bf360a19c55d5e7618dc2aad309c2841f319e6c61e335ff1bbd538f5d4dfb9440c8c4a327ed6ab33b9997b9190040dcc6c98b7f26e392d6c36983273e3c3688a8674a06299a796afd5187fadbfec8bf2e8ffb562848acb88a2a7d3888e31dfeadd57c729b93a986261594363b31cc58d6c12df9f8d93ae8e6d8ca02f5c5b378f01556624ffd68630aa02ef94aecc995a2b68e6467d2b4c263eb4c0c38389cea7dede35950370f24a2b60e205ac7a2", 0x308) 20:23:06 executing program 7: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) 20:23:06 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000027, 0x0) 20:23:06 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={0x888}, 0x8) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0', [{0x20, ',$ppp0'}, {}, {}, {0x20, "0f"}], 0xa, "e010db6f88fff64b46d64cbae3d09c444baabad743f4e6bd4eb85c0bfe9d9572912c002df7621a82cdd6e7f8d7146f5e91d13e0642c0ea121995e4cf61cc7cd21152d33def7bbfff96ef7e5c220936ddd7591930023aa3f4311167b782cf323ca09359deeb23bf0ff7962ca183df2ec5ff6c319bc66cfb206b419593fa918f50bbe8d07400feb48563c6b84722f51c5884fa98000ea5ded396b3589b9c713565b7b99ec52287640edf4f3648d7c4a798d367b42531d0ae28e99222ad76f5629a4d4bbaf71e2d6ef5a89f"}, 0xe0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r0, r1, 0x80000) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) 20:23:06 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000ac80), 0x400021b, 0x0) 20:23:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r2, &(0x7f0000001200), 0x1000) 20:23:06 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x0, 0xfffffffffffffffd}, &(0x7f0000000040), &(0x7f0000000300)={0xde}, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f00000002c0)={0x80}, 0x8}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/50, 0x32}, {&(0x7f0000000400)=""/225, 0xe1}, {&(0x7f0000000140)=""/51, 0x33}, {&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, 0x0) getpgrp(r1) 20:23:06 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x11, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) 20:23:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000003, 0x9) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") restart_syscall() 20:23:06 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={0x888}, 0x8) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0', [{0x20, ',$ppp0'}, {}, {}, {0x20, "0f"}], 0xa, "e010db6f88fff64b46d64cbae3d09c444baabad743f4e6bd4eb85c0bfe9d9572912c002df7621a82cdd6e7f8d7146f5e91d13e0642c0ea121995e4cf61cc7cd21152d33def7bbfff96ef7e5c220936ddd7591930023aa3f4311167b782cf323ca09359deeb23bf0ff7962ca183df2ec5ff6c319bc66cfb206b419593fa918f50bbe8d07400feb48563c6b84722f51c5884fa98000ea5ded396b3589b9c713565b7b99ec52287640edf4f3648d7c4a798d367b42531d0ae28e99222ad76f5629a4d4bbaf71e2d6ef5a89f"}, 0xe0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r0, r1, 0x80000) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) 20:23:06 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r1, &(0x7f0000000000)=0x41, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000100)) [ 153.436542] binder: 9365:9371 got transaction with invalid offsets size, 17 [ 153.472280] ------------[ cut here ]------------ [ 153.472297] WARNING: CPU: 0 PID: 3 at net/ipv4/af_inet.c:167 inet_sock_destruct+0x598/0x760 [ 153.472301] Kernel panic - not syncing: panic_on_warn set ... [ 153.472301] [ 153.472309] CPU: 0 PID: 3 Comm: ksoftirqd/0 Not tainted 4.9.124-g09eb2ba #31 [ 153.472313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.472325] ffff8801d99efa48 ffffffff81eb95e9 ffffffff83c48ac0 00000000ffffffff [ 153.472334] 0000000000000000 0000000000000000 00000000000000a7 ffff8801d99efb08 [ 153.472343] ffffffff81423eb5 0000000041b58ab3 ffffffff843bb8e8 ffffffff81423cf6 [ 153.472345] Call Trace: [ 153.472355] [] dump_stack+0xc1/0x128 [ 153.472365] [] panic+0x1bf/0x3bc [ 153.472372] [] ? add_taint.cold.6+0x16/0x16 [ 153.472382] [] ? debug_object_deactivate+0x340/0x340 [ 153.472389] [] ? __warn.cold.9+0xa6/0x17f [ 153.472397] [] ? inet_sock_destruct+0x598/0x760 [ 153.472404] [] __warn.cold.9+0xc1/0x17f [ 153.472412] [] warn_slowpath_null+0x2c/0x40 [ 153.472419] [] inet_sock_destruct+0x598/0x760 [ 153.472426] [] ? ipv4_mib_init_net+0x570/0x570 [ 153.472434] [] l2tp_tunnel_destruct+0x339/0x590 [ 153.472441] [] ? l2tp_tunnel_destruct+0x1aa/0x590 [ 153.472447] [] ? l2tp_tunnel_del_work+0x470/0x470 [ 153.472455] [] __sk_destruct+0x55/0x590 [ 153.472465] [] rcu_process_callbacks+0x8ae/0x12b0 [ 153.472472] [] ? rcu_process_callbacks+0x98e/0x12b0 [ 153.472478] [] ? sock_set_timeout+0x210/0x210 [ 153.472487] [] __do_softirq+0x210/0x940 [ 153.472495] [] ? takeover_tasklets+0x780/0x780 [ 153.472502] [] run_ksoftirqd+0x30/0x60 [ 153.472511] [] smpboot_thread_fn+0x5c9/0x900 [ 153.472518] [] ? sort_range+0x30/0x30 [ 153.472524] [] ? __kthread_parkme+0xcf/0x240 [ 153.472532] [] ? schedule+0x89/0x1b0 [ 153.472538] [] ? __kthread_parkme+0x175/0x240 [ 153.472544] [] kthread+0x26d/0x300 [ 153.472551] [] ? sort_range+0x30/0x30 [ 153.472557] [] ? kthread_park+0xa0/0xa0 [ 153.472565] [] ? __switch_to_asm+0x34/0x70 [ 153.472571] [] ? kthread_park+0xa0/0xa0 [ 153.472576] [] ? kthread_park+0xa0/0xa0 [ 153.472591] [] ret_from_fork+0x5c/0x70 [ 153.473123] Dumping ftrace buffer: [ 153.473168] (ftrace buffer empty) [ 153.473170] Kernel Offset: disabled [ 153.734009] Rebooting in 86400 seconds..