x0) 06:02:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x3ffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x84000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) [ 949.167481][T31638] binder: BINDER_SET_CONTEXT_MGR already set [ 949.167503][T31638] binder: 31612:31638 ioctl 40046207 0 returned -16 [ 949.182445][T31617] debugfs: File '31616' in directory 'proc' already present! 06:02:01 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x26f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000040)={{0x0, @addr=0x223}, 0x8, 0x7, 0x20}) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, &(0x7f0000000200)="190e3fa989e2316f4baf0441268611673fe39d53245f73653ecff131a6fb636c684f") unshare(0x40803) r1 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x98, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xd7b}}, 0xff, 0x2}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x0, 0x5, 0x5, 0x8, r2}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x1}, @mss={0x2, 0x4}, @window={0x3, 0x0, 0x7}, @mss={0x2, 0x2}], 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x240, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0xffffffffffff7fff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x420, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0xffffffff00000000}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x401}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000340)={0x81, 0x2, 0x0, 0x7, 0xffab, 0x7, 0x2, 0x7ff, r4}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @multicast1}], 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2ded48400000a3578604942fdad02024da3b6302d52971048ce1abec2a59e7737d0ffc00440bc8d1240dbceb4ea5e795cbfd642fdc3298ce182786955015dad9"], 0x0, 0xfffffdfd, 0x0}) [ 949.309518][T31648] binder: BINDER_SET_CONTEXT_MGR already set [ 949.336435][T31648] binder: 31644:31648 ioctl 40046207 0 returned -16 [ 949.383034][T31652] debugfs: File '31650' in directory 'proc' already present! [ 949.418515][T31648] binder: BINDER_SET_CONTEXT_MGR already set [ 949.442571][T31655] binder: BINDER_SET_CONTEXT_MGR already set [ 949.449479][T31648] binder: 31644:31648 ioctl 40046207 0 returned -16 [ 949.456254][T31655] binder: 31654:31655 ioctl 40046207 0 returned -16 [ 949.469711][T31652] binder_alloc: 30918: binder_alloc_buf, no vma [ 949.481273][T31655] debugfs: File '31654' in directory 'proc' already present! [ 949.560702][T31655] binder: 31654:31655 unknown command 1078521133 [ 949.577538][T31655] binder: 31654:31655 ioctl c0306201 20012000 returned -22 [ 949.593384][T31655] binder: BINDER_SET_CONTEXT_MGR already set [ 949.611882][T31655] binder: 31654:31655 ioctl 40046207 0 returned -16 06:02:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000166) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:01 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) close(r1) 06:02:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffdfd, 0x0}) 06:02:01 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x20f, 0x503000) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:01 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x3, 0x0, 0x1, 0xb3, 0x0, 0x49f6, 0xcc0, 0x2, 0x1, 0x7, 0x6, 0x7fffffff, 0x2, 0xd98, 0xffff, 0x5, 0x2, 0x9, 0x5b, 0xfff, 0x5b, 0x1f, 0x8, 0x10000, 0x8, 0x5, 0xff, 0xfffffffffffffffe, 0x100000001, 0x7, 0x10001, 0x0, 0x1000, 0x2, 0x2, 0x10001, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0x80000000}, 0x9, 0x3c89, 0xfffffffffffffff8, 0x6, 0x9, 0x7, 0x101}, r2, 0x2, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0xfffffdfd, 0x0}) [ 949.830105][T31672] debugfs: File '31671' in directory 'proc' already present! [ 949.847736][T31675] binder: BINDER_SET_CONTEXT_MGR already set [ 949.855573][T31675] binder: 31667:31675 ioctl 40046207 0 returned -16 [ 949.865878][T31676] debugfs: File '31669' in directory 'proc' already present! 06:02:01 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 949.878470][T31672] binder: 31671:31672 unknown command 0 [ 949.890263][T31676] binder_alloc: 30918: binder_alloc_buf, no vma [ 949.914339][T31672] binder: 31671:31672 ioctl c0306201 20012000 returned -22 06:02:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fchmod(r2, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000580)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000015c0)={@dev, @empty, 0x0}, &(0x7f0000001600)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001640)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001680)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000001780)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002700)={'vcan0\x00', 0x0}) accept$packet(r1, &(0x7f0000002800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002840)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000002880)={@remote, 0x0}, &(0x7f00000028c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002900)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000002a00)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000002a80)={0x0, @empty, @loopback}, &(0x7f0000002ac0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002b00)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000002c00)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002c40)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000002d40)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003d80)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000003e80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003ec0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003f00)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000004000)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000005200)={@multicast2, @remote, 0x0}, &(0x7f0000005240)=0xc) getpeername$packet(r1, &(0x7f0000005280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000052c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000005300)={'vcan0\x00', 0x0}) recvmsg$kcm(r1, &(0x7f00000058c0)={&(0x7f0000005340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000005740)=[{&(0x7f00000053c0)=""/232, 0xe8}, {&(0x7f00000054c0)=""/8, 0x8}, {&(0x7f0000005500)=""/252, 0xfc}, {&(0x7f0000005600)=""/63, 0x3f}, {&(0x7f0000005640)=""/236, 0xec}], 0x5, &(0x7f00000057c0)=""/208, 0xd0}, 0x40) accept$packet(r1, &(0x7f0000005900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005940)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000005a00)={'vcan0\x00', 0x0}) getpeername$packet(r1, &(0x7f0000006f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000006f80)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000006fc0)={@empty, @rand_addr, 0x0}, &(0x7f0000007000)=0xc) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000007580)={'vlan0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000075c0)={@remote, 0x0}, &(0x7f0000007600)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000007640)={'yam0\x00', 0x0}) getpeername$packet(r1, &(0x7f0000007800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000007840)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000007880)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000008340)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000008440)=0xe8) accept4$packet(r1, &(0x7f0000008480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000084c0)=0x14, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000008500)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000008600)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000009040)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000009000)={&(0x7f0000008640)={0x9bc, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xbc, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7ff0}}}]}}, {{0x8, 0x1, r7}, {0x168, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x0, 0xff, 0x6, 0x5}, {0x0, 0x2, 0x9, 0x2}, {0x1, 0xd30f, 0x8, 0x1f}, {0x6, 0x6, 0x7ff, 0x48000}, {0x9, 0x6, 0x0, 0x5}, {0xfff, 0x6f, 0x10000, 0x7}, {0xffffffffffffffc1, 0x9, 0x5, 0x4}, {0x9, 0x4, 0x20, 0xe0b8}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x1ec, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r11}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x800, 0x535, 0x8000, 0x200}, {0x20c, 0xffffffff00000001, 0x5, 0x9}, {0x800, 0x8eb, 0x531, 0x8}, {0x2, 0x3, 0x5, 0xffff}, {0xfff, 0x40, 0x5, 0x2}, {0x800, 0x1, 0x5, 0x3d3d}, {0x1, 0x1, 0x200, 0x1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r12}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x100000001}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x1ac, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r19}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r21}, {0x12c, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r23}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x8, 0x4510, 0x3, 0x1}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r24}}}]}}, {{0x8, 0x1, r25}, {0x12c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r26}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r27}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r28}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r29}}}]}}, {{0x8, 0x1, r30}, {0xbc, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r31}}}]}}, {{0x8, 0x1, r32}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r33}}}]}}, {{0x8, 0x1, r34}, {0x4}}]}, 0x9bc}}, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) [ 949.997112][T31675] binder: BINDER_SET_CONTEXT_MGR already set 06:02:01 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="c1f8df106559eb283930ad0b282b10533e58d8569d14b2c38595725c799da5cd85357b9b64abe33ff0d3a1f14f5b530873c147e99434c72bce51503b98e65a5cc9d035fb90c1eadfdf1c3d2f8b932bf2674c2e6909269f1f7ae825cef78add73e6527940d0950d5a943cd5cc84db708798a5971d76edf8883f5765ee00006b1fab9d263dc34a7f0b4c508316b44adff0de7aa40b92043420d51f4788d2550b1504a90dfd63299d2879988736ea884bbb8db562318cc6c4cf6a830d0ce1f9feb6d3bf01a1a94005cb58bf612e8c50fc772999ee0683a155e7be358c60eaa4b43a4364a7fddd202cb98f4985be0f25b5296c96a48237e8f37ddc374b9a465490d0") r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x8, 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4002100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x31, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1101004000000000"], 0x0, 0xfffffdfd, 0x0}) 06:02:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, "6139803ab4f0bc06c86f2ea6cc2797c826aacaf73311e58f0466a6b9042bb8e0309046032587aa786ceece391a016ef94d307459144ed39b02606146b18e26c3d2dffa1c2e66825eb367ce2c5792fccd16acf6e880d39e9700b3758c700d82756d1b0a05448e453fa2a0465ee90835fe60c8590f2138e3efcd21c42b4b6cffcc2c361da8ce673dc0c4bc199925a75c8c346905d8"}, 0x5e1) close(r3) [ 950.077020][T31675] binder: 31667:31675 ioctl 40046207 0 returned -16 06:02:02 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 950.175520][T31697] debugfs: File '31694' in directory 'proc' already present! [ 950.212676][T31698] binder: BINDER_SET_CONTEXT_MGR already set 06:02:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x27}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/112, 0x70, 0x0, 0x2a}, @fda={0x66646185, 0x9, 0x0, 0x1e}}, &(0x7f0000000200)={0x0, 0x20, 0x48}}}], 0x1cd, 0xfffffdfd, 0x0}) [ 950.213477][T31697] binder: 31694:31697 ioctl 41009432 20000000 returned -22 [ 950.243911][T31698] binder: 31696:31698 ioctl 40046207 0 returned -16 [ 950.276501][T31698] debugfs: File '31696' in directory 'proc' already present! [ 950.290154][T31704] binder: 31694:31704 unknown command 1073742097 [ 950.318404][T31704] binder: 31694:31704 ioctl c0306201 20012000 returned -22 [ 950.332736][T31698] binder_alloc: 30918: binder_alloc_buf, no vma [ 950.342093][T31708] binder: BINDER_SET_CONTEXT_MGR already set [ 950.399371][T31708] binder: 31706:31708 ioctl 40046207 0 returned -16 [ 950.400852][T31698] binder: BINDER_SET_CONTEXT_MGR already set [ 950.456496][T31708] binder: 31706:31708 ioctl c0306201 20012000 returned -14 [ 950.467518][T31698] binder: 31696:31698 ioctl 40046207 0 returned -16 [ 950.491924][T31713] binder: BINDER_SET_CONTEXT_MGR already set [ 950.503855][T31713] binder: 31706:31713 ioctl 40046207 0 returned -16 06:02:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000167) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$mice(&(0x7f0000009100)='/dev/input/mice\x00', 0x0, 0x2002) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000005100)='/dev/vhci\x00', 0x80) ioctl$sock_ifreq(r0, 0x8918, &(0x7f00000090c0)={'team_slave_1\x00', @ifru_addrs=@nfc={0x27, 0x0, 0x1, 0x3}}) recvmmsg(r1, &(0x7f0000008e00)=[{{&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)=""/34, 0x22}, {&(0x7f0000000180)=""/92, 0x5c}], 0x2}, 0x8}, {{&(0x7f0000000240)=@nfc_llcp, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1}, 0x2}, {{&(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000000480)=""/180, 0xb4}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/117, 0x75}], 0x4, &(0x7f0000002600)=""/114, 0x72}, 0x5}, {{&(0x7f0000002680)=@l2, 0x80, &(0x7f0000003700)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x1, &(0x7f0000003740)=""/4096, 0x1000}, 0x3332e58e}, {{&(0x7f0000004740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000004c00)=[{&(0x7f00000047c0)=""/198, 0xc6}, {&(0x7f00000048c0)=""/245, 0xf5}, {&(0x7f00000049c0)=""/204, 0xcc}, {&(0x7f0000004ac0)=""/133, 0x85}, {&(0x7f0000004b80)=""/70, 0x46}], 0x5}, 0x4}, {{&(0x7f0000004c80)=@ax25={{0x3, @netrom}, [@netrom, @remote, @remote, @bcast, @default, @rose, @null, @bcast]}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004d00)=""/52, 0x34}, {&(0x7f0000004d40)=""/163, 0xa3}, {&(0x7f0000004e00)=""/9, 0x9}], 0x3, &(0x7f0000004e80)=""/147, 0x93}, 0xffffffffffffffff}, {{&(0x7f0000004f40)=@rc, 0x80, &(0x7f0000005200)=[{&(0x7f0000004fc0)=""/249, 0xf9}, {&(0x7f00000050c0)=""/12, 0xc}, {&(0x7f0000005100)}, {&(0x7f0000005140)=""/134, 0x86}], 0x4, &(0x7f0000005240)=""/46, 0x2e}, 0x70000000000000}, {{&(0x7f0000005280)=@l2, 0x80, &(0x7f0000007640)=[{&(0x7f0000005300)=""/4096, 0x1000}, {&(0x7f0000006300)=""/56, 0x38}, {&(0x7f0000006340)=""/210, 0xd2}, {&(0x7f0000006440)=""/4096, 0x1000}, {&(0x7f0000007440)=""/33, 0x21}, {&(0x7f0000007480)=""/165, 0xa5}, {&(0x7f0000007540)=""/239, 0xef}], 0x7}, 0x1f}, {{&(0x7f00000076c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000008c80)=[{&(0x7f0000007740)=""/220, 0xdc}, {&(0x7f0000007840)=""/117, 0x75}, {&(0x7f00000078c0)=""/4096, 0x1000}, {&(0x7f00000088c0)=""/176, 0xb0}, {&(0x7f0000008980)=""/11, 0xb}, {&(0x7f00000089c0)=""/11, 0xb}, {&(0x7f0000008a00)=""/243, 0xf3}, {&(0x7f0000008b00)=""/116, 0x74}, {&(0x7f0000008b80)=""/233, 0xe9}], 0x9, &(0x7f0000008d40)=""/172, 0xac}, 0x6}], 0x9, 0x2, &(0x7f0000009040)={0x77359400}) close(r3) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) futimesat(r4, &(0x7f0000000080)='./file0\x00', &(0x7f0000009080)={{}, {0x0, 0x7530}}) 06:02:02 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:02 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x80) ioctl$TCFLSH(r1, 0x540b, 0xa8c8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:02 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, &(0x7f00000000c0)=0x1c, 0x800) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x80, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)=0x4) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r4, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000140)="de9551f90b9e5ee8d23fa10fb60c48efa0bdf4c20bbf063b29e9dcc733be025f8276a463fe0dc692f089cc2e6d8d09db5cb78311ba132954785a14f98feebc63e60a4966ffd28f59ac05ea441e6534181e6a7d7818ea7ecf3d8be674f9a251", 0x5f) fallocate(r4, 0x22, 0x6, 0xff) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="df3ffd50fed47a2bd3a5c6e7b7c8418f20f8185ddce14bfbc8f6dcda1613bac145ac9a481d52081c71e14f15bbba76daf284d4d1129220c7f4e881d93b6f071b8396edb5d12d205303489f4c870db521dfca26d95505bd5c1bc80b3bf44a82761e1ed05cdb72e8556da20a246e49c638ba5387c9fe8013e82bd719a1f721112c2691f64641ea0000000061015e3e4b4498536a740ca7b134b00bb1c00b6f9946e74e13baf0804e220d63b5057058786c7870554627e14f5ea73ef902008fd7aa8877aa74568ab08baea50fb255b24a7aeda410ec55f437028d078cbca06d26079b"], 0x0, 0xfffffdfd, 0x0}) 06:02:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x52080, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) [ 950.724389][T31728] binder: BINDER_SET_CONTEXT_MGR already set [ 950.733370][T31730] debugfs: File '31720' in directory 'proc' already present! [ 950.751357][T31728] binder: 31721:31728 ioctl 40046207 0 returned -16 [ 950.751456][T31729] binder: BINDER_SET_CONTEXT_MGR already set 06:02:02 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 950.778581][T31730] binder_alloc: 30918: binder_alloc_buf, no vma [ 950.786347][T31729] binder: 31727:31729 ioctl 40046207 0 returned -16 [ 950.791672][T31735] binder: BINDER_SET_CONTEXT_MGR already set [ 950.808565][T31735] binder: 31721:31735 ioctl 40046207 0 returned -16 06:02:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="6f23a721b5f4df97c22f27dd8f775edac1da2b9c7606fd4d", 0x18}, {&(0x7f0000000180)="0e3b8468153acd1f63ed303756de633ac0e48228f904d31c126fe3c8a00ddad2e43775d14cff077bce5232554e7659ad8ca82b5a2111c1c9c576ac0608317864bca6c51e5f5712ea767594cfad30e414045a7f3c770ac0d2129abd1fd4f20375a59b493f521c9151f9819821accf7ba353e2957951f0adc3af5846404bf4dcd6c0eafada285a5d666fe946c5828f819854f19fd80fe6c0b64aeba399199ea649515fb1d2beb0746f8f5db85f477fd87e61e93599d7752f2a6ec3bb51043c6422200de0db4641b851bcca9831aa8a1812b991ab3179b9a0ea229053a4e173a1d0e10d2699fbdc", 0xe6}, {&(0x7f0000000280)="188672f701d3ab6fad4da17a38ea0cccefad7ebd0aa881a11d5f0d6b3556160069fae16dd5a3cc7e2bb271619e79248452ed30a2768a0060fda7cda8055024a028232ea791ec5577f0c979066dd526c256258861637a02ba8a0b55f84a8a5a50fc603552c3bf2ec6ee328ce32ec295f782568ecd6404a416a503c0414263803440270d1b4c1b9d64ab1feb9539dac6dd596c3cd5e713df4a51bfb6a50b7ff7486d686cf57560737a4222e2cda53694b1092f9b55531e997124fdece681cb37a234bc4d4da364f2af3e8461cf8137fbf392ffde63271ee2f730d9b5ce111d", 0xde}, {&(0x7f0000000080)="f133c5b5ade43d2c7a2c4b7c09bbdcfa1e6fbbf5164567dd81af549c49ac344534048931e5ef1b5adf", 0x29}], 0x4, 0x0, 0x0, 0x11}], 0x1, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) [ 950.825689][T31728] debugfs: File '31721' in directory 'proc' already present! [ 950.867360][T31729] binder: BINDER_SET_CONTEXT_MGR already set [ 950.884807][T31729] binder: 31727:31729 ioctl 40046207 0 returned -16 06:02:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10000, 0x0) r3 = request_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)='/dev/sequencer\x00', 0xfffffffffffffffa) keyctl$read(0xb, r3, &(0x7f00000002c0)=""/242, 0xf2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x31) 06:02:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000280)={0x400, 0x5, 0x1295, 0x10000}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000130a0501ff0080fffdff14020a0000000c00030084ffffff7d0a00010c0002000002fa17711104a6"], 0x2c}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000240)={0xf, 0x7, 0x2, {{0x2, '$^'}, 0x3}}, 0xf) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000040)=""/232) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1163000000000000e6569965e82cb67185c50a5e67c83b646e619cf76f36060e35181a01fd289633dca7615e291475a95e2f56ef4df3012f4661723b02c1ed07d202b429854ff74b369c49acc19efc40566b1e9fad877a25cbed954e2b3ec3888bf831fdba0545c6"], 0x0, 0xfffffdfd, 0x0}) [ 950.922115][T31746] binder: BINDER_SET_CONTEXT_MGR already set 06:02:02 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 950.984549][T31746] binder: 31742:31746 ioctl 40046207 0 returned -16 [ 951.051245][T31746] binder: BINDER_SET_CONTEXT_MGR already set [ 951.095866][T31746] binder: 31742:31746 ioctl 40046207 0 returned -16 [ 951.095873][T31756] binder: BINDER_SET_CONTEXT_MGR already set [ 951.095905][T31756] binder: 31751:31756 ioctl 40046207 0 returned -16 [ 951.126169][T31758] binder: BINDER_SET_CONTEXT_MGR already set [ 951.135627][T31758] binder: 31754:31758 ioctl 40046207 0 returned -16 06:02:03 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) r1 = openat$null(0xffffffffffffff9c, 0xfffffffffffffffe, 0x400, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 951.144363][T31756] debugfs: File '31751' in directory 'proc' already present! [ 951.173527][T31758] debugfs: File '31754' in directory 'proc' already present! [ 951.200277][T31756] binder_alloc: 30918: binder_alloc_buf, no vma [ 951.206530][T31758] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 951.224493][T31763] debugfs: File '31761' in directory 'proc' already present! [ 951.242704][T31763] binder_alloc: 30918: binder_alloc_buf, no vma [ 951.260429][T31756] binder: BINDER_SET_CONTEXT_MGR already set [ 951.280670][T31756] binder: 31751:31756 ioctl 40046207 0 returned -16 [ 951.284332][T31758] binder: 31754:31758 unknown command 25361 [ 951.294514][T31758] binder: 31754:31758 ioctl c0306201 20012000 returned -22 [ 951.306894][T31760] binder: BINDER_SET_CONTEXT_MGR already set [ 951.313827][T31760] binder: 31754:31760 ioctl 40046207 0 returned -16 [ 951.322172][T31758] debugfs: File '31754' in directory 'proc' already present! [ 951.341949][T31760] binder: 31754:31760 unknown command 25361 [ 951.348727][T31760] binder: 31754:31760 ioctl c0306201 20012000 returned -22 06:02:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000168) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/qat_adf_ctl\x00', 0x977fe22fb1c29074, 0x0) sendto$ax25(r2, &(0x7f0000002c40)="340a4d743a5fc418f3d6968f36ddd757ebecf1c8e812e09c39ccbe0ae2ac10be0878ca70da3b4d9fc1cd0170711d540537d9fba645223fb1c52a254008f73fd9dbf5a01f7d3fee2a91be6f11a6bba9b7ebb6b1cd528c9d7877a41008b160aa399f4674c47ccb1b3690f5c9adbc13cea56eb42688fbc6ac613a67170a9ebc86332c62d53f0486bb243bb4afe1dffc1d167200894f20be80c4e9b6f315322b807d2d9efe43791ab46578966bce", 0xac, 0x4000, 0x0, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000002a40)=[{&(0x7f0000000100)={0x27, 0x1, 0x2, 0x7, 0x3, 0x1, "9d7054d689fd3bff0049f69f6376dbf78b424b7b9550bad804c1789fe646d6616bf1ebf76892572c81705c14ef6bd5c16f45dd839f7e71f5cf2edb3cfb6d26", 0x23}, 0x60, &(0x7f00000001c0)=[{&(0x7f0000000180)="be00b8201e2d7157dd9599362c8037a6dcf4656043611f971d865753", 0x1c}], 0x1, &(0x7f0000000200)={0x40, 0x103, 0x7fffffff, "5d7915f39d22a8d14a07450ad001a0ba9747bbe5a2fba539f435e5b4128cfccbab0494607259873d4e9c2aafb0e4"}, 0x40, 0x4}, {&(0x7f0000000240)={0x27, 0x1, 0x0, 0x1, 0xbfb, 0x7fff, "1a897e1aca82f8897b12b688ceff9cfaafd55ce394e8f71423dcbaa732523af140bc1bbf1ef987e776a56a8b08db5b5d0370461bb72b726c9ef5ae547621d9", 0xb}, 0x60, &(0x7f00000006c0)=[{&(0x7f00000002c0)="53850ddd3cb0a3a620", 0x9}, {&(0x7f0000000300)="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", 0xfd}, {&(0x7f0000000400)="746d7d38e523abf7f805699b16928965b9664fb395f7d32641c371a6ce411391e6d56b75436d5316c58078ca0b1ba16b67050d7e710939c754acb8a318737221a8d96cb95b4197a2b504eb7e9fdb9ebcb887d7395a206b0eccb09dfd7f46097c21401028aab836bf7da503148d1ae5941bd12a16e1b4523b3d66e7cf79743076fcced4c6dcc06b96474ddaffcb95b60b3950833165152b8edc72", 0x9a}, {&(0x7f00000004c0)="687cd5ca817f0c8f9c3e35eb830ab47d1f3968055ef26cf85344962b7ffa7ed1351925b3def631b517bb0b6cbbc29887ef59767e6490600ff36bfea0452e82a92786f56985613d948d1c2b28bb894ca92a24d56861ce46144835d1f512a6c12e50b87b9a6eead532d58ed730e7e92f62e1039422436c193294f808db8ded61b03a6f440decb88aa4d6b3eee660bdf98e45e77e1ceeb1c6d346dd9a317dabea36aa104fc0de27e7b3676e5c5e8196c78453da9e18fde2bf3e691fd35259ab0b60f6d8f49024b388f0457ea8d9bdba033ea56d5f272c5eeb5e6c7b84678de99dbc9b1212fb61", 0xe5}, {&(0x7f00000005c0)="6c6127aa73e1eaedc3930ca7b629cd67df12f9a6cf6273520cb7ed279aa6e225d5fb95557886b96f6b212a8dc6abc7e63a2a77623ea1debc8e9b8d21257079e3f7963d57cf4b58959d", 0x49}, {&(0x7f0000000640)="07e999de4ba6e8c83d160072fd8f72cd2f92ffafa96a7d1f910cffe1f89ab4258b908f7557e684ad657b5758b4b66dd4363779b9606d6fc1a3e13b20bbbcdc8c2a275c57", 0x44}], 0x6, &(0x7f0000000740)={0xe8, 0x10d, 0x2, "c311f8d847e2991487ad52ed0680de29a4769238fdeb3136fcf5937cdb3743b05af3e117dc72f1227f227fbb92b7f083ab8832e2ec0c7d8ac3955afcb762ee4e0b9635c8e2ea6117d9bcf5c19eea5b925ae0d7487fc36cc06c4b6488455237533593a2a158b1824105df57f4b95e07791708dfe5958234b5d36216f95e5fe43be6146f840efe81c8fe924e024ef0c96f74fed3010390e4c845f276060078e8426a9dee557f1cf9a81d66522ef8a122b65f4c3c512d3632d3a43e9fc4ccc614829d19cdc6594ae1ee35a23ce1952908c9c351"}, 0xe8}, {&(0x7f0000000840)={0x27, 0x0, 0x0, 0x7, 0x3f, 0x8, "eebb22b27139e16fba825bdd7412557920a74e69cc16a3da37547208cbb3e03a5ab530fc158c7548ae05b427c51a1659f185423da6ff0dac12293af6601143", 0x31}, 0x60, &(0x7f0000001d40)=[{&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="c14bd835404c7907b52566b80d4f6f47d6aebb8ae18f0162cab13d3a7f6242a65bdc662bd05deb0d59b149cbac4321e2f0f3b1e925100f9597fcc61860cabd650cecf1cb288a20921469c3de135b7b645cd03f8165fdea6c37335fe3f64709d0535a55c22f92584d1514bd8f0861fee83ec1b1bfa8ffeb95c9a2f075c56802ce185a65279dc3ebc59072d8295a08a0b5cdb95389489d898819d5d2859d46b9c2f35d56cb871848164ccff1a5272a282acf3cbf68b88610072ca029f878199a34a3119101f9a585fe97f93b8bb72f81b1dad1a416031429204f61fdae0d36419fd9497c153c15", 0xe6}, {&(0x7f00000019c0)="95649d07b103ea9767199529e3e84d35cd02dd3885b3d102de10b4c35f5673b98fb08fc4bdad99a939e267dc541e77a214a875defe807b806d2e868711c835aca16a6892f7af2db1d031218bc0ba7211e7cc33b1c35cf640b71b97ae62754d184e031b505d11e5b83b067dedb887d78ee61bbb68810d33799a27611e5ccd5e444673ba07df0f1d05643654f1577f8f74da6c44737d55344f45c338a19e677dab4ce1ab77380fe66ac13b2bf03ca87cca103aa799749b44f907db1f87a02617c65436c68a54e9d478853ddf4ecc2dcd4ece5e42e3c3", 0xd5}, {&(0x7f0000001ac0)="42ab7aad688cfd465ae26dd1233be716ea9b0bd606e0206c29f42f2d5189680955eb15d3f1c2744268e63265a43ae9b5b5157f4645b1f6e89a4dcdff30e97300072f22c2082f913038e00826637d050817b555790d5ce7ec654c03afdbd1aa394e6d6e4478d7e7607b265e9074f7cfb9ab2334f98fcfd49a6806a83f52f114a005239be5f6613e092802ed9eb1cb787908dd45a2b2366fed0ebde5f61d44d230907146c967bf3dfcf59e280ad8c8e3e1352509f020be", 0xb6}, {&(0x7f0000001b80)="80f21c49866bfa6c9007b1dd64d840bda5198794604527012fe848b034fe7a71644176359e1bd35c8c63b510cebce58dee4d0215d8f8153988401c720d5d4a26372d0d94253c2fce476c72a71a42e20c5d67a3e1ac123a6701537a98fe569f37d0a7d5d3f153417c1138cec1cc709344534e37ce0757225cdf34b35d79dc4a14ed", 0x81}, {&(0x7f0000001c40)="672d460c809c988e5cfec5d94075f7285ab9afbf6fe8a9d30f5b32593058", 0x1e}, {&(0x7f0000001c80)="21169919affaff0cf3e128f00333308cac7cdd6471826d9927485d293495d113d11835c0604afa81a46aff050d59433d897bba9a4c7ece43970c0c063a725182cd568abca1a5f825effe9d9e82a2a4b6ed0b12f74d9be8df6151a46a7d268b53495110bbac1ab8556a3a7aea13eacb77373b2c8d1bc76b5076c00df056dde48ba0fd4298dd4abdfe4d4d7d8cb59f871a5657d9d97a1c3d", 0x97}], 0x7, &(0x7f0000002d00)=ANY=[@ANYBLOB="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"], 0xb0, 0x20040004}, {&(0x7f0000001e80)={0x27, 0x1, 0x0, 0x7, 0xb0b, 0xfffffffffffff801, "f11e5a0df57445b53be98defd340222965dce0183c5fc7731228aa5a9fc2fb8e07a85c05a8da883b90812ceb5b0b6383d3e3594be6c91fa3e2db7ae4524129", 0x5}, 0x60, &(0x7f0000002000)=[{&(0x7f0000001f00)="b0fc899389ac96316dd31728ca774bc268d865453e3cfd87e7e85326e0901a07c3597d7e00", 0x25}, {&(0x7f0000001f40)="e05d1344332323701bee029bcb283ae73d99d9e237bf6668aee90cfd9e22aefaef5e7683083eb72a8bbe05e5dedc78fdafb4b54f8c718e86bc9cd56db1ea2a1dea73b1824bb3bd70258fec5d14bbf2e19ba696dc222df07db209ad40fc00d608cb4d9601fab643802dc42d98fc66fdff948731640892ce004537ee36126d24febcd935bbf5c13b454ed47ee920cacda1ea04a95f9a189d06ad98cb05ef7343b5d58f", 0xa2}], 0x2, &(0x7f0000002040)=ANY=[@ANYBLOB="e8000000000000000f0100000000432dd7ab464156bfb666a5fd6ee08a76b38f657b2d33b6712b88f98d06278ad0655ede17ba8bc23dcb89bcbe50df82e1443b426461431cc6be5bbd389ac800cbc5d8234c353f679f8a853c1846bdf0e53b7f956432a652742d0ea7bd62e098d45866921dfc9afba1d6236cc7ebfe4bec5e66d58eda83aa33dc7d46a7bb06be283f88d134b350ad11248d08fb70b71be136db19a0a196cbf92ef371cf9c818fc9c766d11f60eaefed18cd81aa5de863ff5f72b96e4870800a1c53aecbf58b6ca021af84c2d73413f2acc7da5ea46790cea9f8c1371ce500000000"], 0xe8, 0x20040000}, {&(0x7f0000002140)={0x27, 0x1, 0x1, 0x7, 0x0, 0x5, "472d94866786cf76a1f9bd7a8ba127ceafbcde8bbe24e0f508b13500f3a2ca8fa27bd39b5e36145bc06e9b2a2f13c8c6762947ea7b757a0ddfdf1add2d5b01", 0x13}, 0x60, &(0x7f00000026c0)=[{&(0x7f00000021c0)="f7a04bd10c99ff7de69e76a8190724a0965e5ee9c13e4c81cb20ee1af58e1607d1f4b3d33dcf38712b90453ae3bb218636ffd814e0f3174cc0f683f2767317ac605636078b06012e43304f906bbe70f6a54bdc1a255de7f6e161b6f658dfbdc201f3c8765c1435b6ca4d1a821c8269472f33a41e123c3d9d995f832e289959f6", 0x80}, {&(0x7f0000002240)="b8ca82bb5db402880ac3cfaa74214eb71b3164f2651caa4c6fab22f571ecd135487449466432d72e46810f3b093ca0f40009f283bc225001a4d47104ce67702a6cb82ba7fa3742c76487a57f6c46537c86576a", 0x53}, {&(0x7f00000022c0)="0b24bb8bdef59c386664fc34998fe7b3c1d170a338597c48d0e525d5040bc5fdc5d49c4048aec9e3c33cc7749e20f12582b55eadd38c8e10a85dd9c9fb724df95441dc05eddfd0e6d8b41e9f28e34aefabaa64cd85f3913504aa24ffc6c8c678521b169f419a3841c2c115e069afd59c9f796437b1b57b0da472fcc5e6c33ac9", 0x80}, {&(0x7f0000002340)="5543e2bd2be4b37ba4ab9aff3c9e529b31d77522f4a8463ca46a", 0x1a}, {&(0x7f0000002380)="abe5efda82148744c92e46f436a8048897ab708d8e6fe8d18b", 0x19}, {&(0x7f00000023c0)="47c96319bbc0b14a4ca1de2771fcc940bf6ceed6d3c52ea5863b9612829c2f7767bb1501b466f70de8e15a6a278f0ccd8b9ce1a5855060178de04c3fe87a47bf67f69c85a3e3e8130b6856a05945294d31c8f34411daceb44d151182f5691fbbdc2e91a84859b68ec30248effc261a386d966f698ede54bf730988172d4f77f1bbccb5788d0984d54fcc49099b4985a879b850d9", 0x94}, {&(0x7f0000002480)="d10d9e14d0da7a7fad41a4b6e54de2bfbf8ef38ebc651873ea75f010b1f3c896237e", 0x22}, {&(0x7f00000024c0)="6e1dc33024f666850bd9093bf031ad1b59757f96c5", 0x15}, {&(0x7f0000002500)="40b44b227ae4791c89cd75b9f12c66202bb9482948df4617a87c830bdddce7835fe5c8aafc084b871cdd0e390b8369fa0b8a21e3a43bcf3e0792578d96760d94684b2b6fbb424729048b212627b54e4f8cc91d0e63493d8adbf8f843ac1e85621c368379772f108e0f45a1480b28354128b478fa7084e76e92a045ca7bc4ab9e0eaea6b8bd8089a55874778d3f97e59d918085f0a9be02e2b83dde6901416169d78edac5c9cd3ee8e3fd2f0cbc2ab9c06a33b2c5c34170f8419908a399b603f83ff1902a54bb139d8622a0eff656395cfe730400c6a9d67b", 0xd8}, {&(0x7f0000002600)="193d295778b7be86f8190b3c5fa28bee77f63aeed5858f09ded24804785236916251161be93b6a86dcc87f425579323f7b08125dfe1a1cba38014acb51d1a76d9d9d3b1b12cb9087cd1dda154bc2cc7b4ad4a354399f76840a4434490d4932bd78e9e11f087470c1d299204974b104583e51d03f19c583a16f51786d2bdd7f30cdc127f2eda228fbf583863ee6d0179d63ff9f3730470b11058eff73d9bc5539d8f10fb1cdec994207695955733a19", 0xaf}], 0xa, &(0x7f0000002780)={0xb8, 0x84, 0x8ce5, "21b436fa2d6db963c0260c2c40d1847fe7b54624174215d0ce9cc3a724376677f0cbbba89dcf3e11cb4b3fa60f81587388596f9a363ca7db27059c92ab5c6de2af6fd1b8ea9a4a36cc275116d72ccbe554938c47ced29fd26d4d49fa61fa3885bcc35b0e65a37cb4d94e7ce75a5f31c8ca284d2e078ea8f2bf3fd5a91189de9efedab83359ec16773cedc7d6161aa5cc5054ae42542169f48a5015c1ab967b6336b7"}, 0xb8, 0x4000}, {&(0x7f0000002840)={0x27, 0x0, 0x2, 0x7, 0x1, 0x7f, "11a51b53cb94f6f9523922f927471da6ea5243d4c99de66254237a40e622971510b50d0eda8690b7cb8e455b5a0abc570d7de74239975d0591a6cb02a07246", 0x1b}, 0x60, &(0x7f0000002940)=[{&(0x7f00000028c0)="dceb487dfa8381ce8a5569caac7d782a6164aa7a5e4b534814f3b7b246ab1939d6e3dedef7f28ac5bcc48d7e13f9b852d43445d54b5582e0c31c1c51b5e2593caf699d882ccbbcbc", 0x48}], 0x1, &(0x7f0000002980)={0xc0, 0x1, 0x7fff, "2ead3316163849dd36b5c87f85c7260eb0669f12be5852a1cbd06dc10332ffcd9a83ea9491bcae0f003fedd10e6cb5ea8a7c3cb471ad914f7d7c6992d89acdd9277a826920fd0a380651adad2b29badad80b146c4c2f719defbc6fb4f88a39a295695a7432469cb5d428aca33000fac39b8849a7651f1c659e66f0d65e143913ae2db86f1eea1460b3de9ef81e9520c20d9a1bfa4158e7cfc3744378277a637e2c19e016078bad4862"}, 0xc0}], 0x6, 0x81) socket$caif_stream(0x25, 0x1, 0x5) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) write$P9_RCREATE(r3, &(0x7f0000002bc0)={0x18, 0x73, 0x1, {{0x80, 0x2, 0x5}, 0x6}}, 0x18) close(r3) 06:02:03 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x40000, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x111) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ptrace$peekuser(0x3, r3, 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000001c0)=0x7, 0x4) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3755}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7f, 0x2, 0x4, 0x0, 0x7, 0xfff, 0x0, 0xfffffffffffffff9, 0x0}, &(0x7f0000000240)=0x20) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000300)={r5, 0x1, 0x6, 0x8000, 0x7, 0x9, 0x40002, 0x0, {r6, @in6={{0xa, 0x4e21, 0x379f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, 0x101, 0x6, 0x4, 0x2, 0x1}}, &(0x7f00000003c0)=0xb0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:02:03 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="116348d715400000"], 0x0, 0xfffffdfd, 0x0}) [ 951.687435][T31780] binder: BINDER_SET_CONTEXT_MGR already set [ 951.728646][T31780] binder: 31779:31780 ioctl 40046207 0 returned -16 [ 951.733798][T31784] debugfs: File '31783' in directory 'proc' already present! [ 951.745216][T31786] binder: BINDER_SET_CONTEXT_MGR already set [ 951.758565][T31786] binder: 31782:31786 ioctl 40046207 0 returned -16 [ 951.766349][T31780] debugfs: File '31779' in directory 'proc' already present! 06:02:03 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 951.777447][T31784] binder_alloc: 30918: binder_alloc_buf, no vma [ 951.785594][T31786] debugfs: File '31782' in directory 'proc' already present! [ 951.819143][T31793] binder: BINDER_SET_CONTEXT_MGR already set [ 951.841370][T31786] binder: 31782:31786 unknown command -683121903 [ 951.856142][T31793] binder: 31779:31793 ioctl 40046207 0 returned -16 06:02:03 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) ioctl$TIOCSIG(r1, 0x40045436, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) [ 951.868523][T31786] binder: 31782:31786 ioctl c0306201 20012000 returned -22 06:02:03 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 951.935652][T31800] binder: BINDER_SET_CONTEXT_MGR already set [ 951.960210][T31803] debugfs: File '31801' in directory 'proc' already present! 06:02:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="116384c0249872e1d0daba04d2ccab1ff9a547b5"], 0x0, 0xfffffdfd, 0x0}) [ 951.987677][T31800] binder: 31782:31800 ioctl 40046207 0 returned -16 [ 952.031159][T31803] binder_alloc: 30918: binder_alloc_buf, no vma 06:02:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xfff, 0x10080) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x40005) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) close(r1) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000100)={0x19, 0xc23, 0x7, 0x4, 0xfffffffffffffc01}) 06:02:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pwrite64(r1, &(0x7f0000000040)="d7e240a71bba58e850a899ea64fd4d9a7895debe67e02b4ba3b51999039fd1aff8eca9f9aac231941a08bb0d87084a3a03b10e92298b217177e52f911989113d10d02e6e76a732d5318fc6d8b4bcca87d6a9e2defca919c4bbf4b055d4e4a45f24fd8f206cfe4dcce9d2f66568ba76a9a653d1bb1bd3", 0x76, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) [ 952.184362][T31816] binder: BINDER_SET_CONTEXT_MGR already set [ 952.208273][T31816] binder: 31814:31816 ioctl 40046207 0 returned -16 [ 952.253108][T31816] binder: BINDER_SET_CONTEXT_MGR already set [ 952.272317][T31824] binder: BINDER_SET_CONTEXT_MGR already set [ 952.280014][T31816] binder: 31814:31816 ioctl 40046207 0 returned -16 [ 952.281659][T31824] binder: 31821:31824 ioctl 40046207 0 returned -16 [ 952.297254][T31824] debugfs: File '31821' in directory 'proc' already present! [ 952.315761][T31824] binder: BINDER_SET_CONTEXT_MGR already set [ 952.330250][T31824] binder: 31821:31824 ioctl 40046207 0 returned -16 06:02:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000169) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:06 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0xfffffdfd, 0x0}) 06:02:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000180)="7fdac263ad88fa01957cd10fc300b2847aa37b32fc519b30c275715c95bd087f4e40454551e619a1cc33bc55c62854d7c66eb62f66878a72b7517b995b8605de78524bded14daa964a6dcecaa9bfebc689948b483d99049d", 0x58, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhci\x00', 0x80) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000100)=0x4, 0x4) close(r2) 06:02:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) 06:02:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0xfffffffffffffe1f, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\vcH@\x00\x00\x00\x00'], 0x3b0e, 0xfffffdfd, 0x0}) [ 954.631011][T31838] binder: BINDER_SET_CONTEXT_MGR already set [ 954.659470][T31839] debugfs: File '31832' in directory 'proc' already present! [ 954.665475][T31838] binder: 31833:31838 ioctl 40046207 0 returned -16 [ 954.667560][T31840] binder: BINDER_SET_CONTEXT_MGR already set 06:02:06 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 954.696172][T31838] debugfs: File '31833' in directory 'proc' already present! [ 954.711098][T31840] binder: 31836:31840 ioctl 40046207 0 returned -16 [ 954.736054][T31843] binder: BINDER_SET_CONTEXT_MGR already set [ 954.742342][T31843] binder: 31833:31843 ioctl 40046207 0 returned -16 [ 954.757235][T31840] debugfs: File '31836' in directory 'proc' already present! 06:02:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001100)='/dev/sequencer\x00', 0x6002, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000001180)={&(0x7f0000001140)=[0x8000, 0x9, 0x7ff, 0xffff, 0x6, 0xffffffffffffffb1, 0x10001, 0x6, 0x81, 0x4], 0xa, 0x7fffffff, 0x5, 0x100000000, 0x7f, 0x8001, {0x478, 0x3, 0x8, 0x7fffffff, 0x0, 0x10000, 0x7, 0x1f, 0x8, 0x80, 0x166, 0x0, 0xfffffffffffffffe, 0x4, "0a643a63f7b284b3068c816f874531d698fb11e0c802d7f7432c7fec6ee31aa5"}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x20000) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x4) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) lookup_dcookie(0xa5, &(0x7f0000001200)=""/4096, 0x1205) [ 954.807544][T31848] binder: BINDER_SET_CONTEXT_MGR already set 06:02:06 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x2000000004) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000000)) 06:02:06 executing program 2: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000180)="189b92a0becdee2b8b91add1b4ac699f5906169b39af49e07daa815685c480607e50790cd4297aeebc91610fa9dfddb0c4598c0531c120c38bb69ad3a6f697e7a4dff6ad68bbcdb27da0", 0x4a, 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r0, 0x4aed) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1d00000000000000"], 0xfffffffffffffe66, 0xfffffdfd, 0x0}) [ 954.850676][T31848] binder: 31836:31848 ioctl 40046207 0 returned -16 06:02:06 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x80001, 0x0) ioctl(r3, 0x1, &(0x7f0000000100)="8cb9b24e2fcdb9d9d8dcbac26d57368ae3189cd8e87c04ba4449427d639b015dfc08c93a87d9dd3d3c039a6577c7c2d9e9c3b642c6ae648156b0b4adbd9138a0e6bf99ac784852bb2811e07f6bc2e80613a1654c6444699304c20e4b1b0f661df06e3d65a80c716737e67f4b30406f8b37adcade8563fd0e1c8876d969c97269adae0b1ae9e7a8abae62046b8eb631dddf504d0d4b293eb220b942789e046b12f11a5b12aa0c259da1babbb513fb3114746412bce35b9b23ddd7daced5bfc9bc2f8912c75aea144f2f828c7fa39bf774834e73c5a4d534164b9d2b8cfaef11460da2f85350436d6ae38c5ee8") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="041f186c102f3ebd4073dbd8fa15fbb85fcb73f40ac21aa1cc64f053da7c4758181cdff3b63658d1100cd209475199a88b873317a64d2399eda25d64ba6693"], 0x0, 0xfffffdfd, 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stack\x00') ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000280)={r5, 0xbcc3d89867bc0477}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) [ 954.956145][T31867] debugfs: File '31863' in directory 'proc' already present! [ 955.017137][T31867] binder_alloc_new_buf_locked: 1 callbacks suppressed [ 955.017146][T31867] binder_alloc: 30918: binder_alloc_buf, no vma [ 955.029146][T31870] binder: BINDER_SET_CONTEXT_MGR already set [ 955.055337][T31870] binder: 31864:31870 ioctl 40046207 0 returned -16 [ 955.066154][T31872] binder: BINDER_SET_CONTEXT_MGR already set [ 955.084223][T31872] binder: 31871:31872 ioctl 40046207 0 returned -16 [ 955.111754][T31872] debugfs: File '31871' in directory 'proc' already present! [ 955.131253][T31874] binder: BINDER_SET_CONTEXT_MGR already set [ 955.160527][T31874] binder: 31864:31874 ioctl 40046207 0 returned -16 [ 955.215121][T31880] binder: 31871:31880 unknown command 1813520132 [ 955.226516][T31880] binder: 31871:31880 ioctl c0306201 20012000 returned -22 [ 955.312063][T31880] binder: BINDER_SET_CONTEXT_MGR already set [ 955.318601][T31880] binder: 31871:31880 ioctl 40046207 0 returned -16 06:02:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r0], 0x1) r2 = syz_open_dev$binder(0x0, 0x0, 0x100000000000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) fadvise64(r0, 0x0, 0x40, 0x5) 06:02:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000016a) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:09 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x50004, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000000)=0xffffffffffffa80a) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348402bdaa4ca2decc633a92b336a19530c00000000c074bf03b9e7f2f3ccd9c1035aa61c7514d8dbd1e3e2dc02e7fceab5343d5fd51e856d73334da256e402d1ad0891e8a29eb0f32de319e7baaf984eb817011bdfd56d409e25bedd47067ac63cf39831f18827ff6c4b9e2a834b664c03000000ee9f1ddf1fc6eabe03653ba56067a4f9b2299988ff02b2bdec1f6a61b8c79852911fe5ef93ce9b3c111a309913c0778a6a45fab8c101e3632b99dd0c758a955c6fafe60ac865ce0e3a3c26036922d0efff0cd641eef68599032b533a4131cb9b7c36fafb0332aed5df2cfbd0e0fea8815868977e61245ad82c4d2e5c59dc3369d5b82a7a1c9e67a70a5e87208c889908753695a41634da9ad24d9312db16c8b610db841e8a7b90437af16411f862b908fa8f9f204be75e74fa3869e46da41c80f7a9ac2c239c9b647f0781851e6e4424feaf06cd91784c69328e44a918b46a27ece74895aa9e1dd663c757932135b5fee3539242a265f2918b21ec7f7e85142572bbeb74e398d4a0ca77d213713c2b2b344f05b70552b236bb6d5f2d58b699bf3a8485fd378959300dcd938ebaa67feb7dd20a9009b504ba5d45305499cf3da127cf606ae70d3023282db650b17359c021b71c48127a9d26c501792e61f97f21af000000000000"], 0x0, 0xfffffdfd, 0x0}) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x17, 0x2, 0x301a, 0x5, 0x6, 0xf, 0x0, 0x7}}) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0), 0x4) [ 957.760686][T31892] binder: BINDER_SET_CONTEXT_MGR already set [ 957.766822][T31892] binder: 31891:31892 ioctl 40046207 0 returned -16 [ 957.768943][T31895] debugfs: File '31886' in directory 'proc' already present! [ 957.775011][T31893] binder: BINDER_SET_CONTEXT_MGR already set 06:02:09 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 957.858297][T31893] binder: 31888:31893 ioctl 40046207 0 returned -16 [ 957.879951][T31893] binder: BINDER_SET_CONTEXT_MGR already set [ 957.889457][T31893] binder: 31888:31893 ioctl 40046207 0 returned -16 06:02:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r3 = getpgrp(0xffffffffffffffff) mq_notify(r2, &(0x7f0000000100)={0x0, 0x2c, 0x0, @tid=r3}) close(r1) 06:02:09 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0xa0800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) [ 957.909343][T31904] binder: BINDER_SET_CONTEXT_MGR already set [ 957.949015][T31904] binder: 31891:31904 ioctl 40046207 0 returned -16 06:02:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x141000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'sit0\x00', {0x2, 0x4e20, @loopback}}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000080)) r3 = syz_open_dev$binder(0x0, 0x0, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000100)=0x44) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) 06:02:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) write$eventfd(r1, &(0x7f0000000040)=0x2, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r1, 0xb, 0x1}, 0x14) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0xb0, 0xa2c}) [ 958.054627][T31916] debugfs: File '31912' in directory 'proc' already present! 06:02:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RMKNOD(r2, &(0x7f0000000100)={0x14, 0x13, 0x2, {0x80, 0x3, 0x8}}, 0x14) close(r1) 06:02:10 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 958.114510][T31916] binder_alloc: 30918: binder_alloc_buf, no vma [ 958.132586][T31923] binder: BINDER_SET_CONTEXT_MGR already set [ 958.157154][T31923] binder: 31918:31923 ioctl 40046207 0 returned -16 [ 958.164422][T31924] binder: BINDER_SET_CONTEXT_MGR already set [ 958.207265][T31924] binder: 31919:31924 ioctl 40046207 0 returned -16 [ 958.253558][T31929] binder: BINDER_SET_CONTEXT_MGR already set 06:02:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) [ 958.297378][T31924] binder: BINDER_SET_CONTEXT_MGR already set [ 958.304996][T31929] binder: 31918:31929 ioctl 40046207 0 returned -16 [ 958.329860][T31924] binder: 31919:31924 ioctl 40046207 0 returned -16 [ 958.404308][T31940] debugfs: File '31939' in directory 'proc' already present! [ 958.417543][T31940] binder: 31939:31940 ioctl 400c6615 20000000 returned -22 [ 958.500174][T31940] binder_alloc: 30918: binder_alloc_buf, no vma [ 958.536783][T31940] binder: 31939:31940 ioctl 400c6615 20000000 returned -22 06:02:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000016b) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:12 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x80000000, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:02:12 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = semget(0x0, 0x3, 0x4) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000200)=""/167) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x100, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)={0x104c, 0x15, 0x0, 0x70bd26, 0x25dfdbfe, {0x16}, [@generic="daff2ecb49149b2ebe7da25a88824bcc753cfd55905e0cba170f233730e692d9dd344d3e280dfe93a7ba2fef577e4dce6bf1cafd7972e8a4f9c3f761db1fecfd244b6bf9b6168d0e9b18498e6bd1f87a51a2db9c503e4120f7fdd117b620b256477d3afcd027ea88c0cbd415eb54f95a3c6ec96bf52036091dd392c30da0af96702996d2ede6eff52bb7167c52ed3bc4debe95eb0010fd497c153fc73352e970e46366d3d1d6a1f8648b246306c14f9ffe7e22571b0a6507709419b50ce9b652cfd3d768973d6209f0221cee865eb4cda959db1a47c4509c7cd6d660b6a409ee7019ff4cb464904459beb6dea0433eb8a1d3d11976aec3a65e9cfe9c2d7570b6e9daceb68229375a302b89cc0037da6212959f6c569e132cc0ac09d1e6833ed05a4ee8f797e10dfe93c7b90a0ee6687006d637c17ade93a446f4b338c89966fad81922feaadb70fdee115e89019aecdb28b0dc18ca6ac2f6aef41e5f29a480425bcf4c5df2d503c281764e4b238a4a2d44040e9b0c7a06c8398424611b1d15191dc724643e9b16cdf1c2b28971765c7c48edcadce956b899ff79a74569547478880145d08501dcb27eb0f2d0c6d235638a5788cbb3d2323876ab4b51f752d4f840cb6b9658a6327ee9aa35b87d2c82fda8faa604ffa417718582100cdcafc3dd84d6f20cec459dafc2aa058a77789180ab4a4014bc18ae14adaf3d6fe3053e0bcd66c6505d0ca77290838f5d414234725fe4fb64e7b6e9cab146fe2bb6460a8a5a4fe0bba32f5ef652cb8fc93775cf5a4186964e3a0f51f9bd0cff42d21ee2e970643112a125ae8b6f7cd1f231cfb91ded64ac53012e2bb6fc3e85c61fbdf0c7da577b262d65998174504ea6e17570f57e5824dcbbfe901bd1a4ae7f32b6642761924237a90a0ead8269747cdf68eb810be7c49ed627401090e8238ea85d7381c8b4e780f2766553b14807121661cec51a649d950fc721d3b04fc7a9f179287de0c45359f39d5bf2034ac036a6f0ad11670a3761b68eb04f527b6d43582cc2f2263fcc93eaee9943289cff63fa1774a29b19c1f31cea8f19c5027239dc60e975e3111d12ea5d1112a0d113433032a43d8af0bde25bc2141806a9399c47f8940346374c93a149c0d9eccd3484896a14b4e33569287ff3ccdacc292b456e4163407341d34ab3cb54abb774ea9f8611d784bc417da7c065cc0c286d19fe68a186a2f8bc1a2f7d39895be2850b85fdf91f035c79c3d2c44192592e7d2135291f46cb43674fbcbdc9fd23e28bafbd659a276afe9853bd153daf55a236a13d154663c39a2ee66f7947252e22ef72242994389c31a5cdb1ebb56d1348cfa830b696a3299467c1906a1289a24aff9aeb343ba66c81ee605fd4fa66957728acdc53bc0acad88c6f76fccd5ca1120405deb9b4a90be0f11cb5eaa38799bccfe168b76e8ffca3e1ea46f5f99d0dc9b7d2390b12c473cd6cddd0e41d9687beeb230a96052ae508f68616898d41fdc23c61b6c8c9f53dfeec3b4c37b9ba465cfdda11344c47988bd642566e1da38e85d2b3a3beffc10f8ab4558f6361df015af4e3cda5c41ca4ea8392dbb368d85d90b8cb5a409d14e586f42101e566033aa2e0b0c1cc088379523c3566012237e524bd4759abf97a8752dab58acc0fc2bb2fe1cd81db478497ce2fabf5e3c3c81ed27328d30dcf6351274781e89da4fd216da7b691e1195b12f3accbfa178437e163977689a6278b2282b9437d8ffa2d5a47f87ecda1986207fec325096ae3a8e9feeca58c443e3d15b29d2a469d3ddded893693ad3c2d3571bfc7710f2c4ff739e2c3e1f7ca8634aa604176fa0e16cd4e5d9160c3b2338fa43820c6d06e40109ad27f21c9fa431691f040573ca53add93792f7fb9e38abc1c7dca80263ad1fde3e25c60d528a8eee3b24cca5f40fd376890f80c9003a875a520a7c640ed757480d26e3814ff4901a794a866ed9dc880df06c9541252d5a05a1dd387c34ba63ff008d764392ce0bd67afbc64b559cdfd040e5003b69a0f39eec92524695620ba7a2f19815392b2cb40d94cd66b5bb0d0f18beb72917493715c0d4277ff212600dfa6782db38b011cb78cb77f903ca9de655f85cda0a9ecf2cf89d27601478c1e10e5f6b5e468c90360a052813b4619384a1fa02abad2a802d844980da38dc26b00dcfc5bbc4175ca66168d785cc49a623f088af4988d6db0c81122d2e10c97b9174df77c95fe58a0109398809bcad4d588c37e5b7585040eef1d5fb6540a01dbef977e0e386e8c969c0d9a806ac9c26abab2c3c41843b8a592c49d93bf58dd0b001f633117a2c81c4211fd78ab5d83fc326bf678ce1a2a2f0a9d1abfef7adec6421b67801cdc48139f475920be7d06ec9cede2e898867479483ef113d3d2fd5c82d7c2f3c1b65c1ec4a21eb588cb3521156e13e72618af57b6c46b278ad4330d60a95746b32e8979f8502f445c652560a2bf573afabc0e7b6ff4c21e80b3748e0322a7de7899237345a93f5c421109474df2b378912bec60d28f4b4764ff0f370abe4873378935f92a20c680aa488ae3d9a8938d3cd59d88be13e2878fe1fc7cc5d77f149abf1990328255a062dc3af20110cbc51e2d61609ed4b9a1eb7e72bed474680a9fb4c31ac08d48a55391e8ee65262a2c4a66a4fd55637fa9adb9c0fb4c7e94ba8e9f776306d43b97a1d6252b68928026e44b316c5463d8cde6ec6d1ecfb18dbf731230bb1f4af457642957713f719b2163a798649069c77f5a8f7ae9cef84eb8104175572c95085153d00965ed7be352f76a2c013f6c695ea2fd3fb6f483a727e7701a57eb5f2a59c55254131329fd699988cfe497ccd7f28f02a5156879249166da7a762b2b5977784eb0789d53255e7988d3113c6bcea8b362cb84776673070a43f72c3a1f66b7a214cf00c3f631d9e8cbfb92076d97c5a2d1486a8a52d546183ef25515759272c439c061dc4ba41fbd86b2e81905f857e7eefa4bd7f7c5af2de731c200f056f4e804b7bdde749f23dc47b79c5f589aeb3216fde8cb6181e66ebf300b14e2dbdc6e471c0004d7722d48fc4f407428a61da439903c79600e16253deb42ffede37397bbc1f5e14d0d0345782020d97e00486165054709be80d48fef3d34722aea31491dfa349c92bd66fbc9e6081cc929c8a931dc0a8550acfaf5bf876f133ce414bb26fa7222eafb7541119f24f4061e19d3a319962f7baa1a46e19b6e2bf0ec966f95ef41034b62bd18da54c2b41c3e2c4975ab334f5f47e714d6a797b45b205773e884e0f28a4e9a1fba9aaef1a646f08bd62130aa1b3ce4087144f4e236b1f42ac732eb2ae28dcf0327b96149d794132538c7c38484291cb8e1faf89259623a68f136473d8b6f57db194803524b38baf3f83cc27c26e8d7ad1241e2bc25d94534bdfad6905eefbebc0b47ee1ef66a6bbd6ac4e2d783eb0ded618c82c2cac908fadf2b914d44252d43879d8a17b98fcef20a79966a4a58acb70993e0ad212454da49536b6d34eaca3a33ed9397f1d497eb0a1947b2304d4c05732cecdc5860cb9ece5d459c06779146262cdcd2eb0acb002944c924afaa6f8872cdbf6fe95d82432b155908ca9c0dc2de462cd8f2704726ea7ebd3a510372fe8d328058bd6d92fd52da98ae32b23f5240d7e6041db9c254b39f786399b1350b3911860d1bff0c43dfea355aa784d56cd755dbc1b92840f7d0dd9b654f73f3aa7d9ee48da24e0c62d5b06517a9e2a3a58cf337636001159d3475aeaeb1927a9ad3458222b802dbcfc3f900b8ad00d0a2a9a4484f54ea7b177d27842965a508fcae605d64b1682ea47ecba02d7ba3a994a04aa687bb22b0f7f52a038813f4521474499e7b6dae77d3a9c7570a0a6d35f46fa5f239480d566ad7321fcdee1b588a6a3f017673ce42df080a1d1e255e954855b4a115827504042e0bd7a5ab1c9dce31692cc9b65fa286c21f251731b3f0e7a893a63e7032bfe749731f17899f2cfcff12b957c224b965201f1a4ff7b8ff3ce5964e49818617c4d95c5fe95b2da7fed9afeb23e93275e84e26c1635f0ff346ab5e068c2b35d3b05d7619b004c1cab7084580cbae5098d6e612e0e7c70c8ccdfe405301ccce97820d0900c55f91f6794c24a89383b775fe21146838fd4cb2353581372869a98db1f1f3a31bf4910841e69e867e0148154249695267b635a830b510aa34f8c58e666c41502457985c8a8f98dcffe9f58aa22e3c688ef86ad06b5d789be9b328a26f106c437ef3e11b4736516217128e411465aec27dbcadd764d2595df8e0de8caca3eae2a109334bf6d5d7776cde8b70e32fc0581bcbd85f246cbc80e5588551ac0059896f6fde6af97a8941c862c40c093bb4e1530253d960ea93aaab2b5910c37e67d24b9c43be7369d172a6aa4c24e5221ef96661ec73ce2bb582d72db4339f2c174a710dce9766146acdf0eaad78fec6b67fe44d1183a9fd351d733cf6768354a44c31eb3a0b19ff7e98106f5fccea5da6b733779ee337513228c54c460c289d9a7802ea3257ec46bc8e522875ed6d9c264d4aa0cafee097c25f40a7413fe520e5cea1dbaadf26ce9a9d4d8205276417d259fa07fa3ee87ec6fb3d01fe93be18dceb1a217205a3b1df9a54eb8ff765691024f07ec383c4ec7ea1b6018ea5bf3ce9d72823c5a986c52fbd0f600f830a7844185d44b2c7eb407c5e328e8f82650e32496c101dedd46e0a37ee93d059fb74586493dda4d3da9f6cc389d5b92fe33b5a81d06e5bde449feb091d796e3818ce9b86f7a9328c13270ae6f51caf5153f1f9c4a482ffbba537577e3836d03bf5be522f7c24feb540f9baa93d22aa95c272e5cd0884790e83bcb68ce097f55b97a26ff344eaea76f0b04ec81a968623a547bd8f12601f9dbde63c5612f8c22f5b4e5efdd711dd79024a4d49ba88fb264ae4b5d7510c6b810626188d0e913f1726f800cc95ae6778de66219b6a1c1988346d1797b88bfd748a0c26597ff576fcb4d38014e967d4a83b25e80804fe7940e8590c2c198287056a6273fda2fe17d1ef288e518e5ecbf55f966f63b5d4ef76f04bc8696ff6a03d56831d7b47281931b0a176c141d6e1894a4d0af4eb1635406967b8d65774f8ec092b0184d51717cd9491fed83e7d46bfb19efde3eafc051adb03b03d8f2bf42862ea9e76c5808c9381144a158f7ce2242761b83cd7be887c3c4f47c19e5a8ff730c93a820b022eb3d0765338d05c5ed9f8166661b839a8b9d9ff74ba9088a85edfc223f47367bb6c46c44023f1fed4edc872691483c72b625b7399cf0ba6a9448e6d183d336800faec00639a246290147e3c448bca0407c36cca4532b7d0b981785dfe320ac9e804e5db244a0e566f35c5bd35eca6c5019f994e4b82fe1cbec0eef7b33b3079ece6dd0fa656cce380689c2cc1b4a4e43efdf1d4f6302c383df2c4f934bce6bbfb538dc2a5c270693489bb1d7f5a7c46bbd8498c8d91e3b4db843b29e75fdf7a0e9ba97a8ca8551af8bcd887ccb78664bdd60a7e6926fc0326cc85e15b0c44f9800f931f1b0e8142f2df69de48d1045403f1a1b45db626ad6ab6923298a7d0a71784f194b3db9f432d69969d8cc458c53212ef2bf723a72b3ba279e32084da2671c08775856c64c215bb85eaa9181022b80f5d3f88e5a5f0ba79251ff1a14a53022120aea215f4095be93d4816565fdefdc36cd1ce6c1e9d7114d035c82423bf5f9e65dbbe891ca247aa31c62518c991ed8d4ba26b37ab2ef32d1c011348e469f55ceef84c2394dc96c10b3c406ec3", @generic="cb93e7f8633765878eb4bacf45e4fb64f5f1a18cde93b01c58e5949ed8ff4330c0a5595d4e6eddbf96e277fe4ff3426fabcaa176f8b7"]}, 0x104c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) recvfrom$rxrpc(r1, &(0x7f0000000180), 0x0, 0x40010102, &(0x7f00000001c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x5, @empty, 0x1}}, 0x24) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000180)=0x80) 06:02:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) 06:02:12 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) [ 960.875687][T31956] binder: BINDER_SET_CONTEXT_MGR already set [ 960.889267][T31957] debugfs: File '31949' in directory 'proc' already present! [ 960.905193][T31956] binder: 31953:31956 ioctl 40046207 0 returned -16 [ 960.914677][T31950] debugfs: File '31948' in directory 'proc' already present! [ 960.922005][T31957] binder_alloc: 30918: binder_alloc_buf, no vma 06:02:12 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x120) close(r1) [ 960.948122][T31956] debugfs: File '31953' in directory 'proc' already present! [ 960.995871][T31950] binder_alloc: 30918: binder_alloc_buf, no vma [ 961.016912][T31956] binder_alloc: 30918: binder_alloc_buf, no vma 06:02:12 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000400)={0x0, 0x3, 0x4, [], &(0x7f00000003c0)=0x7}) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x43, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r3, 0x1}}, 0x18) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000040)=""/43) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffdfd, 0x0}) [ 961.041802][T31967] binder: BINDER_SET_CONTEXT_MGR already set [ 961.064252][T31967] binder: 31953:31967 ioctl 40046207 0 returned -16 06:02:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x190, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x917e00000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffff30}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x100000000, @mcast2, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xca15, @local, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffffffffffffc, @empty, 0x37}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}]}, 0x190}}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) connect$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r3, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r4 = dup2(r2, r0) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000100)=0xb) close(r3) 06:02:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r1, &(0x7f0000000280)={0x74, 0x7d, 0x1, {{0x0, 0x5f, 0x201, 0x193, {0x1, 0x4, 0x6}, 0x10000, 0xfffffffffffffc01, 0x10001, 0x0, 0xc, 'Ksystem$eth1', 0xf, '/dev/sequencer\x00', 0xd, '/dev/binder#\x00', 0x4, 'self'}, 0x0, '', r3, r4, r5}}, 0x74) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) openat$userio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/userio\x00', 0x2000, 0x0) [ 961.090968][T31956] debugfs: File '31953' in directory 'proc' already present! [ 961.165486][T31979] binder: BINDER_SET_CONTEXT_MGR already set [ 961.175283][T31979] binder: 31977:31979 ioctl 40046207 0 returned -16 [ 961.236390][T31984] debugfs: File '31980' in directory 'proc' already present! [ 961.251324][T31979] binder: BINDER_SET_CONTEXT_MGR already set [ 961.289101][T31979] binder: 31977:31979 ioctl 40046207 0 returned -16 [ 961.352987][T31991] binder: BINDER_SET_CONTEXT_MGR already set [ 961.373661][T31991] binder: 31981:31991 ioctl 40046207 0 returned -16 06:02:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000016c) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:13 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0xf6, 0x1, 0x3, "f7634333eb0c44ecc43ffba34246ef9f", "30544e4fcb761c9b96a8ebbfa59014b288baad81d50a1ae17c297982884fcb238f05800b2bed936faaee33d47149b0450d4e588f182282a790e0df12a213368a2a100d48a28c5e6d67d2f8411ddfe12fca1924a199e297a210b07f369710d75a5fb8c29546a11d7d9d45ab725444d00445fc46453615059ac9324e1c6512ae643f74724b31f66a4a56d7d39bdbb07fee8349502171641feb82fd8042453af7423358f8436b3d2d93a6b3d6812f4aa318927b514570ff67849eb6f0606714563d52ea1d50386038de52fd9f25ab718506687272b702c8f3d2f262d1d51e385b8734"}, 0xf6, 0x1) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x1, @empty}}, 0x1e) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', &(0x7f0000000180)=""/113, 0x71) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:13 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='com.apple.FinderInfo\x00') pipe2(&(0x7f0000000000), 0x4000) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="26675ed88e51ddbba8c1fadfad8211634888f94cac98643da08017e3d2e3c4910bbc8b8746602f8d69cad5dff7dca93ac4499f2216ebadc0bc3cccc98c08fe7744d7f8a202a3e98e83afa71a1a6a4630a56bf755229977b1c200246cf54ea6ffaac6f0ac1f938103c442576e87372261a6c6b1fa5ce6336930d0d0fac638e4c2d3ee07d6a402ebab655ba373c6c87dacadfb7ea7cdd2"], 0x0, 0xfffffdfd, 0x0}) 06:02:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf01000fdd4070000000185819bc70e2ff000000009500000000000000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="f45022f8d12237d5bc7f27e77a00", 0x0}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 06:02:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffdfd, 0x0}) [ 961.782839][T32006] binder: BINDER_SET_CONTEXT_MGR already set [ 961.803242][T32008] debugfs: File '32004' in directory 'proc' already present! [ 961.825739][T32006] binder: 32000:32006 ioctl 40046207 0 returned -16 [ 961.831384][T32008] binder: 32004:32008 unknown command -664901850 [ 961.833095][T32010] binder: BINDER_SET_CONTEXT_MGR already set [ 961.847408][T32008] binder: 32004:32008 ioctl c0306201 20012000 returned -22 [ 961.862990][T32008] debugfs: File '32004' in directory 'proc' already present! [ 961.871120][T32010] binder: 32003:32010 ioctl 40046207 0 returned -16 06:02:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x8, &(0x7f00000003c0)={'trans=unix,', {[{@uname={'uname', 0x3d, 'cpusetselinuxvmnet1.\\'}}, {@version_u='version=9p2000.u'}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, r2}}, {@euid_gt={'euid>', r3}}, {@euid_gt={'euid>', r4}}, {@hash='hash'}, {@euid_eq={'euid', 0x3d, r5}}]}}) [ 961.873837][T32006] debugfs: File '32000' in directory 'proc' already present! 06:02:13 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xfba3, 0x20000) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000078ccd217266ea51fa2d949950071ca8f49c6961d0ce1e807e146136c"], 0x0, 0xfffffdfd, 0x0}) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000480), &(0x7f00000004c0)=0x4) [ 961.910412][T32006] binder: 32000:32006 unknown command 880710562 [ 961.955883][T32006] binder: 32000:32006 ioctl c0306201 20012000 returned -22 06:02:13 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x60) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000100)=0x6) [ 961.998607][T32006] binder: BINDER_SET_CONTEXT_MGR already set [ 962.033728][T32006] binder: 32000:32006 ioctl 40046207 0 returned -16 06:02:14 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 962.105351][T32034] binder: 32031:32034 ioctl 641f 0 returned -22 06:02:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x3, 0x1000}) bind$inet(r2, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000001040)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = gettid() recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x40003a0, 0x0, 0x0) tkill(r3, 0x14) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) [ 962.156717][T32034] debugfs: File '32031' in directory 'proc' already present! [ 962.205340][T32039] debugfs: File '32035' in directory 'proc' already present! [ 962.224767][T32034] binder_alloc: 30918: binder_alloc_buf, no vma [ 962.264606][T32039] binder_alloc: 30918: binder_alloc_buf, no vma [ 962.275677][T32041] binder: 32031:32041 ioctl 641f 0 returned -22 [ 962.363805][T32034] debugfs: File '32031' in directory 'proc' already present! [ 962.496649][T32047] binder: BINDER_SET_CONTEXT_MGR already set [ 962.503070][T32047] binder: 32043:32047 ioctl 40046207 0 returned -16 [ 962.511220][T32047] debugfs: File '32043' in directory 'proc' already present! [ 962.522988][T32047] binder_alloc: 30918: binder_alloc_buf, no vma [ 962.535368][T32051] binder: BINDER_SET_CONTEXT_MGR already set [ 962.537777][T32047] debugfs: File '32043' in directory 'proc' already present! [ 962.541719][T32051] binder: 32043:32051 ioctl 40046207 0 returned -16 [ 962.556906][T32048] binder_alloc: 30918: binder_alloc_buf, no vma 06:02:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000016d) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000100)={@local, @multicast1, @empty}, 0xc) 06:02:16 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='+c@P\x00\x00\x00\x00'], 0x0, 0xfffffdfd, 0x0}) 06:02:16 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10200, 0x0) fcntl$notify(r0, 0x402, 0x10) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x10001}, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000000000e5d2fc1d55ecfccaff23f8cc6146adcc79608ec9a518104cdc9dac99ae9fd76b04d758305b23eac51051e1b3e3a456734a06771a52d795000000000001009fb9eaf55a5bd609b81aa704cc0701d090e30200904c7f51a6b626fd"], 0x0, 0xfffffdfd, 0x0}) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000140)) [ 964.859047][T32058] binder: BINDER_SET_CONTEXT_MGR already set [ 964.888710][T32059] debugfs: File '32055' in directory 'proc' already present! [ 964.896558][T32058] binder: 32057:32058 ioctl 40046207 0 returned -16 [ 964.896590][T32063] binder: BINDER_SET_CONTEXT_MGR already set 06:02:16 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 964.921432][T32063] binder: 32056:32063 ioctl 40046207 0 returned -16 [ 964.931502][T32059] binder_alloc: 30918: binder_alloc_buf, no vma [ 964.933886][T32068] binder: BINDER_SET_CONTEXT_MGR already set [ 964.966896][T32072] debugfs: File '32055' in directory 'proc' already present! [ 964.979187][T32068] binder: 32057:32068 ioctl 40046207 0 returned -16 [ 964.997794][T32072] binder_alloc: 30918: binder_alloc_buf, no vma [ 965.005503][T32069] binder: BINDER_SET_CONTEXT_MGR already set 06:02:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x5, &(0x7f0000000440)=[{&(0x7f00000000c0)="f6d2f7a7b1cd8492b5b787ca3b7bdf3fa4095869bbb29e4b2e39192d92f4122c0a75740decfea6805df6e299e6822b5a87fb8e94f6733da4a051c8305214a72ae3013a53546d22f8df22c83bff11355c83efcdb4163d7b41c772a54b50ef5e8402133b", 0x63, 0x1}, {&(0x7f0000000180)="91421bbd73530f705e2d4240f50ed4e9f3bbbefe52dcfabb95", 0x19, 0xff}, {&(0x7f00000001c0)="8500a04c5826bdfdea205b3f41bf8a307e9490688b52f614a0d748a3f6cb60386043b99e310ae549a365ccfe8c7e23c4977d36ad2cf9da1c125a4f5c09679cf236187067e812827f1122b724bbbd1aac2dd4", 0x52, 0xfff}, {&(0x7f0000000240)="27fa88fb7c4bfc204315f2401d6b1c1235f24009efa759c30946fbb9ed20db17756f47efbed5a5a2bb6b14ec849e1511b87dc2fb748f7b768382ebf8f7d99ce3f39a7d04904a2e8bba17c91a04229e86602edecbedb3c7ff54d30a83dd6019024325ab7cb6c4c1be965db8738304997b71516f3aebbda6a1163b9692e1eaa1688b4f0f1531a9be56317c43311b60ec516fc71bb374dabecd23d345076f059da0aed06a2f94d93c9c97876d0fd9b2833767f91e4fab571fc9d29a758cd0ab4e60d0b28df1819ac9ea673c272da6938f5a92f4173cc5574cc6b71f734f2040e69824f7cfea61f12b24e983ad2924bf2bedcbad4ed79b", 0xf5, 0x20}, {&(0x7f0000000340)="4f74a1420cf57ae40c274a9faa2c4d4c0ede679ab28bc36f1eef8315ea117978f250ce86939478a1b59925bb22d2f155f244fc17309a5764386ec3f19f699d92f444ce2406a9d5af6680724d3285a230c802107b3b5896639d493d1fa30dd62c4560db6babe7684f98e79ca17bb085a10201b8d5dde6d5afb325b569555f2450892b3028d83976669de5461f94ff4d9488ec96c4683da726bcea61a6f1511d19076dae65a9b499f60518551f62d9fee3424140ff999b81a880667f99c1c16447d57c168ac1594ebd8d7c4dc26829a30d2790274257", 0xd5, 0x5}], 0x5000, &(0x7f00000004c0)='!security*\x00') ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:16 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x3, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/btrfs-control\x00', 0x8000, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000480)={0x0, @dev={[], 0x10}}) [ 965.051903][T32063] debugfs: File '32056' in directory 'proc' already present! [ 965.053251][T32069] binder: 32056:32069 ioctl 40046207 0 returned -16 06:02:17 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 965.178190][T32089] debugfs: File '32084' in directory 'proc' already present! [ 965.212225][T32090] binder: BINDER_SET_CONTEXT_MGR already set 06:02:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0x5, @rand_addr="392b5a7680a667b0cbb1476d9d706892", 0x1001}, {0xa, 0x4e21, 0xffffffffffff5dff, @dev={0xfe, 0x80, [], 0x24}, 0x40}, 0x9, [0x6, 0x40, 0x20, 0x4, 0x4, 0x6, 0xfffffffffffeffff, 0x4]}, 0x5c) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f00000001c0)=0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="116348400000000089f1a0a0bb878ac79a47a8129ffb9b1da8d19f8dc9c00a2a874e7d4e2fdb899dd389a5537fb46c01a58e2a7a4fb6c020958c5df5a2b920e6ac8dd59e83e4314c8458f8480f41d6641ccbd6d814a6d828278f2351d16d85c1"], 0x0, 0xfffffdfd, 0x0}) [ 965.260336][T32089] binder_alloc: 30918: binder_alloc_buf, no vma [ 965.266808][T32090] binder: 32085:32090 ioctl 40046207 0 returned -16 [ 965.412395][T32090] binder: BINDER_SET_CONTEXT_MGR already set [ 965.441646][T32090] binder: 32085:32090 ioctl 40046207 0 returned -16 [ 965.480424][T32107] binder: BINDER_SET_CONTEXT_MGR already set [ 965.486497][T32107] binder: 32106:32107 ioctl 40046207 0 returned -16 [ 965.513656][T32107] debugfs: File '32106' in directory 'proc' already present! [ 965.537569][T32110] binder: BINDER_SET_CONTEXT_MGR already set [ 965.554166][T32110] binder: 32106:32110 ioctl 40046207 0 returned -16 [ 965.562745][T32107] debugfs: File '32106' in directory 'proc' already present! 06:02:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10957479, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2e0000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x400000000000000, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/57, 0x39) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x8800}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:17 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000016e) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) 06:02:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0xfffffdc6, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x100, @mcast1, 0x8}, @in6={0xa, 0x4e23, 0x3f, @loopback, 0x10000}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r3, 0x9}, &(0x7f0000000200)=0x8) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() getgroups(0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0xee01, 0xee00, 0xee01, 0xee00]) setresgid(r6, r7, r8) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000003c0), &(0x7f0000000280)=0x40) write$vhci(r4, &(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, "3c7e7fdcecbd2a22aff2d26cbaab63341a18500dd4b0cc6fb54195d92fa99ac0b79d4eac9fff98027b94a3c611c1241bc098b0486d9a4da3cbdae74fbdf9d6948e98388f0793423770fc7b3dee66b7abe60488d6a0c6801f25618eb7a7baad9eeee1b2a19f719a8fdac7252e57083f5030979ef8e8ca3f4abd2c6310a9d536940ae69fc18edc8dfbeb2e47f6fcc79b4c7e445dc487c2d4828c4d6fe43fd00da60b685f4b6eda957244b376692e8cd3c144ea7b05340ccc92251b0503c86ea9c7a41082d2f36f5b"}, 0xc8) get_thread_area(&(0x7f0000000540)={0xfffffffffffffff9, 0x0, 0x4000, 0x7, 0xfffffffffffffff9, 0x6, 0x401, 0x7, 0x12, 0x5f}) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'sit0\x00', 0x101}) close(r4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'rose0\x00', 0x5000}) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000400), 0x4) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r5}) 06:02:17 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000000080)=0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)=0x0) tkill(r3, 0x32) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000180)={r4, 0x2}) [ 965.771951][T32125] binder: BINDER_SET_CONTEXT_MGR already set [ 965.795237][T32126] debugfs: File '32120' in directory 'proc' already present! [ 965.809204][T32125] binder: 32118:32125 ioctl 40046207 0 returned -16 [ 965.822010][T32127] debugfs: File '32122' in directory 'proc' already present! 06:02:17 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 965.869895][T32125] binder: BINDER_SET_CONTEXT_MGR already set [ 965.928540][T32125] binder: 32118:32125 ioctl 40046207 0 returned -16 [ 965.935587][ T5] bridge0: port 2(bridge_slave_1) entered disabled state 06:02:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000040)={0x7, 0x3, 0x8, 0x7f, '\x00', 0x9}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ef0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4000000000000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="116342a623000000"], 0x0, 0xfffffdfd, 0x0}) 06:02:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fcntl$dupfd(r0, 0x406, r1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000100)=0x33) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r3, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xfffffffffffffded, 0x7fff, 0x1ff, 0x4, 0x8}, 0x98) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r4) 06:02:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = semget(0x0, 0x0, 0x100) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ptrace$getenv(0x4201, r3, 0x2000000000000001, &(0x7f0000000040)) semctl$SEM_INFO(r2, 0x2, 0x13, &(0x7f0000001040)=""/4096) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116349404000000034e356ddb3a33d8df2200000000000006d918aad6c66"], 0x0, 0xfffffdfd, 0x0}) 06:02:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000040)=""/187, &(0x7f0000000100)=0xbb) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) 06:02:18 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 966.135911][T32154] binder: BINDER_SET_CONTEXT_MGR already set [ 966.167432][T32154] binder: 32152:32154 ioctl 40046207 0 returned -16 [ 966.197672][T32160] debugfs: File '32156' in directory 'proc' already present! [ 966.239866][T32159] binder: BINDER_SET_CONTEXT_MGR already set [ 966.254756][T32160] binder: 32156:32160 ioctl 5429 20000000 returned -22 [ 966.268581][T32159] binder: 32158:32159 ioctl 40046207 0 returned -16 [ 966.268663][T32167] binder: BINDER_SET_CONTEXT_MGR already set 06:02:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) getsockname$netlink(r1, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) [ 966.286243][T32159] debugfs: File '32158' in directory 'proc' already present! [ 966.299346][T32160] binder: 32156:32160 unknown command 1078551313 [ 966.318678][T32167] binder: 32152:32167 ioctl 40046207 0 returned -16 [ 966.331514][T32160] binder: 32156:32160 ioctl c0306201 20012000 returned -22 06:02:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x404000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40002, 0x0) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="008000f95a0000ee731b2feda62f00"], 0x0, 0xfffffdfd, 0x0}) [ 966.340021][T32159] binder_alloc_new_buf_locked: 2 callbacks suppressed [ 966.340034][T32159] binder_alloc: 30918: binder_alloc_buf, no vma [ 966.368495][T32166] binder: 32156:32166 ioctl 5429 20000000 returned -22 [ 966.424075][T32159] binder: BINDER_SET_CONTEXT_MGR already set [ 966.463389][T32159] binder: 32158:32159 ioctl 40046207 0 returned -16 [ 966.504936][T32179] binder: BINDER_SET_CONTEXT_MGR already set [ 966.541143][T32179] binder: 32178:32179 ioctl 40046207 0 returned -16 [ 966.591915][T32183] binder: BINDER_SET_CONTEXT_MGR already set [ 966.601480][T32183] binder: 32178:32183 ioctl 40046207 0 returned -16 [ 966.609037][T32179] debugfs: File '32178' in directory 'proc' already present! 06:02:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000016f) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:18 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@null=' \x00', 0xf, 'gre0\x00'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="43831d1700000000"], 0x0, 0xfffffdfd, 0x0}) 06:02:18 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c642, 0x100) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000100)={0x1, 0x100000001, 0x1f, 0x100}) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 06:02:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) socketpair(0x11, 0x7, 0x28fe, &(0x7f0000000040)={0xffffffffffffffff}) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x80000) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newtclass={0x74, 0x28, 0x2, 0x70bd29, 0x25dfdbff, {0x0, r3, {0xffff}, {0xfffb, 0xb}, {0xffff}}, [@tclass_kind_options=@c_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0x44, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x9, 0x4, 0x9}}, @TCA_HFSC_RSC={0x10, 0x1, {0x80000001, 0x3, 0x9}}, @TCA_HFSC_USC={0x10, 0x3, {0xfffffffeffffffff, 0x6, 0x9}}, @TCA_HFSC_FSC={0x10, 0x2, {0xbaac, 0x7ff, 0x20}}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40041}, 0x400c0c0) 06:02:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000484001d15200"], 0x0, 0xfffffdfd, 0x0}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x9, 0xfffffffffffffffe, 0x4, 0x7, 0xffffffffffff0001, 0x3, 0x4, 0x5bf1, 0x0, 0x0, 0x1, 0xfffffffffffffffa, 0x4, 0x976, 0x5b611450, 0x0, 0xa9700000000, 0x7fffffff, 0x10f457d1, 0x5, 0x0, 0x4, 0x4, 0x0, 0x1000, 0xb54, 0x9, 0x8, 0xfffffffffffffffb, 0x8, 0xf3e, 0x3]}) [ 966.821324][T32194] binder: BINDER_SET_CONTEXT_MGR already set [ 966.836691][T32197] debugfs: File '32188' in directory 'proc' already present! [ 966.856969][T32194] binder: 32193:32194 ioctl 40046207 0 returned -16 [ 966.856973][T32192] binder: BINDER_SET_CONTEXT_MGR already set [ 966.856995][T32192] binder: 32191:32192 ioctl 40046207 0 returned -16 06:02:18 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:18 executing program 5: r0 = getpgid(0x0) sched_setparam(r0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(r0, &(0x7f0000000100)='maps\x00') ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000180)={0x31, &(0x7f0000000140)=""/49}) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) [ 966.905479][T32202] binder: BINDER_SET_CONTEXT_MGR already set [ 966.922189][ T26] audit: type=1800 audit(1564034538.799:45): pid=32197 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17084 res=0 [ 966.950399][T32202] binder: 32193:32202 ioctl 40046207 0 returned -16 [ 966.984062][T32197] binder_alloc: 30918: binder_alloc_buf, no vma [ 966.999554][T32209] binder: BINDER_SET_CONTEXT_MGR already set 06:02:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000040)="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") ioctl(r0, 0x2, &(0x7f0000000180)="62ec1aacdd1690e2a88f") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x6, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) [ 967.028646][T32209] binder: 32191:32209 ioctl 40046207 0 returned -16 [ 967.036767][ T26] audit: type=1800 audit(1564034538.909:46): pid=32210 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17084 res=0 06:02:19 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:19 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000040)=0x7f, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x108, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r3}, @decrefs={0x40046307, 0x2}, @free_buffer={0x40086303, r4}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/120, 0x78, 0x2, 0x2f}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0xa}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x4, 0x1, 0x2a}, @fda={0x66646185, 0x7, 0x0, 0x6}, @fda={0x66646185, 0x9, 0x0, 0x3b}}, &(0x7f0000000240)={0x0, 0x20, 0x40}}, 0x1000}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x6, 0x0, 0x3d}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/230, 0xe6, 0x0, 0x3f}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000400)={0x0, 0x20, 0x48}}}, @register_looper, @clear_death], 0xb5, 0x0, &(0x7f0000000580)="eb5392b0f5864c76dfbbef3a0b59e6921b04b0162f45b66ed72f61afd2038ffb0eb482961216fc5e75ebe04554770c29b097e453c3c167cc23769d209f9386fa561504bb878be793894431257bdd92fb4cbe3747dc9e7d9054bcb6539ac4686aeec41af1441c1fbbc5e588313615524435ba24f0d866db27992e9f752134bfe80860aed5be4c1c02f2ba2f46db480e315c38710cf3902ee946cc91b88834fed48e929fad8e60d3d50e8f569340f6b2d389de3ae042"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000001c9944a8a1d475e7fcca5fcf9e1dce6d365747371d49b73100c794a290a42f51442a383be381b466e22a19c86088ea27f683828eeeb9a04142dd8e95935c79dc107a8ea09e21f64f4b908b2bd2aea4c84a263088200ca2788c8314d8f86b5e54c91c02b2aee66cac7a284bb42b6140efce1bab1c580953b1e9fc7b873060f273436beb9dcfdd7dafcb1197ce6796d015522ce72a16b4f0360822b36418c50ebf75b42f767b7f0fe5e03f12322a5cc584d75e230adebc0e06d4402e0d0a801ad2a20b4b3434f2c0a44031e1633ef9db"], 0x0, 0xfffffdfd, 0x0}) [ 967.225614][T32232] binder: BINDER_SET_CONTEXT_MGR already set [ 967.262079][T32232] binder: 32223:32232 ioctl 40046207 0 returned -16 [ 967.276509][T32233] binder: BINDER_SET_CONTEXT_MGR already set [ 967.295952][T32233] binder: 32229:32233 ioctl 40046207 0 returned -16 [ 967.315695][T32232] binder: BINDER_SET_CONTEXT_MGR already set [ 967.335297][T32236] debugfs: File '32235' in directory 'proc' already present! [ 967.340267][T32232] binder: 32223:32232 ioctl 40046207 0 returned -16 [ 967.361058][T32237] binder: BINDER_SET_CONTEXT_MGR already set [ 967.372239][T32237] binder: 32229:32237 ioctl 40046207 0 returned -16 [ 967.418604][T32236] binder_alloc: 30918: binder_alloc_buf, no vma 06:02:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000170) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:19 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x200, 0x98100) write$P9_RCLUNK(r2, &(0x7f0000000100)={0x7, 0x79, 0x2}, 0x7) 06:02:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) 06:02:19 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000040)={0x9, 0x3, 'client1\x00', 0xffffffff80000001, "15136892a9eb759b", "d14bf373e5d5f11164fe5d589ed9fa6e82115ef5b3cd6d9e13ce557d87238120", 0x6, 0x830}) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x9, 0x80000000}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x0, 0xfffffdfd, 0x0}) [ 967.907783][T32252] binder: BINDER_SET_CONTEXT_MGR already set [ 967.940811][T32253] binder: BINDER_SET_CONTEXT_MGR already set [ 967.946888][T32252] binder: 32250:32252 ioctl 40046207 0 returned -16 06:02:19 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 967.974032][T32259] binder: BINDER_SET_CONTEXT_MGR already set [ 967.974439][T32253] binder: 32248:32253 ioctl 40046207 0 returned -16 [ 967.986517][T32259] binder: 32255:32259 ioctl 40046207 0 returned -16 [ 968.003892][T32264] binder: BINDER_SET_CONTEXT_MGR already set [ 968.019992][T32259] debugfs: File '32255' in directory 'proc' already present! [ 968.031162][T32264] binder: 32250:32264 ioctl 40046207 0 returned -16 [ 968.032473][T32253] binder: BINDER_SET_CONTEXT_MGR already set 06:02:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/245, 0xf5) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) [ 968.077128][T32253] binder: 32248:32253 ioctl 40046207 0 returned -16 [ 968.077994][T32259] binder_alloc: 30918: binder_alloc_buf, no vma 06:02:20 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:20 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0x0, 0x8, 0x2}, 0x10) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000740)={0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x80208e, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0xd2}}, {@mode={'mode', 0x3d, 0x1}}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/cachefiles\x00'}}]}) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) ioctl$KDADDIO(r1, 0x4b34, 0x0) [ 968.123021][T32267] binder: BINDER_SET_CONTEXT_MGR already set [ 968.154615][T32267] binder: 32255:32267 ioctl 40046207 0 returned -16 06:02:20 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x8000, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000002c0)=""/200) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x9c, 0x200) getsockopt$inet_dccp_buf(r3, 0x21, 0xc2, &(0x7f00000000c0)=""/107, &(0x7f0000000140)=0x6b) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xfffffffffffffeed, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r2}], 0x0, 0xfffffdfd, 0x0}) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000240)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x117, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r4, 0x7ffd3ea99c3c33ed}}, 0x10) [ 968.306237][T32288] binder: BINDER_SET_CONTEXT_MGR already set [ 968.333258][T32288] binder: 32285:32288 ioctl 40046207 0 returned -16 [ 968.340648][T32286] binder: BINDER_SET_CONTEXT_MGR already set [ 968.346983][T32286] binder: 32279:32286 ioctl 40046207 0 returned -16 [ 968.368981][T32286] debugfs: File '32279' in directory 'proc' already present! [ 968.380314][T32286] binder_alloc: 30918: binder_alloc_buf, no vma [ 968.396758][T32291] binder: BINDER_SET_CONTEXT_MGR already set [ 968.421072][T32295] debugfs: File '32293' in directory 'proc' already present! [ 968.425832][T32291] binder: 32285:32291 ioctl 40046207 0 returned -16 [ 968.490948][T32300] debugfs: File '32293' in directory 'proc' already present! 06:02:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000171) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:22 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="118c2bb37d2cd53b040e4404f69b51a063484000000000"], 0x0, 0xfffffdfd, 0x0}) 06:02:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10300, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x5}}, 0x1a6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0306d2fbbfa241849d55809067009003f866e3efb691324f0823fd03f19812e85ed10a50a0c7b520515ee80e9cf824b052eef93be4b506c2bb599c1f581a04806a28a1e4430fcac5b2c21b2e99798d9dd18c98bb3c62bbfaf61ef9e04caa26e93debe949b433e20afd945b83a01a6ca7cb257e9b4bafe03685e59a92e564132b247d6a0a4ae99658f0fcedeb8b2074165b68948e618a2522244c09"], 0x0, 0xfffffdfd, 0x0}) 06:02:22 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000}) r3 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x4, 0x400) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={r2, 0x80000, r3}) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x6, 0x40000) [ 970.986376][T32309] binder: BINDER_SET_CONTEXT_MGR already set [ 971.008503][T32314] debugfs: File '32311' in directory 'proc' already present! [ 971.024454][T32309] binder: 32305:32309 ioctl 40046207 0 returned -16 [ 971.041143][T32313] binder: BINDER_SET_CONTEXT_MGR already set 06:02:22 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 971.081616][T32313] binder: 32306:32313 ioctl 40046207 0 returned -16 [ 971.088653][T32309] binder: BINDER_SET_CONTEXT_MGR already set [ 971.094741][T32314] binder_alloc: 30918: binder_alloc_buf, no vma [ 971.103552][T32309] binder: 32305:32309 ioctl 40046207 0 returned -16 [ 971.128613][T32313] binder: BINDER_SET_CONTEXT_MGR already set 06:02:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x400, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fb) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x9) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 06:02:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11630000000008000e86a93672234a73dcbc5fc014d9cfff0be26790ff9bfd984bc037ea268830e7"], 0x0, 0xfffffdfd, 0x0}) 06:02:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x2) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x958d, 0x20, 0x80000001, 0x2}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x1}, &(0x7f0000000100)=0x8) syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40601, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) [ 971.152318][T32313] binder: 32306:32313 ioctl 40046207 0 returned -16 06:02:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss={0x2, 0x10000}, @window={0x3, 0x100e23fb, 0x228c}, @window={0x3, 0xfffffffffffffffc, 0xffffffffffffff81}], 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="116348400000000065202b803cf62647f958bbbfbb002c1128bff490e42171aa755e0514df8824027c8c08045333fe6a1beb93464a0f03739e8e893e6d"], 0x0, 0xfffffdfd, 0x0}) [ 971.281125][T32336] binder: BINDER_SET_CONTEXT_MGR already set [ 971.306460][T32336] binder: 32331:32336 ioctl 40046207 0 returned -16 06:02:23 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 971.324307][T32336] debugfs: File '32331' in directory 'proc' already present! [ 971.339114][T32336] binder: 32331:32336 unknown command 25361 [ 971.390427][T32336] binder: 32331:32336 ioctl c0306201 20012000 returned -22 [ 971.423880][T32345] debugfs: File '32337' in directory 'proc' already present! [ 971.443940][T32347] binder: BINDER_SET_CONTEXT_MGR already set [ 971.480217][T32347] binder: 32331:32347 ioctl 40046207 0 returned -16 [ 971.487037][T32350] binder: BINDER_SET_CONTEXT_MGR already set [ 971.527528][T32345] binder_alloc: 30918: binder_alloc_buf, no vma [ 971.534855][T32350] binder: 32346:32350 ioctl 40046207 0 returned -16 [ 971.544625][T32336] debugfs: File '32331' in directory 'proc' already present! [ 971.575621][T32358] binder: BINDER_SET_CONTEXT_MGR already set [ 971.617484][T32358] binder: 32346:32358 ioctl 40046207 0 returned -16 [ 971.637747][T32350] debugfs: File '32346' in directory 'proc' already present! 06:02:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000172) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000300)=""/177, &(0x7f00000003c0)=0xb1) syz_open_procfs(r2, &(0x7f0000000140)='children\x00') r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x0, 0x0) recvfrom(r4, &(0x7f00000001c0)=""/164, 0xa4, 0x2, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x3, {0xa, 0x4e22, 0xffff, @rand_addr="224be10208c54a1f5a967264a5bf73d8", 0x4}}}, 0x80) 06:02:23 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:23 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000880)='/dev/vbi#\x00', 0x3, 0x2) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r2, 0x5427) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000840)=0x100) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000008c0)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000900)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000940)={r4, r5, 0x7}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') preadv(r2, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/229, 0xe5}, {&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000500)=""/248, 0xf8}, {&(0x7f0000000600)=""/48, 0x30}, {&(0x7f0000000640)=""/98, 0x62}, {&(0x7f00000006c0)=""/221, 0xdd}], 0x6, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x200, r6, 0x520, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7bc0af29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x587d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfe}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x55d}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x20044011}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:23 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1163484000000800"], 0x0, 0xfffffdfd, 0x0}) 06:02:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x4}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000040)={r2, @in={{0x2, 0x9, @multicast1}}, 0x9, 0x1, 0x1, 0xfff, 0xc0}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r3, 0x77ed, 0x6, 0x261}, &(0x7f00000001c0)=0x10) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="8c51484000000000"], 0x0, 0xfffffdfd, 0x0}) [ 971.910122][T32373] binder: BINDER_SET_CONTEXT_MGR already set [ 971.918164][T32375] debugfs: File '32364' in directory 'proc' already present! [ 971.936114][T32373] binder: 32368:32373 ioctl 40046207 0 returned -16 [ 971.943262][T32374] binder: BINDER_SET_CONTEXT_MGR already set 06:02:23 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000140)={{0x3f, @loopback, 0x4e20, 0x1, 'none\x00', 0x2, 0x2, 0x36}, {@remote, 0x4e22, 0x4, 0xffffffffffffffcb, 0xb90, 0x1ff}}, 0x44) write$vhci(r1, &(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, "7af68962c3bf6400e53a1138b12b06bc7a5aa8f95cf5b9719bb9d13d73880616d56660c9f09caab6cc7924b374b8a6bf9f4dd4fc9c110492b4c08fccd6fd8e33a419510fb096d0881805888948"}, 0x4e) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) [ 971.959482][T32374] binder: 32369:32374 ioctl 40046207 0 returned -16 [ 971.973976][T32373] debugfs: File '32368' in directory 'proc' already present! [ 972.024932][T32374] debugfs: File '32369' in directory 'proc' already present! [ 972.034616][T32373] binder_alloc: 30918: binder_alloc_buf, no vma 06:02:23 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000000)='/dev/binder#\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) [ 972.080487][T32387] binder: BINDER_SET_CONTEXT_MGR already set [ 972.098170][T32374] binder: 32369:32374 unknown command 1078481292 [ 972.108186][T32387] binder: 32368:32387 ioctl 40046207 0 returned -16 [ 972.122567][T32374] binder: 32369:32374 ioctl c0306201 20012000 returned -22 06:02:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000200)=0xe8) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x70}, {0x4, 0x7}], r2}, 0x18, 0x3) close(r1) [ 972.138455][T32373] debugfs: File '32368' in directory 'proc' already present! [ 972.169903][T32395] debugfs: File '32392' in directory 'proc' already present! [ 972.178410][T32379] binder: BINDER_SET_CONTEXT_MGR already set 06:02:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000040)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000001c0)={@mcast1, 0x7b, r3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1154484000000000"], 0x0, 0xfffffdfd, 0x0}) [ 972.194475][T32379] binder: 32369:32379 ioctl 40046207 0 returned -16 [ 972.224472][T32374] debugfs: File '32369' in directory 'proc' already present! [ 972.234310][T32395] binder_alloc: 30918: binder_alloc_buf, no vma [ 972.386722][T32410] binder: BINDER_SET_CONTEXT_MGR already set [ 972.425885][T32410] binder: 32408:32410 ioctl 40046207 0 returned -16 [ 972.471393][T32410] debugfs: File '32408' in directory 'proc' already present! [ 972.518466][T32410] binder: 32408:32410 unknown command 1078481937 [ 972.525153][T32410] binder: 32408:32410 ioctl c0306201 20012000 returned -22 [ 972.537500][T32414] binder: BINDER_SET_CONTEXT_MGR already set [ 972.547490][T32414] binder: 32408:32414 ioctl 40046207 0 returned -16 06:02:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000173) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:24 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) openat(r0, &(0x7f0000000080)='./file0\x00', 0x4000, 0x2) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffdfd, 0x0}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x44000, 0x0) 06:02:24 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000300)=""/62) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x3f, 0x800, 0x5, 0x9}) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x8) syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="2c83390f497fc662efb815b1b60a7037e4380e0eca3c04a553c595a6f5e150b60bafd32316bb5b5418838b138fef37b26d7f6391e238da9b", 0x38, 0xfffffffffffffffd) keyctl$invalidate(0x15, r5) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="8100000000000000"], 0x0, 0xfffffdfd, 0x0}) 06:02:24 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xd5f9, 0x101000) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x100) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0xffffffffffffff25) fallocate(r0, 0x2, 0x8, 0xff) close(r2) 06:02:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10000, 0x0) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000100)={'team0\x00', 0x10001}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x7, 0x6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="118bffff1200009599233e1be800b2262ac0c7771f297a2709b03c3df7d30cb512be33f4d26767fff55a34820c101ee21ea2c99ac1d7ec10c85e5a82c8a64f6ff330b450b8d96d1a7a3676136d6b80482261634f03262b9b1a2814abcbdec78fe8060188755b31cea340eaa1bf39764614d0139c85b8f4b68db5871aca7c6eee73e3433e82cfc53dee921219ceda4745ee14a683afa3c04a90aa117e9f2c8bb61e23c8975341c0"], 0x0, 0xfffffdfd, 0x0}) 06:02:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x3ff, 0x10000) bind$vsock_dgram(r1, &(0x7f0000000180)={0x28, 0x0, 0x2711, @hyper}, 0x10) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x9, 0x8080) write$P9_RLCREATE(r3, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x80, 0x3, 0x8}, 0x3c500000000000}}, 0x18) 06:02:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 972.811171][T32428] binder: BINDER_SET_CONTEXT_MGR already set [ 972.834041][T32423] binder: BINDER_SET_CONTEXT_MGR already set [ 972.840461][T32428] binder: 32421:32428 ioctl 40046207 0 returned -16 [ 972.851459][T32423] binder: 32417:32423 ioctl 40046207 0 returned -16 06:02:24 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000029ab40cbac0bd963cec8d4ef0a0aa6a974156d84e8527cabf427cd934eb47bae733c1184ad8eb272d3f0acca0436a281301208f740cfdf906115e34d8f4595af458f49013e1dcbdbe35c2548ead5aaa87cf85511a316d914acee33bb4382237a57de9c2af1a31c039f25ef9acefa9f8f8f413b3209f36d3dcd00c4d57d03984d330d32b827c50f"], 0x0, 0xfffffdfd, 0x0}) [ 972.985310][T32433] binder: BINDER_SET_CONTEXT_MGR already set 06:02:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) sendto(r0, 0xfffffffffffffffe, 0x0, 0x4044014, &(0x7f0000000100)=@l2={0x1f, 0x6, {0x1, 0x7, 0x2, 0xfff, 0x9, 0x5}, 0x7fe}, 0x80) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) msgget(0x1, 0x400) [ 973.039616][T32428] debugfs: File '32421' in directory 'proc' already present! [ 973.041843][T32431] binder: BINDER_SET_CONTEXT_MGR already set [ 973.054567][T32433] binder: 32417:32433 ioctl 40046207 0 returned -16 [ 973.078016][T32431] binder: 32421:32431 ioctl 40046207 0 returned -16 06:02:25 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x5, 0x1, 0x1) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840000000000a101f00805142a981c75b3ed2d946cd81f1d5cba7b3b474bfaeb537a06c8ccc63aa97c217539a68"], 0x0, 0xfffffdfd, 0x0}) [ 973.168995][T32457] debugfs: File '32454' in directory 'proc' already present! [ 973.208578][T32457] binder_alloc: 30918: binder_alloc_buf, no vma [ 973.288717][T32466] binder: BINDER_SET_CONTEXT_MGR already set [ 973.294791][T32466] binder: 32465:32466 ioctl 40046207 0 returned -16 [ 973.405709][T32470] binder: BINDER_SET_CONTEXT_MGR already set [ 973.412805][T32470] binder: 32465:32470 ioctl 40046207 0 returned -16 06:02:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000174) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000040)={0x6000000, "ac7e58743aaa1ae9c62722e9650e2fd04da14ce25df3c5ae95f4c7a9c6f36e22", 0x1, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0xa5a) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:25 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x2000, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[{0xe5, 0x0, 0x7ff, 0x9}, {0x3, 0xff, 0x4, 0x82}, {0x5, 0x7, 0x4, 0xfff}, {0x8, 0x8, 0x5, 0x5}, {0x6, 0x1ff, 0x7bcd, 0x6}, {0x8, 0x1, 0x5, 0x5}, {0x3, 0x1f, 0x6, 0xfffffffffffffff8}]}) socket$caif_seqpacket(0x25, 0x5, 0x0) 06:02:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000040)=""/59, &(0x7f0000000080)=0x3b) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) [ 973.714697][T32478] debugfs: File '32477' in directory 'proc' already present! [ 973.752182][T32486] binder: BINDER_SET_CONTEXT_MGR already set 06:02:25 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 973.797137][T32478] binder_alloc: 30918: binder_alloc_buf, no vma [ 973.799501][T32488] binder: BINDER_SET_CONTEXT_MGR already set [ 973.827649][T32486] binder: 32475:32486 ioctl 40046207 0 returned -16 [ 973.836448][T32488] binder: 32476:32488 ioctl 40046207 0 returned -16 [ 973.849704][T32478] debugfs: File '32477' in directory 'proc' already present! 06:02:25 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:25 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000008440)='/dev/input/mice\x00', 0x0, 0x10000) setsockopt$inet6_dccp_int(r0, 0x21, 0x5, &(0x7f000000ad00)=0x401, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) recvmmsg(r1, &(0x7f000000aa40)=[{{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/241, 0xf1}], 0x1}, 0xb3d}, {{&(0x7f00000002c0)=@vsock, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f00000004c0)=""/252, 0xfc}, {&(0x7f00000005c0)=""/236, 0xec}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/38, 0x26}], 0x6, &(0x7f0000001740)=""/69, 0x45}, 0xfffffffffffff3fa}, {{&(0x7f00000017c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001840)=""/231, 0xe7}, {&(0x7f0000001940)=""/235, 0xeb}, {&(0x7f0000001a40)=""/13, 0xd}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/138, 0x8a}, {&(0x7f0000002b40)=""/83, 0x53}, {&(0x7f0000002bc0)=""/41, 0x29}], 0x7, &(0x7f0000002c80)=""/198, 0xc6}, 0xb7}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/51, 0x33}], 0x1, &(0x7f0000002e00)=""/251, 0xfb}, 0x7f}, {{&(0x7f0000002f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000004200)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/143, 0x8f}, {&(0x7f0000004040)=""/241, 0xf1}, {&(0x7f0000004140)=""/188, 0xbc}], 0x4, &(0x7f0000004240)=""/201, 0xc9}, 0x3}, {{&(0x7f0000004340)=@generic, 0x80, &(0x7f0000004780)=[{&(0x7f00000043c0)=""/185, 0xb9}, {&(0x7f0000004480)=""/252, 0xfc}, {&(0x7f0000004580)=""/149, 0x95}, {&(0x7f0000004640)=""/242, 0xf2}, {&(0x7f0000004740)=""/61, 0x3d}], 0x5, &(0x7f0000004800)=""/144, 0x90}, 0x4}, {{0x0, 0x0, &(0x7f0000005b40)=[{&(0x7f00000048c0)=""/69, 0x45}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/71, 0x47}, {&(0x7f00000059c0)=""/167, 0xa7}, {&(0x7f0000005a80)=""/130, 0x82}], 0x5, &(0x7f0000005bc0)=""/140, 0x8c}, 0x7}, {{&(0x7f0000005c80)=@isdn, 0x80, &(0x7f0000008000)=[{&(0x7f0000005d00)=""/14, 0xe}, {&(0x7f0000005d40)=""/39, 0x27}, {&(0x7f0000005d80)=""/67, 0x43}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/199, 0xc7}, {&(0x7f0000006f00)=""/155, 0x9b}, {&(0x7f0000006fc0)=""/20, 0x14}, {&(0x7f0000007000)=""/4096, 0x1000}], 0x8}, 0x6}, {{&(0x7f0000008080)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000008500)=[{&(0x7f0000008100)=""/244, 0xf4}, {&(0x7f0000008200)=""/16, 0x10}, {&(0x7f0000008240)=""/226, 0xe2}, {&(0x7f0000008340)=""/129, 0x81}, {&(0x7f0000008400)=""/45, 0x2d}, {&(0x7f0000008440)}, {&(0x7f0000008480)=""/114, 0x72}], 0x7, &(0x7f0000008580)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f00000099c0)=[{&(0x7f0000009580)=""/218, 0xda}, {&(0x7f0000009680)=""/229, 0xe5}, {&(0x7f0000009780)=""/7, 0x7}, {&(0x7f00000097c0)=""/217, 0xd9}, {&(0x7f00000098c0)=""/220, 0xdc}], 0x5, &(0x7f0000009a40)=""/4096, 0x1000}, 0x1}], 0xa, 0x2000, &(0x7f000000acc0)) close(r2) 06:02:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0xfffffdfd, 0x0}) [ 973.918402][T32501] binder: BINDER_SET_CONTEXT_MGR already set [ 973.928289][T32501] binder: 32475:32501 ioctl 40046207 0 returned -16 06:02:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x6}, {r0, 0x4000}, {r0, 0x4020}, {r0, 0x8051}, {r0, 0x48}, {r0, 0x9210}], 0x6, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={0xfffffffffffff000}, 0x8) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4}}, &(0x7f0000000180)=0xe8) r4 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000cc0)={0xac, 0x0, &(0x7f0000000b40)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@ptr={0x70742a85, 0x0, &(0x7f0000000840)=""/41, 0x29}, @flat=@handle={0x73682a85, 0xa}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000900)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000a80)={@fda={0x66646185, 0x5, 0x0, 0x29}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/206, 0xce, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/34, 0x22, 0x0, 0x17}}, &(0x7f0000000b00)={0x0, 0x20, 0x48}}}, @free_buffer={0x40086303, r4}, @increfs={0x40046304, 0x2}, @decrefs={0x40046307, 0x3}], 0xbd, 0x0, &(0x7f0000000c00)="c64e311a1b80ada7f99f4f89d3d9f203b08169539b09e27b5258a0d5bb2ddc942bf24486a3dbe3a3d51341f9e5ace6a4887dad94cb35feb3c70f80a2b11bda1f33aee6a124ba2a34d5081604b4d56977e5476bd298689d3e3451e4b52873738c5395233b5157ec765fe3d95d1b1f017d9cc819b25ccfcae6b89560aa92531e47dc4f183842055f68f910210ff7496e8e1b1a56bef47d20df311b1ccb6a2743fe8610d7b8ed4180fed6f90de636e48c26d46e86e90ac3824856cf2d787a"}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@mcast1, 0x6b, r3}) r5 = socket$caif_stream(0x25, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000800)={&(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000300)="36675aa5211facdd2ae6a59aa54194e727a3175f95ecf59f57c413f63a601afc3c06ad11192a7d1e5f858c11ac693b3dbf40ca9ac427e1c810ff9804c4f147da2b60d6e14013648219178e9798f22152aa71d38abc6c8555318d730890b16c49bd3abf4ebc4a03f2b356444c896b263a725e46e2b02fbea36b2e4a7cc63ca34c4c16e3af786add2b3610a5ed010c22750140eb6f2bbac7aeec630ec337e4f00ed71e607d36748feda1ffe8973dddb529adbab6c45baf6e08377e1d3d36cd796863f0fbb59008cbd02c312b2c", 0xcc}, {&(0x7f0000000400)="42ca4f71117c0069cd0e477589a73b8af9a19a4acebfa715f37a38d913c865b65262a117cb0e6aa47544911211452048c6eff3efb09a1259fd7568f27ebc3f6b343a12b400dccbc249df0eac90d09a4ca506272468a23f6dbdfb9696ec3d07e20cd107ae61c58ee92cd49726f99d78cde6d581581d342d9167a99a0d91d21873a988f3", 0x83}, {&(0x7f0000001040)="1c8697653dbd5700818aef8e2562529788a97a0c6d035785eb2136600672716834745db1c6c0894a5c2b03ab0da16bab9687fd876836c0b66ff6c1f30447c1c53cfa9f09876f4f2a9059d3823bcb9c6f3be7089ea6fd537be4d413b28a5b946915f1b70ca6e514887d217e0f7595fc6fc6ef1919a4fcdb192129d73661b25a22845aa3670b68fa4bcd8dfd9894864a8774e01e09ad689e1e61fb26ce0c41cf26fadb947880937eee5599caabc48347ac950bbf7db3cc5835ec7c450e592fda7409f88ed2cc3b2c917b0bbffb339d6fa7e553f529c7290753bebe7ddcb90272b7261f5098f39732d4ede245993cad21339b5527ef354e64d1cb08cfe3d288304646d38b6fa6ad9e82b5e4aa11e398b43258fab07e0ad763989569b192a584f73f8d27013f1f643db8a0e75e3d0e178c9be653d4e23ed86cf2869aea4476a766928d5e98fd206cfab2fd492221cae588d52abe14b6981e07424ce3044455c58809f491189612ae8d04e82e924e72d917de6d08a40e51f36e80afb793dd5658462c2e695a486421c218bd6d76ed1a112bc500b091b40df86a076e438e3e8403b1054e23cc8217709f820f6fd3452f8a7843b5e87c946017d05ba37e46856289def61a9e433e9af00325ae54df360a0ebfe33fd925c0fdf9390b14bdd60f6d45196f10b2623d9f51d143ddb760172788c11acc1a9a8972065f988b4044e6b007bc8cd71099b9024793841991f7c3d3822342a04348f361246adeeeea1fbcc6e37580f5a2dabf2b9ba7fde53a6fd9b60d2737ac4a2298d60ba1459aacb865eb6fdd1b8413276b083775e5bf6d706c9c93dc9323f408320ab13f1325a7d215b4dc92a55bc2245173ef1f89cc3b7129a7a85d10b36f9d8699693478261f8e99c1e4424c53cab96bcedb3dcbabb363a17fc104ddb42cf1c27e25d7310e7e617a35dbd667c09fba18235d23fa6041c6c90a2172edec57c2727f6aec835723225ea0c4f48d346df4227975a04d7d228ebb1a5ef9a4e534b8e73a750a244f868b41e96531443de3413129f744079812566a95b8cd8e4f2ebb0fa53e70323e04866c59f6aebcf560921a1cf0f4b43156ec0969f7b45198978d4c855a7d7f005f9f50f2adf72c3b2f15152f8eb6e5e9ade6525a358a5ad4ebcca1e833ee66bb621729dc29c44d57fde2162f08e08f28df45f4120da27970ac025db96d0940ee8f5042f5ccda2366af63afe0a833f4f7d0b9b5ae690eeba00c412f29d688b5f27ecd16ae9ee7ea38b4aebdead721d45f845c9cb14d7f299f27adf7433bcdc46696f8d948e554913c4c29112f78d7d57b309f2c60beb10126d45552372b9f6fde65861c8f922b677e04edd4210c6fd5b1e9719538b8a36195d97b4615e7f5500511ffe413618a280e407c1d09fd8ec792c673a552142a31f5ce974f2993feb24b2751db6d47bd1cb11cb1d38044c07fa21249b6f6d13a63a471f5f332ec4c983377db4e9247eecff0dbd6283d88802cd4e095a95fb290360660f0130e699acba3c0bd549873a59b0d36286bf3b976cb1d1b793eb19e439168f186551c8fa16bd06cc5f6fcce9a7a890a6504a44df123d2e55223c5180f7b66afa2c5d44a8622df168c7f9923ea038d7acb6ccad1d46def62588424d6d694355a4d84c98c1dbc8118ea480b8e68043cc692b62fb9218d32d602946d24797885457e33c26e8cfd7c4e455408f3630cc34a26c94257b46cab4f8f2dc4eca3ded61c8b873e568596f43f8232797a04f62c4f444a2153b3a10369b27ea6183e3e54ff03fa42e02f9c45f340a981297cead1afe7bbac4d8e5ff311f15bfde034aa73748e303e6dc818a2c570ea7aea5e6ed099936e69d23ac9bac133f6ac8becd403a8c3109e47acd0b25f217f0f90f7cd1a47911a0b537033ddfa2a520c6502f5cac845cea963ecb5cfa388d3355f5a38f2fa0ba2451144d2c2bc752feeb02032121757ea5f22ccf282723645d0bc444baa7cc5d1548b3070d0c569e6b5247dbeee591bb49fb83790cf078b34ade9232d9218717d8da91b459bc70dfc56ae07d9b03e234c2339fa0f1d8219f7614747e027e9f45fdcf66384cd3504f3be17de0319047a4fa0cb0ca7ea79663eccacd7db9384d9765f602ae51b50dc3480f9a3a41eda478886ef181937fb42fa64faa97b8a7d10327319b5aacce520a167322aa2bf26021fe64cbd6cc57a2d80ee2847b3ae6148b03dae427902145ba8a21d4cf4484cdfa9565e223fdbbaa6475837b3fa1580c6cc0e2c0e3e962504749339c2ec9cb197bbae0a05bc5a2ed59899ca81b4117b9cc6136ae38fc7195a7ea46fc3fea9e7ee3d8f92a9774a9e0b0876dc80110de8409472df4ea1d3171c95f760f34aab9b90d43bee56d3308d19015a5abf8af417c50f6e168455ab49463dd2f17a8c1e186d8d0c2e15ecb261bd09cbf02991e31542c899155cccf56fa6df0f71c2ae90c9aec9a96218429b59b59d16a81b6c7de57144217438fc0943fd8a14a2410c36e009a3027c1cacfe0599e7c2e9fddf6bb1917741a77c4af03a90af1fde722ec009b1d2a0ff1632f9123a2994ca3feeede5f045769bb868bc54a7f26c91061ecf3ae98606c24436b98447d523a71479438c9601fd0a0026a88d394c5f977507fa187a08ad3dc95332d7cf869d0f24939c846d43083c69f9cd4b8ad379ce74f428a0abda33db8386553803d46803de93973d555710c95c63397e94b89363b184b9d1f8dedb1fb00000f5962b26ee2e0e923db59b27ab2133ce5be026665c508a533ae66f735acb53f9341c7b9c2d296c862abbb39e5001d8a92890abbaec223ba93affa2eb6608de3e2bb5779c54bc6d2b559b0254d9d3e80704406ac194670ac6999a10fc580408039578ab7438cfd324a75d974d1ec2b7730b02ef96cac2ae1e8ffeb5b03bb699cd0931f2f767be9918b5688dc80383e368fd06f84172ce59f2673590108242a3e12292749f436c9aa3a9b049e731a8608795b8c8cec64c33538a151cf015233722eb889d47091200850a4aee2163e89639527836b8c8b2e3ba9fa3548fc5a92e73fbcb79fbc18123567051e9887555859bb0e0a6f2b5f726df77e7acb53209371de0c5ecef475ec6047f9d070aea5d462605692a64e9dbcbbf29f863a52c687c62a3f47af0e7116205f001f9da57ea926c53b2c1ea5f2cd35374674b4548c84b76b43006883afd3023e9cf72823908dbf65ac1acd7909f6809bb29d6f1aaad037621069bc4811e5c228ba9082680adb0524ad24a9ceec4eeec91356ac6630a75183115cedfbf5ca6c3615797cb0d07ab0973e94164ba154e63c67e11efe1461f3d1d9a1ca15cdf4c3f63ac5605497f4ce6deaca616e04fa27aac4cb3c603dea666207d7bb1cca6b7e5e50156c46d601471b29ba77bb937d20936ddebee3895e1a8737c0c01f7b6a0c9abe41aef482d65831aee380b02df505d40f758abcdab0e09e385034d072e3bb37679e4b6b659b2c4562c2584654f58de7e884b44d43e901ef58b073a897c784f2d6d01a00f2536c7ed776d4865dc3902b1ca34d55dde3fcb70271bc4c8f3c311a9cb7815a1ab01c90b6dc46a39beb7021cc7ab91323a08d18d85e79b069e31a5bf56508213de7b5f56476df8150b729608fb1c63f2d4a6e46fc56f78c65b4a18a845d4bac73bb49ea8ddcfba02fa05e1c30343fed4eb46d7beea8595212841a4ffc9d3ebc3ca4e247e885cb10867a5e6d974a8af0a5182e15e8a21dee6b3744ad8449ad288ba52b2680f1346747ac446e39ab2927a072d1ea3a5930e3a534f8771c3a6ef711cfedeae6bbd7fd050a907ff3bf59c32eb0f87158e8d7b789c82fa0e89de8a542d33a4c2ab54ca993a81c6c8926afadaed7b9e4cf4732e9665d563296daaae2d6a77e3962c44d0ec6d3718f381fdc6493d98319366722eca8833aa549a53aa2ae279efab161ad0bcefd33bf85681ab1fd8c9e18ff75c0cc800c237a023d295ee79610e3bb8ead077d15e5a9d22fc7dea8f401f53d03855097711629702d5734d8541f99730b0cfa49aafbf80f38a1c8213b268cfaf660ab8331eefb035857c06b0e2a1986bc215348931fccdd5bb7d99c6406f2a194cdecf6489318fe29b295dbaa3cdb4a9260fa2d49f067f430afdddfed383c736efd3a21b3e259e7b66bf9a2611a107e4094d2489b6160683b3873591591c79cb0d195e1c8f0db356413e1c7ed1ed34bca56dcb1b172f46c24fe168fb9353213e5d2071501f67c81f56d75bee5f2e3af4702d66696f0b41155be2430e12ea5fa32d3b878c36e2fd0d7045f4afc1b31fcb72740e1ae673a1ac46215639ec5c75af6321fef7a249b5dd0c3704d19d200eb57cc25c20df41bfeb67a7d37f97579a42f2734df0218bc89ec30ba220572e96c1189d32427ac32dccd732518d50b121b2f479c268ab598bf8092cc784ddbdd593199fc86f353ab75cc6b7b70f8170268007c9b3662ef0531e58ce5c152596b6981162e942fb922cac458dfe039f12922321ed6aeded484b53fdd239919c7c6196f1f2cea7fc0129e17a3aabe0fed08c8c7a2a75652db5e0d96f765283b5d7a4d57c1681040269825c054b8f9f603078559a8c213f65f074e094d79cbaadfc633584d19a359703027ab1d1df880c02d3cd03aa81b6f1e1cfe704cdfe42edc1561c22fd8c3094361ef2aaa3300337d642ad47ea119015f5fc80379b4e89ddae08c97afd5b80bd6adc1fd8e6257f70ea1482e41228318408af699994114b622e83de13dee08508140cc5650d493b52eb9509f0e22665ecce5d81760214cb7dfcc73b83b06896a4a4af0da3280591666db532a0e2a08ba6d55d8af2b531181ebc2811517f9b11c1cc134f9b435e9d347966efed1ad9fba59394012093123ffd374343f2c5871aad6d3bd56f80e5ebfa6b2cc7a0a925ec97ad36ae5d80ea8e81973c4fa2afb4a662fb8b9b57093d92f3dff1f1b34c7a0b36924b1d866206336c14d99e653d60c145e4337ede71d6703e7432530927edd85b357e683a4bf8f02914e7dd1a283438cdf764836f3a5e585e668c6436811a1c3e488c6030c62102f16c92e71a130528c05bb74b629f96e2dcffed65e9eb4e7be7868a33f733d584adaadf84af4b7b973cc51d0a4cdca32336c2d1b01a9a6b176705217d0a5abc0aee72b7077efefd0cd88e7ba4a2cd3b0028f2ab2b5c81a80adf5981bb45a7faa2b1742231f5fc027fcd65c0c531c635c86fb8ff1b859f6fbc9c896bd65a3e63b5cbcb3a7f8c1f5d53bed2606b33722063f11fe937bcb52d3273386544023705c3a9d0ff466769185a264e0afd6614906bfea81744185515e297b61ae469b31e6328aa7803539d8f769d623e90ab8466a646fe37fb8bd02b4e0990373151170372ec9f0b2445d7ceeada8416f8a2e52cf6c1b6a16208908e61eeadd1d4f9c1bd1330023b097ab8861c85c0a492acc065813369c12d733c536b19343c4c23ff5a43df403472378421e57eea013b04d6bce2878177e22f31016d780cad22d74a1f90e58ddff4aea7caff4e86f8cb203b5ef3e1301ffff28f8f1302d40fb23ff15619af30bb2629b8026675bb785aa26a276a8dc5f607431d2e87877ccf595a421197f6f29612f9662478d1a94ed0e3a479b6a160d52b62b28549211c54d66e483d9e5fb95a6de8244bd1d72246086c07c86b305e039f2807f5bf3084d8fcb3972dae2727ba69c3b367d7afaa06b527c75053dc8f99651d2c98340932645e24bec364dd89412ac113ead8bb4566a7b13703fddd1867accd6bc36597", 0x1000}, {&(0x7f00000004c0)="798d73ad8efd054311bc36f15d794828dd3754b1f321f4ef56f5c3bcafd1de2af5b2f4d1950c08276bd4fe984f4cb31bbef96f99b811933d99245c7d1afd523b87fdc7e6f76e5f920b6369cf64dd8f1d5c35a37df672f11575c8c30948dbe62891413e4f5f74183a12f8b8506fb9207151d5d4", 0x73}, {&(0x7f0000000540)="95a5127833eaecffee6f8d78efd5146c4aa652bfb56a4ca5871b36fd66475ac8a3b1ac657e8c7ef226592b9fae67285868532960bf5dd89cc0f6a3a94865900be5b7ee902e2b2b58de8bb066aa79df5390f89c2b86c325f04909c2e8609c6627423f09337004601a8061f48a7d1c1f170f25857b7f5707699e98d04521b583c7c1fedfef465e11208969deb7faadcddc5ece16e6c5eab4a10e9a8809", 0x9c}], 0x5, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x78, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x0, [@remote, @remote, @local, @rand_addr=0x4, @multicast2]}, @end, @cipso={0x86, 0xd, 0x3, [{0x2, 0x7, "682299c557"}]}, @generic={0x94, 0x6, "d380327b"}, @end, @timestamp={0x44, 0x20, 0x401, 0x0, 0x1, [{[], 0x44}, {[], 0x6}, {[@remote], 0x5}, {[], 0x5}, {[@empty], 0x1e1cfee}]}, @lsrr={0x83, 0xf, 0x1, [@broadcast, @loopback, @loopback]}, @lsrr={0x83, 0xb, 0x4c0c, [@local, @local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2c65}}], 0x148}, 0x4000844) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0c63460500230000"], 0x0, 0xfffffdfd, 0x0}) ppoll(&(0x7f0000000200)=[{r6, 0x8018}, {r2}, {r0, 0x120}, {r6, 0x200}], 0x4, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={0x4}, 0x8) tee(r6, r1, 0x7d, 0xc) [ 974.085168][T32513] binder: BINDER_SET_CONTEXT_MGR already set [ 974.123144][T32514] debugfs: File '32512' in directory 'proc' already present! [ 974.130524][T32513] binder: 32510:32513 ioctl 40046207 0 returned -16 [ 974.152166][T32516] binder: BINDER_SET_CONTEXT_MGR already set [ 974.194375][T32514] binder_alloc: 30918: binder_alloc_buf, no vma [ 974.202229][T32518] binder: BINDER_SET_CONTEXT_MGR already set [ 974.209506][T32516] binder: 32515:32516 ioctl 40046207 0 returned -16 [ 974.217251][T32518] binder: 32510:32518 ioctl 40046207 0 returned -16 [ 974.226111][T32514] debugfs: File '32512' in directory 'proc' already present! [ 974.288543][T32516] debugfs: File '32515' in directory 'proc' already present! [ 974.298746][T32522] binder: BINDER_SET_CONTEXT_MGR already set [ 974.304755][T32522] binder: 32515:32522 ioctl 40046207 0 returned -16 06:02:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000175) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:28 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:28 executing program 0: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0xffffffff, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x800, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1163484000020000"], 0x0, 0xfffffdfd, 0x0}) 06:02:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11634840000000000ac427329b2e773b8b5bb026a71abcafb6cbf2d6827c31c6c09e179800865640a3847c283a9b3dfa85a73d7e96fbe0a11000bdb4a9a41c49b02e76e595cceab61f40f3a397a0c7bd8ff63ddedc53b739311c2d00654a9a158b88464c449314a53cf8cfb66d8e8e8196c94cef6fa12aa3f81b78e455b0d0dec9598b545b0372f3025401c0f8adf87b2675d630fcf013dc85065d06f0cda1f21c9d9f97436db0ce402b25455a9b848d3439df792009c0bd62051432"], 0x0, 0xfffffdfd, 0x0}) 06:02:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0x7, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x6) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240)={r3, 0x6, 0x5, 0x64c, 0x7b0c54e6, 0x7}, &(0x7f0000000280)=0x14) delete_module(&(0x7f0000000100)='/dev/vhci\x00', 0x800) [ 976.760284][T32535] binder: BINDER_SET_CONTEXT_MGR already set [ 976.793628][T32539] debugfs: File '32531' in directory 'proc' already present! 06:02:28 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 976.805660][T32535] binder: 32532:32535 ioctl 40046207 0 returned -16 [ 976.865044][T32545] binder: BINDER_SET_CONTEXT_MGR already set [ 976.901208][T32545] binder: 32532:32545 ioctl 40046207 0 returned -16 06:02:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) 06:02:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x2fd, 0xfffffdfd, 0x0}) 06:02:28 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100010000000000e9547b2cc94a77ecb733df956b7f902fea9f3d454fc15dc2e92101056863ca526cbcb46e204a67edc6063781d196ccd7dfe6d7f92eddb6c626f138b7fa4c7a53dfc82facb4455c7edf969e5be3fc1992977e338248d624cf88497afeb97ea211620d414efb509506f445aa2b29049e9fb2fc29d4a89d0bd5dacbda6b18aca7967dd14ebc4021287f6f88"], 0x0, 0xfffffdfd, 0x0}) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast1, @multicast2, 0x0}, &(0x7f0000000180)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14, 0x80000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@multicast2, @broadcast, 0x0}, &(0x7f0000000300)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000ec0)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000fc0)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000003040)={@mcast1, 0x0}, &(0x7f0000003080)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000030c0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f00000031c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000032c0)={@empty, @loopback, 0x0}, &(0x7f0000003300)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003340)={'bridge_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000003380)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000033c0)={'netdevsim0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000003400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003440)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000034c0)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f00000035c0)=0xe8) recvmmsg(0xffffffffffffffff, &(0x7f0000005e40)=[{{&(0x7f00000037c0)=@ax25={{0x3, @null}, [@netrom, @bcast, @bcast, @netrom, @remote, @null, @netrom, @default]}, 0x80, &(0x7f0000003940)=[{&(0x7f0000003840)=""/227, 0xe3}], 0x1, &(0x7f0000003980)=""/64, 0x40}, 0xb3f}, {{&(0x7f00000039c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000005000)=[{&(0x7f0000003a40)=""/244, 0xf4}, {&(0x7f0000003b40)=""/16, 0x10}, {&(0x7f0000003b80)=""/14, 0xe}, {&(0x7f0000003bc0)=""/44, 0x2c}, {&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/146, 0x92}, {&(0x7f0000004cc0)=""/150, 0x96}, {&(0x7f0000004d80)=""/230, 0xe6}, {&(0x7f0000004e80)=""/197, 0xc5}, {&(0x7f0000004f80)=""/123, 0x7b}], 0xa, &(0x7f00000050c0)=""/235, 0xeb}, 0xa2f2}, {{&(0x7f00000051c0)=@tipc=@id, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005240)=""/174, 0xae}, {&(0x7f0000005300)=""/91, 0x5b}, {&(0x7f0000005380)}], 0x3}, 0x1}, {{0x0, 0x0, &(0x7f0000005780)=[{&(0x7f0000005400)=""/31, 0x1f}, {&(0x7f0000005440)=""/171, 0xab}, {&(0x7f0000005500)=""/228, 0xe4}, {&(0x7f0000005600)=""/113, 0x71}, {&(0x7f0000005680)=""/246, 0xf6}], 0x5, &(0x7f0000005800)=""/36, 0x24}, 0x29f}, {{&(0x7f0000005840)=@isdn, 0x80, &(0x7f0000005900)=[{&(0x7f00000058c0)=""/25, 0x19}], 0x1, &(0x7f0000005940)=""/85, 0x55}, 0xfb}, {{&(0x7f00000059c0)=@sco, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000005a40)=""/22, 0x16}, {&(0x7f0000005a80)=""/3, 0x3}, {&(0x7f0000005ac0)=""/176, 0xb0}, {&(0x7f0000005b80)=""/7, 0x7}, {&(0x7f0000005bc0)=""/208, 0xd0}], 0x5, &(0x7f0000005d40)=""/220, 0xdc}, 0x8000000000}], 0x6, 0x40, &(0x7f0000005fc0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000063c0)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f00000064c0)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000006500)={@dev, 0x0}, &(0x7f0000006540)=0x14) accept4(0xffffffffffffffff, &(0x7f0000006580)=@hci={0x1f, 0x0}, &(0x7f0000006600)=0x80, 0x80000) getsockname$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006740)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000006f40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000006f00)={&(0x7f0000006780)={0x76c, r2, 0x0, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0xc0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r4}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0xfffffffffffffffe, 0x6, 0x5, 0x4}, {0x9, 0x3, 0x2, 0x401}, {0x8, 0x7fffffff, 0x0, 0x7}, {0x6, 0x80000000, 0x4, 0x9}, {0x0, 0x7ff, 0xd7, 0x8}, {0x6, 0x7ff, 0xfffffffffffffffa, 0x3}, {0xfffffffffffff415, 0x6, 0x3a3, 0x4856}, {0x200, 0x9, 0x8, 0xfff}, {0x6, 0x4, 0x1, 0x8}]}}}]}}, {{0x8, 0x1, r5}, {0x13c, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xdc}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8001}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x1fc, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x200}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x0, 0x7fffffff, 0xffffffffffffff0e}, {0x0, 0x3, 0x84, 0x3}, {0x9, 0x3f, 0x7, 0x7}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x184, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r18}, {0x40, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0xffffffff, 0x4, 0x0, 0x90700000000000}]}}}]}}, {{0x8, 0x1, r19}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x310}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r20}, {0xf0, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6e}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}]}, 0x76c}, 0x1, 0x0, 0x0, 0x800}, 0x80) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) 06:02:28 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0x180000000000, 0x100000001, 0x7, 0xb21, 0x7, 0x7}) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000080)=""/92) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000180)={0x4, {{0x2, 0x4e22, @rand_addr=0x2f}}, {{0x2, 0x4e24, @local}}}, 0x108) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="c738cb917609139fe0c9b3f168dad2bc", 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) [ 977.123897][T32565] binder: BINDER_SET_CONTEXT_MGR already set [ 977.171072][T32565] binder: 32562:32565 ioctl 40046207 0 returned -16 [ 977.194777][T32571] binder: BINDER_SET_CONTEXT_MGR already set [ 977.198350][T32574] debugfs: File '32568' in directory 'proc' already present! [ 977.211349][T32572] binder_alloc: 30918: binder_alloc_buf, no vma [ 977.223288][T32571] binder: 32566:32571 ioctl 40046207 0 returned -16 [ 977.233477][T32572] binder: 32562:32572 ioctl c0306201 20012000 returned -14 [ 977.234365][T32574] binder: 32568:32574 unknown command 65537 [ 977.242923][T32571] debugfs: File '32566' in directory 'proc' already present! [ 977.259580][T32574] binder: 32568:32574 ioctl c0306201 20012000 returned -22 [ 977.297526][T32571] binder_alloc: 30918: binder_alloc_buf, no vma [ 977.319763][T32576] binder: BINDER_SET_CONTEXT_MGR already set [ 977.325824][T32576] binder: 32566:32576 ioctl 40046207 0 returned -16 [ 977.333578][T32565] binder: BINDER_SET_CONTEXT_MGR already set [ 977.357984][T32565] binder: 32562:32565 ioctl 40046207 0 returned -16 06:02:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000176) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 06:02:29 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1163a18e74740000"], 0x0, 0xfffffdfd, 0x0}) 06:02:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x80000001, 0x0, 0x10000, 0x5}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0xb97, r2}) r3 = dup2(r0, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000100)={{0x5, 0x3, 0x7, 0x5, 'syz1\x00', 0x8001}, 0x1, [0x7, 0x4, 0x1, 0x8, 0x80000000, 0x5, 0x5, 0xffffffff, 0x1, 0x4, 0x656, 0x9, 0x1ff, 0x8000, 0x6, 0x9, 0xfffffffffffffffe, 0x0, 0x3, 0x1, 0x5, 0x7, 0x5718, 0x5, 0x9, 0x74d8, 0x3, 0x4, 0x1, 0x7, 0x6, 0xc70, 0x7, 0x2, 0x1, 0xdb, 0x8, 0x5, 0x401, 0x2601bd1c, 0x3, 0x8, 0x10001, 0x1, 0xd48, 0x37, 0x3, 0x2, 0x7, 0x5fc9, 0x2, 0x4a1a, 0x1, 0x100000001, 0x5, 0x2, 0x400, 0x150b96da, 0x80, 0x0, 0x49, 0xfffffffffffffff8, 0x2, 0x7, 0x7, 0x4, 0x9, 0x0, 0x2, 0x80000001, 0x3f, 0x4, 0x2, 0xffff, 0x7, 0xfffffffffffffffc, 0x3, 0x6d2, 0x4, 0x5, 0x6, 0xfff, 0x5, 0x1f, 0x7, 0x4, 0xaa, 0xfff, 0x81, 0x66a8, 0xfffffffffffffff9, 0x1, 0x3, 0x2, 0x7, 0x100, 0x4, 0x0, 0x4, 0x2, 0x4, 0x0, 0x80000001, 0x0, 0x100, 0x8, 0x7, 0x58a, 0x2, 0x3, 0x10000, 0x0, 0x7, 0x2, 0x3, 0x8001, 0x81, 0x0, 0x1, 0xffffffffffffd166, 0x7ff, 0xfffffffffffffffa, 0x5, 0x8, 0x40b6, 0x6, 0xfff, 0x7fffffff]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0xfffffdfd, 0x0}) ioctl(r1, 0x3, &(0x7f0000000080)="9218f7cd7a41870a5389459c7190fe6caf3224fea973e3117ff0604afecaf4d131a3f53894a9c54a6ed44c9fb494e1d043f3f536fae9a17addea443c2ee7545fb3807c530cfa727da4d20e753ebc033471c363e7920cc7") 06:02:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futex(&(0x7f0000000080)=0x2, 0x81, 0x2, &(0x7f0000000100)={r2, r3+30000000}, &(0x7f0000000180), 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="116348c000240004"], 0x0, 0xfffffdfd, 0x0}) [ 977.688383][T32586] binder: BINDER_SET_CONTEXT_MGR already set [ 977.723944][T32586] binder: 32584:32586 ioctl 40046207 0 returned -16 [ 977.731079][T32590] binder: BINDER_SET_CONTEXT_MGR already set [ 977.755950][T32598] binder: 32589:32598 ioctl 40106439 20000040 returned -22 [ 977.791084][T32593] binder: BINDER_SET_CONTEXT_MGR already set 06:02:29 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 977.802653][T32590] binder: 32589:32590 ioctl 40046207 0 returned -16 [ 977.816385][T32586] binder: BINDER_SET_CONTEXT_MGR already set [ 977.823114][T32593] binder: 32588:32593 ioctl 40046207 0 returned -16 [ 977.831514][T32586] binder: 32584:32586 ioctl 40046207 0 returned -16 06:02:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) fcntl$getownex(r3, 0x10, &(0x7f0000000280)={0x0, 0x0}) r7 = gettid() r8 = getuid() getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000d80)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000dc0)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000ec0)=0xe8) stat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000002c0)={0x5e4, 0x12, 0x420, 0x70bd2b, 0x25dfdbff, "", [@nested={0x104, 0x30, [@typed={0x8, 0x15, @pid=r4}, @typed={0xc, 0x30, @u64}, @generic="df05306d06485a2d535a50edd980a96e369e821c9fd39f94a23a573aef6a5b81722de275a45877015a2561150acb7dd8aa470ab80c122c286ebbed2ed958f2016de41e1db0eef3c38b2717c0cb1863b9095d12e872edc27972cb3b672089cf42d2327ac247cc746171cb1f7c35bee4f32427a0d83b33724e322270d449003c8e412f6010e3dabdcfcdf9c74ba648d51f270ed9b30cde455358a026c61966794fe3ce1cdb83370a758b2ec7c8807c7de39d49f799ef17e4c721a59e9cfb71072b96c883364cf0a151b233c6ddb9ece78c88f266ac72c9d1a2d67710b371ddb2cf9ab1d80d048f7c9e2e"]}, @generic="50d94234f95b7b4775f04425abc2a5300173fcb45ad99d7110c511558b3faaf8cc4ca6fd4b484c1be65f30cb9b36723e853c147c10ab3a37313992e6086b0abd83957c23b9ec8b8ff3fdcdb1ac750f283d2cb4e3e7da18575958f5891b34698222a001b9f5dc075012356683de7acbc732bafe65e101402385ae26ff107a7da8039beb05a28d76a39a61bba64e581f4d135dd52aba6227cd8b9e7c7566f924bf2e0937bfaebf7b90a60e9e059f55517d623c0e9a0ed164df75d32be7cef849906ce110a21969d8f17cd8f2c4d6d46fb3450ca1b02941021efc1e67e7962b54dd019da26e2d4c29954dcc4da7e8498955da6cf97b30", @typed={0xc, 0x6b, @str='em1]\x00'}, @typed={0x8, 0x89, @u32=0xdc}, @generic, @nested={0x12c, 0x56, [@typed={0x14, 0x71, @ipv6=@ipv4={[], [], @empty}}, @generic="9497aad1e5a1461241f0b9c7a7259f4d", @typed={0x8, 0x38, @fd=r0}, @typed={0x14, 0x24, @str='/dev/binder#\x00'}, @generic="00c33f4a23ebe6883ae43ba160f840b4165e387bd9e9518ae1be25490d986d63bade2f67a547dc283403631ddff62443c93968b56c135f1d5d3385021afc126316ccb06d2a1890368071c41b33e0b7c6ea305327fe17200aa5a3cddd2c7f9ad12a2db6161c95c5f618f821b9d7cc384d9db20a606a1a3b24e2d5932b20bdf13a6490f551a5722affc6d7c91a3e526e6d9a0907ff9dde3e2ce39e8d5c0c6f0b9b1aa1b095309eaf8c208a0979f8b6cb9830f18cff5ada80e40935e03d0c7b432716f128bd0d5294e64431e24399ead68eeb7c91d01d038662eaff064057b337463b06fe0374"]}, @typed={0x1c, 0x31, @str='bdevposix_acl_access/\x00'}, @generic="b904e3e09b632a7469002c1db1094f67a0568e90c3696f4b96e79ae21481adb2260a963f55083148258f4ed5290a40306dc938fef1", @nested={0x180, 0x84, [@generic="0b4b34442539018f82d749be14f618c9c40f8cdbd8ab56cc741d5a891b758cd640e11f9ad64a9f19d90081ab1eef61e51eb0a4f87d49d6942bd71938443e86f2375d1830b363060541c76f4b36c682799888bcaf4264034754b928fe96a5dccee4d3942ec62ea716fddba3191e031a0e113b70f32ef76cac4a9af1efe9eecce1b267283a1c6b3bea", @generic="0ed1bae56d07fdea61dc0219f3440f8634013fb852be2417d06fd2bba6f58f36289b8e2300de2e858f54dde0f97451e5890f1759e7344a00714c612ba267268971c653e744c644d52839417710e917c65bdc412e6b2d82c4e5faee83e91e1cec1f4443a6afdcce640f1c41dcbd3a1fbaca51", @generic="8200a616f0bb816f92034511682393cb909e8158d4e33024e610df3b6f2660fdc9884ed7fec491df075858fcea14b540ec9f199a73bf9b29fa9825cab8b75cc49ffce00c9ec525ffc82f3b36183b63c9bb71c5ce9cc6c22362744c726632", @typed={0x8, 0x3d, @uid=r5}, @typed={0x8, 0x82, @pid=r6}, @typed={0x14, 0x4, @ipv6=@rand_addr="1fd197f33c064e2c19b91cd8a07254ad"}]}, @generic="2b176e4e11e889931d93340b9abf1b80de1ac0f28d6c19ff5b5e82c5e3f21825d600cb26e10fab9c06c77e41960f5ab86c93358bd65d551afa0af4c718bd56a9139503fe75e5d41d222d77f77aecebe2cc68831c3afdddd7584cde60365625b3d801ac6cbbe3977a865f46222777ab2c01abcd3de45c4298192ea30f7def8d8df1be2295ab2bc11bd905af101e4b8041a74be2994ee9ff24a365fb268095c3904d4df980217e38a96ed78532c46e15f0b5eb079e5645fbac3260697efb9df41c3f12d530286956"]}, 0x5e4}, {&(0x7f00000008c0)={0x390, 0x38, 0x300, 0x70bd2b, 0x25dfdbff, "", [@nested={0x29c, 0x4, [@typed={0x8, 0x33, @u32=0x8}, @generic="4735a0099681d3e11b6f454e2392f980f6f24515640ec42dad3c974f1aabfa8c730d112d9fd7070bee444d4fa7965a4160f36c0711040c1dabd78164af9e0c451949954f7e1b6cdb4ffc49ad19d6e26d7a8268bea46a750b45bebb9af8581b717221456315af4ec361686338476ba026252563d80f230a21eb4db32e66eebb81543aed444dcd7409f4f670d27a", @generic="72ecada57fc948ae3b1e4856c0fa1ae551c48cbf578909baeef4b86d8403956aa63d097aefb4827dbad7fb18fe540d964989cf38c33c56dae8a287c97bc52543f33ed6670f2fc1af1f39ad6eff3a3d9d7323", @generic="f1c1d707057fcc6c22b87de8d534f6e621187714933c4d1564cf3d6632ebb0cf9f5c73afaaf93e9597a8e2b7219195425d4751254de6a3f1dca7203c23cf94c71fb06dadf3d9353b53e9ec1383d1cf90641ac3b6b4fa746826fbccca052a1367defc9dbcd9662d83813600811f97c2683838457bc151f7d2069e0e84e8d179a62efe929e7aca565a14d9fa8b3213d2d02eaea922e42e472a60907626f14b45e7bac010e86a8e4a3dc0a6281489c6c4a2a2e86f13e8bd888fd15485e875ea228b53e76bdbb216c342acdde64dd5e0c7bc35606106cd54efc4aab76e6c53a9c55e872e08dd01f9228fa9810f4216c6b49505d570098b", @generic="0952170116d38193d14a9bb5ce4accba7f7ce5e856bd0b8bf415643d022b006230b205cbe25656751eca864e99c600bc2a5584286ed042f5ca4b8fd41928f5dc8ab3e7f48d51b9ff998096ebde0c344175b5571d43efc6bd7a5bfc361d9b5cf1d830205be46a29b8cb4295c3a001a3d2e0bd91f2b7b067fc8e1c406422896e712c0f7d3521292d433b1a53b4c1107489cb879400cafe35876b5baccf35c9e40155a04c079d5fb3aad73a9cee6f33d5dd84a1f16a93f85d49f4"]}, @nested={0xe4, 0x31, [@generic="0e7d386c5c96d75f723fce0850348f8d015e2d2a974d0e1c5e1d50079339f5770bf8c2c96a069c5b64d1dc93cf2bb9e868a81a55902f5f114b2bd5492f5b14810a0ec966795d2daf2a5cc503afbc524bdb8086b9fe240bc7d465cda97515149495af0359f670b004f79b5843d45c460af89c855d49b2c455c9c19e0ef8a6937e4ca433325be2a4bb01cda726caf561e8c0489fd0994d0b6e7e12287bd9e4e4b77f516201b5ea087eaa5519f68fdb504ad042572900ee1607a21d24c3dd677f065902cbea5e601f05190ec79ec7b76c8b8b8d3fa19b64015131ecc3b7cf5ec6"]}]}, 0x390}], 0x2, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x38, 0x1, 0x1, [r1, r2, r1, r3, r2, r3, r2, r0, r0, r1]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x18, 0x1, 0x1, [r1, r3]}}], 0xa0}, 0x4000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r1, &(0x7f0000000100)="d3b1b76ef67154aaaa638b6f00cc1ad0ac57a2133fcbf9290bb293ac1cf3f4a3bd3843b973584e344fee305b7c9897e18775df2cfe8772bc00c6738475bcb2bdb3a5d1987136cc43a9f375be3a393dcbccd6ede4d240057bbd2466e4fa0767b35edb08d297b29a42eb85d01a6a537f312ccdc2b040d22acf118959e274cd96cfab92f272106311541532f81e07ab83fefff0fd7020ae2dee0b9171afebae3395e1a15b6691e7937c3e4790087c0cde673e1f07dc82f99224c44eb3bc3753b8ad891ccb0701109670a14727504e9bf2452dc893415220c2d31017956bfcbf4d0a294c2c", &(0x7f0000000200)=""/71}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9}, &(0x7f0000000300)=0x8) close(r2) [ 977.894109][T32600] binder: BINDER_SET_CONTEXT_MGR already set [ 977.917085][T32600] binder: 32588:32600 ioctl 40046207 0 returned -16 [ 977.934711][T32593] debugfs: File '32588' in directory 'proc' already present! 06:02:29 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 977.953695][T32590] binder: BINDER_SET_CONTEXT_MGR already set [ 977.980612][T32604] binder: 32589:32604 ioctl 40106439 20000040 returned -22 06:02:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x3, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1103000000000000"], 0x0, 0xfffffdfd, 0x0}) [ 978.049409][T32590] binder: 32589:32590 ioctl 40046207 0 returned -16 [ 978.064245][T32621] binder: BINDER_SET_CONTEXT_MGR already set [ 978.078479][T32621] binder: 32613:32621 ioctl 40046207 0 returned -16 06:02:30 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) connect(r0, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x80) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$KDSETMODE(r2, 0x4b3a, 0x7fff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={@null=' \x00', 0xf, 'veth0\x00'}) [ 978.126277][T32623] binder: BINDER_SET_CONTEXT_MGR already set [ 978.181117][T32621] debugfs: File '32613' in directory 'proc' already present! [ 978.192895][T32623] binder: 32613:32623 ioctl 4018620d 20000040 returned -16 [ 978.204408][T32621] binder_alloc: 30918: binder_alloc_buf, no vma [ 978.214916][T32623] binder: BINDER_SET_CONTEXT_MGR already set [ 978.222598][T32628] binder: BINDER_SET_CONTEXT_MGR already set [ 978.229127][T32623] binder: 32613:32623 ioctl 40046207 0 returned -16 [ 978.255635][T32628] binder: 32613:32628 ioctl 4018620d 20000040 returned -16 [ 978.263252][T32629] binder: BINDER_SET_CONTEXT_MGR already set [ 978.281142][T32629] binder: 32627:32629 ioctl 40046207 0 returned -16 [ 978.297688][T32621] debugfs: File '32613' in directory 'proc' already present! [ 978.317441][T32633] binder: 32630:32633 ioctl 4b3a 7fff returned -22 [ 978.325957][T32629] binder: BINDER_SET_CONTEXT_MGR already set [ 978.348668][T32629] binder: 32627:32629 ioctl 40046207 0 returned -16 [ 978.356225][T32633] binder: BINDER_SET_CONTEXT_MGR already set [ 978.363305][T32633] binder: 32630:32633 ioctl 40046207 0 returned -16 [ 978.376693][T32633] debugfs: File '32630' in directory 'proc' already present! [ 978.400644][T32633] binder_alloc: 30918: binder_alloc_buf, no vma [ 978.437073][T32633] binder: 32630:32633 ioctl 890c 20000180 returned -22 [ 978.491209][T32639] binder: BINDER_SET_CONTEXT_MGR already set [ 978.501065][T32633] binder: 32630:32633 ioctl 890c 20000180 returned -22 [ 978.502242][T32639] binder: 32630:32639 ioctl 40046207 0 returned -16 06:02:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000177) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x4000) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) r4 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) get_robust_list(r3, &(0x7f00000001c0)=&(0x7f0000000180)={&(0x7f0000000140)={&(0x7f0000000080)}}, &(0x7f0000000200)=0x18) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) 06:02:30 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1163000000000000"], 0x0, 0xfffffdfd, 0x0}) 06:02:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1163631ed6ceb2fe"], 0x0, 0xfffffdfd, 0x0}) 06:02:30 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vfio/vfio\x00', 0x20100, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000400)=0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r1, 0x102, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x200408d0}, 0x40000) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1163a3307f740000"], 0x0, 0xfffffdfd, 0x0}) fcntl$getownex(r2, 0x10, &(0x7f0000000580)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000005c0)=0x0) r6 = getpgrp(r5) process_vm_readv(r6, &(0x7f0000000100)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000040)=""/149, 0x95}, {&(0x7f0000000180)=""/139, 0x8b}], 0x3, &(0x7f0000000340)=[{&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000000240)=""/200, 0xc8}], 0x2, 0x0) exit_group(0x8000) r7 = dup3(r3, r4, 0x80000) setsockopt$netrom_NETROM_IDLE(r7, 0x103, 0x7, &(0x7f0000000000)=0x1ff, 0x4) socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000380)=0x7fff) [ 978.669086][T32650] binder: BINDER_SET_CONTEXT_MGR already set [ 978.676696][T32647] debugfs: File '32645' in directory 'proc' already present! [ 978.701436][T32650] binder: 32642:32650 ioctl 40046207 0 returned -16 [ 978.706318][T32652] debugfs: File '32646' in directory 'proc' already present! 06:02:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 978.719808][T32647] binder: 32645:32647 unknown command 25361 [ 978.749850][T32650] binder: BINDER_SET_CONTEXT_MGR already set [ 978.751582][T32652] binder: 32646:32652 unknown command 816014097 06:02:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, "960d6d9b09bde07f7a7923627a09c04eb882c4995051bff207d30c89f88cb5cb91bf273503ba4be8fd9dc5dfd6ee3676d4c0072439d61606493a25ede2df2d3c1400b39535d3fc37284d0fecf919e1c14c99cd5673ec5ee20e229e072e7aa2ac7aa6db7c596da43b22ab068b0e1b2d60d81a6a7ba66da25816c3968d54fb8d49fbf39a3b56b98590f0760078492a5c615445bc94f39e118056ce3c20022ef4aa1cb50f01b56a5a88c910dc59c981d950e6ab34fc6fe3c4e88949f4436d0808bf8f0b1713506346d18ce1dff1f589e6ca2d"}, 0xd2) close(r1) flistxattr(r0, &(0x7f0000000040), 0x0) [ 978.765880][T32647] binder: 32645:32647 ioctl c0306201 20012000 returned -22 [ 978.788473][T32650] binder: 32642:32650 ioctl 40046207 0 returned -16 [ 978.791811][T32652] binder: 32646:32652 ioctl c0306201 20012000 returned -22 06:02:30 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) r3 = dup(r0) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x1, 0x18, 0x1, r2}) 06:02:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000180)=[0xee00, 0x0, 0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff]) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x6}, [{0x8, 0x4, r2}, {0x8, 0x0, r3}], {}, {0x20, 0x4}}, 0x34, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0xfffffdfd, 0x0}) 06:02:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getpeername$unix(r0, &(0x7f0000000100), &(0x7f0000000040)=0x6e) close(r1) [ 979.020339][T32673] binder: BINDER_SET_CONTEXT_MGR already set [ 979.052119][T32673] binder: 32672:32673 ioctl 40046207 0 returned -16 [ 979.157427][T32682] binder: BINDER_SET_CONTEXT_MGR already set [ 979.185108][T32682] binder: 32676:32682 ioctl 40046207 0 returned -16 [ 979.213342][T32682] debugfs: File '32676' in directory 'proc' already present! [ 979.297399][T32687] binder: BINDER_SET_CONTEXT_MGR already set [ 979.315228][T32682] binder: BINDER_SET_CONTEXT_MGR already set [ 979.324265][T32687] binder: 32672:32687 ioctl 40046207 0 returned -16 [ 979.331482][T32682] binder: 32676:32682 ioctl 40046207 0 returned -16 06:02:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000178) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:33 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/llc\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000040)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:33 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x40, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x7ff, 0x40200) r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) r2 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x3f, 0x220002) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000240)={r3, 0x1f}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x3) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r4) fcntl$addseals(r0, 0x409, 0x4) 06:02:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x1, 'syz0\x00', 0xfd}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000040)={'vlan0\x00', {0x2, 0x4e24, @remote}}) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000180)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) 06:02:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0xfffffdfd, 0x0}) connect$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) [ 981.765563][T32703] binder: BINDER_SET_CONTEXT_MGR already set [ 981.795848][T32700] binder: BINDER_SET_CONTEXT_MGR already set [ 981.802299][T32703] binder: 32696:32703 ioctl 40046207 0 returned -16 06:02:33 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0xf, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 981.820933][T32700] binder: 32695:32700 ioctl 40046207 0 returned -16 [ 981.860615][T32712] binder: BINDER_SET_CONTEXT_MGR already set 06:02:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x20, 0xc0800) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1) [ 981.866673][T32712] binder: 32696:32712 ioctl 40046207 0 returned -16 [ 981.880012][T32700] binder: BINDER_SET_CONTEXT_MGR already set [ 981.932759][T32700] binder: 32695:32700 ioctl 40046207 0 returned -16 06:02:33 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='.bH@\x00\x00\x00\x00'], 0x0, 0xfffffdfd, 0x0}) 06:02:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/221, &(0x7f0000000180)=0xdd) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:33 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x10, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100090000000000b409f90dd26a5beed561a5e565a4615a07e36c43a8e3354cbc6a9e7997f5aa0393b159d832e3b8fc04a0710a71171846857bee7e196964960d97e9583077d0f7077a13fe79aa316528319eba446c3ff370"], 0x0, 0xfffffdfd, 0x0}) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000000c0)={@multicast2, @dev={0xac, 0x14, 0x14, 0x12}}, 0x8) [ 982.085237][T32728] debugfs: File '32725' in directory 'proc' already present! [ 982.145294][T32733] binder: BINDER_SET_CONTEXT_MGR already set [ 982.181211][T32728] binder: 32725:32728 unknown command 1078485550 [ 982.198463][T32733] binder: 32727:32733 ioctl 40046207 0 returned -16 [ 982.207640][T32738] binder: BINDER_SET_CONTEXT_MGR already set [ 982.217897][T32728] binder: 32725:32728 ioctl c0306201 20012000 returned -22 [ 982.232134][T32738] binder: 32730:32738 ioctl 40046207 0 returned -16 [ 982.239204][T32737] binder: BINDER_SET_CONTEXT_MGR already set [ 982.245212][T32737] binder: 32727:32737 ioctl 40046207 0 returned -16 [ 982.251713][T32734] debugfs: File '32725' in directory 'proc' already present! [ 982.276456][T32734] binder: 32725:32734 unknown command 1078485550 [ 982.283566][T32733] debugfs: File '32727' in directory 'proc' already present! [ 982.285715][T32734] binder: 32725:32734 ioctl c0306201 20012000 returned -22 [ 982.327309][T32741] binder: BINDER_SET_CONTEXT_MGR already set [ 982.350406][T32741] binder: 32730:32741 ioctl 40046207 0 returned -16 06:02:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000179) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) r0 = syz_open_dev$sndpcmc(&(0x7f0000001180)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffb, 0x100) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000001280)={0x8, 0x7, 0x4, 0x9, '\x00', 0x1}) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = request_key(&(0x7f00000011c0)='.dead\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='md5sum\x89.\x00', 0x0) keyctl$clear(0x7, r2) close(r1) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x6}}, 0x18) r3 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x180) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x823) recvfrom$netrom(r3, &(0x7f0000000100)=""/4096, 0x1000, 0x40, &(0x7f0000001100)={{0x3, @bcast, 0x8}, [@null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @default]}, 0x48) 06:02:34 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x23, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:34 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\xedmd5sum\x00', 0xfffffffffffffffa) r2 = request_key(&(0x7f0000000740)='big_key\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)='/dev/vsock\x00', 0xfffffffffffffffb) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000680)=[{&(0x7f0000000140)="ab32cb00d54b9936887d655b99d50b948fbc2673dffa24b922b111f3863a7ec55c4d9ef34566d4818011681078459ae5b18d778cc8d6523d5481253f13ab2bee108d74b235f7e1ab", 0x48}, {&(0x7f00000001c0)="53f6e0c9a5610ed3db4d07ee0557f21ff6d1e6e062276a055d497e20084a4ebd713179bcd61d30ef8205d8c6320525aa6e16af890097637f5a294b78522c9ab49630827d834ea799febd17a7ca1a4874f8963b6337944b45464dff76eccc14c76814039e8dd1e36be194800a6e159b40405b9963d25d846782067e52ae1237359bec5636e6be6f216cc7e9ffa5a139774bb3d729a09e9812be125836d8e2664d9f217d4341b0af5988abc1aaea1872908b1e9bb2", 0xb4}, {&(0x7f0000000280)="5cee5cebbaad415480587b62abef87ed0ae97d6fc02e3bddd4cf50f56cbd4c8890054cc122892e229d1335119ac541a85e31d014210593540429547a4ed204de8f8297caf299bc1fc5c457bcf2fcb1f42e6ab0bd07ff9ea886472d033b5a414af8b64828f8bb51993e7ac7dbf1207d5d217995", 0x73}, {&(0x7f0000000300)="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", 0xfd}, {&(0x7f0000000400)="6c628dc5b445a14d6e1c5166df6ae0bb0f2c950717ea1df623debd", 0x1b}, {&(0x7f0000000440)="8c3082adea9e8b5677879b594a503dc683cc21b508b18432ab2e387e24f8ee0fd72e72884a970c26c554df3a6f8b87b543b488533d378d0f90c3f18b85b98a8879dc6f0daca130ea3aa9b6abd56e9215f57f8e74931b", 0x56}, {&(0x7f00000004c0)="7bafce9397ecbc04c3d302faf60d75c4a4f993b850b01f92ff41172cbdf68d5d76d1f2dfea5ceeef75744be5efefbdb7ec3076d41dea2020fc60dc5b0f8490f10430cea175deda158aa25d1c686f00c143e2f2c63a4193561136a3edf2d92c", 0x5f}, {&(0x7f0000000540)="05c4992d3f2b74619f97795e35e531af577a46969c658be3b471bed0f03e8b8b3966727375782f6d51d3541689f6e453a76d0a9ad3f6103e0a75c2d64f0ae3f6cd4e217b006f73101356e98166bc22d5b26155f797f048504872415a7e53287bcac3fb0d45c52274a8fd35b5c08dec7931356c21e7ca28c7b1", 0x79}, {&(0x7f00000005c0)="fd4643b100b305eac2b2073916258d6fd3a5f7f45559890767890187faedd82ba7f81f41d1f1ba479a0df6334918fd2029650bc459b5b469c33c6d1799283f593aeaf8b63b9d4d8b1a5a28cb472b7e779b4ef97984a4a131333951b3ffcb46280210e36775bc70bf3c14e0f94bb519ebb197", 0x72}, {&(0x7f0000000640)="a4b5af8766a28c012e2d", 0xa}], 0xa, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0xfffffdfd, 0x0}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x2, @broadcast, 'veth1_to_hsr\x00'}}, 0x1e) 06:02:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x40000000}}], 0x48}, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) [ 982.739482][T32757] binder: BINDER_SET_CONTEXT_MGR already set [ 982.755405][T32755] debugfs: File '32752' in directory 'proc' already present! [ 982.766858][T32756] binder: BINDER_SET_CONTEXT_MGR already set [ 982.773515][T32757] binder: 32751:32757 ioctl 40046207 0 returned -16 [ 982.787149][T32756] binder: 32754:32756 ioctl 40046207 0 returned -16 06:02:34 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0xc0, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 982.817047][T32755] binder: 32752:32755 unknown command 13316779 [ 982.836979][T32755] binder: 32752:32755 ioctl c0306201 20012000 returned -22 [ 982.843276][T32757] debugfs: File '32751' in directory 'proc' already present! 06:02:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000), 0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000100)) close(r1) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000180)={0xc0f, 0x800610, [0xae16, 0x8000, 0x1000, 0x5, 0x8], 0x1}) r3 = shmget(0x1, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f00000001c0)=""/192) [ 982.898885][ T300] binder: BINDER_SET_CONTEXT_MGR already set [ 982.914122][T32757] binder_alloc: 30918: binder_alloc_buf, no vma [ 982.923670][ T300] binder: 32754:300 ioctl 40046207 0 returned -16 [ 982.932996][T32767] binder: BINDER_SET_CONTEXT_MGR already set [ 982.948615][T32767] binder: 32751:32767 ioctl 40046207 0 returned -16 06:02:34 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0xec0, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x111400) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) [ 982.985778][T32757] debugfs: File '32751' in directory 'proc' already present! 06:02:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000240), 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x4, 0x800) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x81, 0x5, 0x82, &(0x7f0000ffd000/0x2000)=nil, 0x5}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000000c0)={r5, 0x2, 0x1, "3de34e86b5bca2548d6711554b2c46f42da29171b44b39a586f73ba3b924a6a26c36538f727302bd009b8d6920f5eb60d8b93f9809038d82fee3e5ae15d9116956e4ad68d97c26e8a815675cba1be2bb61ae0c1bf7e780bb1c8a58aa36feb6c9b4b6d15edfd9d8f04c01408b4e1c92bce47d67238e4c501e16e3340e2519500d2a06f4e071cd09d7d45186a7d0ea"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0xfffffdfd, 0x0}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x1ff, 0x80, 0x3, 0x9, 0x100000000}, &(0x7f00000002c0)=0x14) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000040)={0x8000, 0x2, 0xea50}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000300)={r6, @in={{0x2, 0x4e23, @broadcast}}, [0x6, 0x800, 0x8, 0x3d, 0xffffffff, 0xffffffff, 0x14e, 0x100000000, 0xffffffffffffff94, 0xfffffffffffffffc, 0xf9, 0x4, 0x0, 0xfffffffffffffff3]}, &(0x7f0000000400)=0x100) r7 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, r7) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000440)={0x3, 0x7, 0x4a12, 0x7, '\x00', 0x6ddd}) 06:02:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) ptrace$getregset(0x4204, r2, 0x3, &(0x7f0000000180)={&(0x7f00000000c0)=""/75, 0x4b}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x21) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) [ 983.167431][ T323] binder: BINDER_SET_CONTEXT_MGR already set [ 983.198996][ T323] binder: 319:323 ioctl 40046207 0 returned -16 [ 983.206698][ T326] binder: BINDER_SET_CONTEXT_MGR already set [ 983.220869][ T326] binder: 322:326 ioctl 40046207 0 returned -16 [ 983.235502][ T329] debugfs: File '327' in directory 'proc' already present! [ 983.244465][ T328] binder: BINDER_SET_CONTEXT_MGR already set [ 983.285462][ T328] binder: 319:328 ioctl 40046207 0 returned -16 [ 983.310551][ T329] binder_alloc: 327: binder_alloc_buf, no vma [ 983.316184][ T326] QAT: Invalid ioctl [ 983.326077][ T323] debugfs: File '319' in directory 'proc' already present! [ 983.351312][ T326] QAT: Invalid ioctl [ 983.362190][ T329] debugfs: File '327' in directory 'proc' already present! [ 983.384890][ T330] binder: BINDER_SET_CONTEXT_MGR already set [ 983.391571][ T330] binder: 322:330 ioctl 40046207 0 returned -16 [ 983.402885][ T326] debugfs: File '322' in directory 'proc' already present! [ 983.434693][ T330] QAT: Invalid ioctl [ 983.463952][ T330] QAT: Invalid ioctl 06:02:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000017a) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x101201) close(r1) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpgrp(r2) 06:02:35 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x33fe0, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:35 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f0000000080)='/dev/sequencer\x00', 0xf, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) 06:02:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100008064b3b915"], 0x0, 0xfffffdfd, 0x0}) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@remote={[], 0x1}, 0xf, 'bridge_slave_0\x00'}) 06:02:35 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffdfd, 0x0}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x9, 0x7, 0x2}) [ 983.669362][ T342] binder: BINDER_SET_CONTEXT_MGR already set [ 983.714531][ T342] binder: 339:342 ioctl 40046207 0 returned -16 [ 983.722665][ T351] debugfs: File '346' in directory 'proc' already present! 06:02:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x7, 0x0, "82147e18bd0ddca09826f9e5526184a42f99e0821fbaeb16db109c80c383ce49ac077e98f8249233262b6fac2e09a4e7400815751b4bd1bfd7cedd4d053d785f93aa4063c20e9af31b80cb59e7885e69"}, 0xd8) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x42, 0x10, 0x8001, 0x6}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)={r3, 0x96, "d5b4c0840d9d56510cbb985637a31771a52a0478de199862b1d65a191837ca40ac17a77a6b39b7c333e44af67af43df3a375a394f0ee4a25828354f09c94829d90cebb53818f64fdf0c2f8dd963835655bb313ab9714df520e6ecf19383d01aebad42947e5ca4419cbf3873033cb502798f911b88e3a59d0decd8c26546dc4b4fbbe8e6a3a44e794b4a248e29d5c007250e578492589"}, &(0x7f00000000c0)=0x9e) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="116348400000ee6f810000"], 0x0, 0xfffffdfd, 0x0}) [ 983.765696][ T351] binder_alloc: 30918: binder_alloc_buf, no vma [ 983.797240][ T354] binder: BINDER_SET_CONTEXT_MGR already set 06:02:35 executing program 5: socketpair$unix(0x1, 0x20007, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) close(r1) 06:02:35 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x200002bc, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:35 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000080)=0x1) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getuid() r3 = getegid() getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0xa, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0x1a00}}], [{@euid_eq={'euid', 0x3d, r4}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user'}}, {@uid_gt={'uid>', r5}}, {@appraise='appraise'}]}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000009a019c9766780c642a9e2f65d633b7ffbe1139a633d8d14621cc2e5b4c706644c6cc00"/53], 0x0, 0xfffffdfd, 0x0}) [ 983.827177][ T354] binder: 339:354 ioctl 40046207 0 returned -16 [ 983.900502][ T365] binder: BINDER_SET_CONTEXT_MGR already set [ 983.940518][ T365] binder: 362:365 ioctl 40046207 0 returned -16 06:02:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="116336c44035000000006993599add2d218a2602fdf124705417eec2228d953b476076c23b25323f951f0c830e20284950ec7b62891f16d80c9e76e624d83600d80a322711da3e7612d0472a0a1014774f0f0a50c1f2cbab0e39b3d3c44f138b6e77c7670709d3da312678a49ae058b191a5e2e302ad58ed5678d2ec602e36e08e125f284a85200c48e5212d4d06b10aeb74c1f3659c43009363651c56461e2119d1859dd34d190e787446298785ae3cc85c65197f2178647ab6547c4e12c4fb614c8fa1725f2aabf080e16fc141e77053e7c80983a854977c2490ea2cc8167ccf5d83f5bc73c58389972a2ef1e609bb12bd2e481411fa5379e6db0f4d3bd88f3f30d9e1651625f580d14a2c7ad6d515d02b9097276e9a24b1808256612406f5695869e9a7d4afe53ef160903f9faf9153243f347840d02ac3147fc45aadbdc6019b34e73a8462bee40abaaf2c144af2643efdff2b5faadbfeaee5c24188fb1bd63ba54818448c6a4ee72fe47e87b00af62b1d0178c39bbe"], 0x0, 0xfffffdfd, 0x0}) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x7fffffff) [ 983.977281][ T373] binder: BINDER_SET_CONTEXT_MGR already set [ 983.995649][ T373] binder: 362:373 ioctl 40046207 0 returned -16 06:02:35 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x7ffff000, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 984.033979][ T365] debugfs: File '362' in directory 'proc' already present! [ 984.077300][ T381] binder: BINDER_SET_CONTEXT_MGR already set [ 984.116579][ T381] binder: 377:381 ioctl 40046207 0 returned -16 [ 984.180502][ T384] binder: BINDER_SET_CONTEXT_MGR already set [ 984.210647][ T384] binder: 377:384 ioctl 40046207 0 returned -16 06:02:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000017b) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:02:38 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000a40)={{0xa, 0x4e21, 0x1, @local, 0x1}, {0xa, 0x4e20, 0x3, @empty, 0x1}, 0x40, [0x943c00000, 0x200, 0x1000, 0xfff, 0x520, 0x5, 0x3ff, 0x6]}, 0x5c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="bf6ddb1d6e93b0a7f2e9ffffffff0000000016501f31513ddefa30de7bcbc351e6b8773ddb8f22404bc69bcdd24d8513d728095e619e43500a65b20364fc988b89930a0f6b6ef6b903e3c4c6518230c3442a53"], 0x0, 0xfffffdfd, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0xffffffffffffffff, r2, 0x0, 0xf, &(0x7f00000005c0)='/dev/sequencer\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000740)=0xe8) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000a00)) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000840)=0x0) fstat(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000900)=[0xffffffffffffffff, 0x0, 0x0]) sendmsg$unix(r0, &(0x7f00000009c0)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000140)="4db93bf17b2fa8aa8f5716607af2e72ea09a9928ceae73fc9b7cb29cec5e8e6af189", 0x22}, {&(0x7f0000000180)="f7a510d3a83c0394f7effed0fbe74e520c641e51fbd3218f4e636ebf7fae5e42a00d3c01890a8d09800c57393f2c05618fd561a6e445e1438c00d779d86f99bf9e5fb16500315176f4f33305da2b19d804924b5bb95c5ba0327a66da07e1783cd14a71f68c633b92384c846cfe4221407430bee10f543897049e747853a1fc034df7993b5827511583e5c3780ae60fd554f11edf455d718192d192b12e791619faf57bf321d6572e687576a521f5bbe5c6870ef1cd2371", 0xb7}, {&(0x7f0000000240)="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", 0xfc}, {&(0x7f0000000340)="17e197d75a53f54d187af76a1a91e31062bb0e124b0cb7aa30e08192e972fe4b28e25322e64356f873ed9a176399adbd698d0c8987a0b6592044816968231fea8b1e06413c77b757044cc4ac56575365667ef74c595c7027c4abaa57fed7b2", 0x5f}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f00000003c0)="fafdb8e37341911fdbda15802331dec61c5f69a5a2a444a82a1975cc64e4c2bc2c42b24bbf69671161a7e684b5dff8c0bbc333e0bdf8cf6cb99f8722944e9ade3fc2dc50dd1e394a2b9c", 0x4a}, {&(0x7f0000000440)="b1bd37ccc5bbb9387eebaa22e300f2828c606103f1b4e3ef0b2e3ea1f4b480bc0b812da439f058913a03e58d1649af7040d8bdcf4746a7bf05c5ada330b4aa34ec2207f8bc0c11968982efa95ab8e23c426ca4ce74868841b5666c9fa41981c2ababfa10f10f5327e66ae47004a55d83309a600da952504abf76b24fef21568256d7659eec2d081cb468a9c43a2d99a59124917b95f6a3fa378220fd0a6ebe06b8e7f6f68bc86dfae0122c8ba54de0a840c681ca6c42ba9973a730cb3f75088ef145a6f0ab1b8c1901102ec1999494ab9b487a1843ab1d", 0xd7}], 0x7, &(0x7f0000000940)=[@rights={{0x20, 0x1, 0x1, [r2, r2, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x60, 0x40000}, 0x4000000) 06:02:38 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:38 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='\xe8self\xe1vboxnet0]\\$\x00') ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x30f, 0x400, 0x2, 0x8, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'], 0xfffffffffffffe48, 0xfffffdfd, 0x0}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x1, 0x3ff, 0x3, 0x4, 0xd, 0x1, 0x10001, 0x2, 0x9, 0x1ac01c4, 0xe61, 0x5}) 06:02:38 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0xfffffdef, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 986.772879][ T400] debugfs: File '393' in directory 'proc' already present! 06:02:38 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0xf, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 986.851250][ T400] binder: 393:400 unknown command 0 06:02:38 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x101) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp\x00') getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0x80000001}, &(0x7f00000001c0)=0x8) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) [ 986.911959][ T400] binder: 393:400 ioctl c0306201 20012000 returned -22 06:02:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) 06:02:38 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x6b, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.sockprotoname\x00', &(0x7f0000000100)='/dev/video#\x00', 0xc, 0x1) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x1f, 0x10000) r2 = syz_open_dev$binder(0x0, 0x0, 0x7fe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) [ 987.051207][ T426] debugfs: File '424' in directory 'proc' already present! [ 987.114914][ T428] binder: BINDER_SET_CONTEXT_MGR already set [ 987.147040][ T433] binder_alloc: 30918: binder_alloc_buf, no vma [ 987.155949][ T428] binder: 425:428 ioctl 40046207 0 returned -16 [ 987.184112][ T436] binder: BINDER_SET_CONTEXT_MGR already set [ 987.214398][ T436] binder: 429:436 ioctl 40046207 0 returned -16 [ 987.231707][ T438] binder: BINDER_SET_CONTEXT_MGR already set [ 987.271251][ T438] binder: 425:438 ioctl 40046207 0 returned -16 [ 987.278011][ T439] binder: BINDER_SET_CONTEXT_MGR already set [ 987.302020][ T428] debugfs: File '425' in directory 'proc' already present! [ 987.320191][ T439] binder: 429:439 ioctl 40046207 0 returned -16 06:02:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000017c) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:39 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:39 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000540)=@int=0x5, 0x4) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x84, r2, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x4}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x57}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x800) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) write$vnet(r3, &(0x7f0000000280)={0x1, {&(0x7f00000000c0)=""/57, 0x39, &(0x7f0000000180)=""/209, 0x3, 0x1}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="116348ff00000000"], 0x0, 0xfffffdfd, 0x0}) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000080)={0xffffffffffffffff, 0x1f}) 06:02:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x850, 0x1253c2) statx(r2, &(0x7f0000000100)='./file0\x00', 0x800, 0x160, &(0x7f0000000140)) close(r1) 06:02:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="116348400000000019cfc2ee6927c821b5e55b758cad591be5b64cec2fb7ab68c4296e5af21210ea74adb0551ab56302a5c71aeba4bfd6680a3144a7751334d6d84cf9500ae06402d34c2b6775aa632caf192d7a7b490400000077b230901936e10431c8a33dce75522e74b5503cdcc02817a4c34506142fb4d6b94404e3a8ee99c4dad95700"], 0x0, 0xfffffdfd, 0x0}) 06:02:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_buf(r0, 0x107, 0x3, &(0x7f0000000040)="191d9126978c799aff71cec0ad9e122cbad0fd1f8d03acade04332e892cc54b69f83362380cd36e15630952c97867615f7dfbe115dcd42cb91444974f350bcd3c41b3214d67ca7cc9c1119586bb6685d1a1ddcbd1d2bf6f30d600268f71fafc43fe5ed7f1ccaaf5cddaae0b060f25b15c0272dacc3b2d087825cf699ea55e4b8d90a20c0f895415fe4d33aa08ee8ea0479cfd97f3b21d79aab5855252a5bec6bef1f7bf9147cd570a0d1a27e04c56556a8ff48c290a363c63f47c7753e09edfcd71a8e06dcbeffe3b9eee2830fe91b14a7f81df2d07a9d03bc5bee5fb526d813e47fc17c15335f0fc3", 0xe9) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x9a46a8a1, 0x0, &(0x7f0000000140), 0x0, 0xfffffdfd, 0x0}) [ 987.678665][ T451] binder: BINDER_SET_CONTEXT_MGR already set [ 987.707197][ T454] binder: BINDER_SET_CONTEXT_MGR already set [ 987.710572][ T458] debugfs: File '450' in directory 'proc' already present! [ 987.718121][ T451] binder: 449:451 ioctl 40046207 0 returned -16 06:02:39 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 987.731916][ T454] binder: 447:454 ioctl 40046207 0 returned -16 [ 987.765463][ T451] binder: BINDER_SET_CONTEXT_MGR already set 06:02:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x6, 0x6, 0xfffffffffffffe01, 0x40, 0x0, 0x6, 0x1, 0x2662133b86ac93d2, 0xf4, 0x791, 0x6, 0x9d, 0x9, 0x7fffffff, 0x0, 0x0, 0x1, 0xffffffff, 0x80000000, 0x0, 0x3, 0xb59, 0x5d, 0x6, 0x10, 0x4, 0x6, 0x3, 0x9, 0x800, 0x890d, 0x3, 0x9638, 0x4eb, 0xc00000000, 0x9, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000340), 0x8}, 0x20008, 0x401, 0x81, 0x1, 0x7, 0x4, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/btrfs-control\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x400, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x401, 0x2}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000300)={r3, 0x180000000, 0x0, 0x10000}, 0x10) [ 987.786809][ T451] binder: 449:451 ioctl 40046207 0 returned -16 [ 987.794456][ T454] binder: BINDER_SET_CONTEXT_MGR already set [ 987.823399][ T454] binder: 447:454 ioctl 40046207 0 returned -16 06:02:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1163484500000000bc1e2dfc89db6961b432c7d4af4dd29ff258"], 0x0, 0xfffffdfd, 0x0}) 06:02:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 987.913547][ T458] binder: 450:458 unknown command -12033263 [ 987.938907][ T458] binder: 450:458 ioctl c0306201 20012000 returned -22 06:02:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) pread64(r0, &(0x7f0000000080)=""/93, 0x5d, 0x0) 06:02:39 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0xe, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 988.026090][ T479] binder: BINDER_SET_CONTEXT_MGR already set [ 988.034705][ T479] binder: 478:479 ioctl 40046207 0 returned -16 [ 988.050745][ T479] debugfs: File '478' in directory 'proc' already present! [ 988.077727][ T479] binder: 478:479 unknown command 1162371857 [ 988.098903][ T487] binder: BINDER_SET_CONTEXT_MGR already set [ 988.110992][ T479] binder: 478:479 ioctl c0306201 20012000 returned -22 [ 988.144412][ T487] binder: 482:487 ioctl 40046207 0 returned -16 [ 988.152073][ T479] binder: BINDER_SET_CONTEXT_MGR already set [ 988.175966][ T479] binder: 478:479 ioctl 40046207 0 returned -16 [ 988.176824][ T493] binder: BINDER_SET_CONTEXT_MGR already set [ 988.248470][ T493] binder: 482:493 ioctl 40046207 0 returned -16 06:02:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000017d) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000001c0)=""/141, &(0x7f0000000100)=0x8d) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) write$selinux_attr(r1, &(0x7f0000000140)='system_u:object_r:dhcp_state_t:s0\x00', 0x22) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') listen(r2, 0x200000000002) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) 06:02:42 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200600, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0x99, 0x9, @buffer={0x0, 0x49, &(0x7f0000000040)=""/73}, &(0x7f0000000180)="9ed0a5e8c3f67f1fcaf938a7a9dac114bb7a796b08c638e663ec48b12d0e9c0f6eeb1dde9e71563e2113182e1dd8918a4476501da89dfdddf819db2a55f12bdbc2a08542ccfdc6a4924fc1dca8e34580eb28e9dccadf1d0bee11e164e7a87cc579b846ddb1e5a1295ef160c4ff020deefdb801d51141123b1146cf735a7e5f51b1f4d7555678d551be04e33ae62509942cff37d2e25debcf09", &(0x7f0000000240)=""/138, 0xfffffffffffffffb, 0x10010, 0xffffffffffffffff, &(0x7f00000000c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB=')cH@\x00\x00?\x00'], 0x0, 0xfffffdfd, 0x0}) 06:02:42 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="116348400000009e0021ca2ee2cd65b870e822fa99d52c8a24d38f74ec135c83a3e5e453b02dff5c4251b53589a61339cff74f73d4ce8074577ac8bc9e1519dd505f7c3ba29ac0a50e1d32e11bfbd38170fc9edce0f0ef2c77829a463e8f7bae0d34ace5f95900000000000000000000006e46b626813614d1b64514b6763c5315ed82915bd866f3dd1b0c809e40ca2396a8d118a2446a7759803a6dfbaf196f01dc0187569354672b9478899555731fc6869e49a00ee621de3cfbefef35bdc1ac4f608a24ad313bff52bf0ffe3876c0319b91f5c3015df732a600f680606f276056fa"], 0x0, 0xfffffdfd, 0x0}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x0) 06:02:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x8, 0x6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x6, 0xc4, 0x200, 0x2, 0x10001}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) [ 990.763871][ T508] debugfs: File '505' in directory 'proc' already present! [ 990.781141][ T509] debugfs: File '504' in directory 'proc' already present! [ 990.819912][ T513] binder: BINDER_SET_CONTEXT_MGR already set [ 990.826049][ T513] binder: 507:513 ioctl 40046207 0 returned -16 [ 990.836481][ T509] binder: 504:509 unknown command 1078485801 06:02:42 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$TCSETXW(r1, 0x5435, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) [ 990.867227][ T513] debugfs: File '507' in directory 'proc' already present! [ 990.886938][ T509] binder: 504:509 ioctl c0306201 20012000 returned -22 [ 990.892427][ T513] binder_alloc: 30918: binder_alloc_buf, no vma [ 990.906569][ T513] binder: BINDER_SET_CONTEXT_MGR already set [ 990.913414][ T513] binder: 507:513 ioctl 40046207 0 returned -16 06:02:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/59, &(0x7f0000000080)=0x3b) 06:02:42 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840c90f0d0e1e7eb88a7f7a77e46a2000000000"], 0x0, 0xfffffdfd, 0x0}) 06:02:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0xa4f, 0x2000) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000180)=0x5, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) open_tree(r3, &(0x7f0000000100)='./file0\x00', 0x1) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0xfffffffffffffc2e) close(r2) [ 991.075798][ T537] binder: BINDER_SET_CONTEXT_MGR already set [ 991.100686][ T537] binder: 532:537 ioctl 40046207 0 returned -16 [ 991.110304][ T538] binder: BINDER_SET_CONTEXT_MGR already set 06:02:43 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x3, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 991.128730][ T538] binder: 534:538 ioctl 40046207 0 returned -16 [ 991.155158][ T541] binder: BINDER_SET_CONTEXT_MGR already set [ 991.188400][ T545] debugfs: File '539' in directory 'proc' already present! [ 991.212261][ T541] binder: 532:541 ioctl 40046207 0 returned -16 06:02:45 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x3, {0x7, 0x1f, 0x8, 0x12, 0x0, 0x6, 0xb46, 0x100000001}}, 0x50) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000017e) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:45 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x4000400000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0x0, 0xfffffffffffffffd) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000140)) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000180)={0x8, 0x0, [{0x80000007, 0x1, 0x7c, 0x7fffffff, 0xf22}, {0xb, 0x6b0, 0x47, 0xfffffffffffffffe, 0x4}, {0x8000001d, 0x6, 0x7ff, 0x1e6579ca, 0x9}, {0x0, 0x100000000, 0x3, 0x8, 0x4a839ef}, {0x80000000, 0x6f, 0xb47, 0x3, 0x8}, {0xc000000a, 0xfffffffffffffff9, 0x7, 0x7, 0x100000001}, {0x0, 0xfffffffffffffffa, 0xfff, 0xb, 0x5}, {0xc000000f, 0x9, 0xffffffff7fffffff, 0x179e00, 0x2}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1163484000004745e487280000"], 0x0, 0xfffffdfd, 0x0}) 06:02:45 executing program 5: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x0) close(r2) 06:02:45 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x6, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:45 executing program 0: [ 993.846031][ T569] binder: BINDER_SET_CONTEXT_MGR already set [ 993.867062][ T569] binder: 560:569 ioctl 40046207 0 returned -16 [ 993.873742][ T566] binder: BINDER_SET_CONTEXT_MGR already set 06:02:45 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f0000000140)=@gettaction={0x1e8, 0x32, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x5ea}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x1d, @TCA_ACT_INDEX={0x8, 0x3, 0x46f}}, {0x18, 0x1, @TCA_ACT_KIND={0x10, 0x1, 'connmark\x00'}}, {0x14, 0x6, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x98, 0x1, [{0x10, 0xc, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0x10, 0x3, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x10, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x3, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x5, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff80000001}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0xe, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffffffffffb}}, {0x14, 0x2, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0xd, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0x10, 0x1d, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x1f, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x10, 0x20, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x16, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0x1a, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x4, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xb, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1a, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x13, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x13, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}, {0x14, 0x1b, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0xc0}, 0x8805) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) [ 993.960497][ T566] binder: 561:566 ioctl 40046207 0 returned -16 [ 993.981000][ T575] binder: BINDER_SET_CONTEXT_MGR already set [ 994.020234][ T576] binder: BINDER_SET_CONTEXT_MGR already set [ 994.030707][ T575] binder: 561:575 ioctl 40046207 0 returned -16 06:02:45 executing program 0: 06:02:45 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xa, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) [ 994.112674][ T576] binder: 560:576 ioctl 40046207 0 returned -16 06:02:46 executing program 0: 06:02:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) flock(r1, 0x2) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x19) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 994.230469][ T598] binder: BINDER_SET_CONTEXT_MGR already set [ 994.259655][ T598] binder: 596:598 ioctl 40046207 0 returned -16 [ 994.307542][ T598] binder: BINDER_SET_CONTEXT_MGR already set [ 994.333486][ T598] binder: 596:598 ioctl 40046207 0 returned -16 06:02:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000017f) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:46 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) 06:02:46 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xc, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:46 executing program 0: 06:02:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x800) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00\x00'], 0x0, 0xfffffdfd, 0x0}) 06:02:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7, 0x80000) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x4) r1 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x10000ffd, 0x2000000000801) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0xb, 'bpq0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) r2 = socket(0x3, 0x80000, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800420}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0000001200200225bd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="20000200061000004c00190008000100ff0f00000c000200707070315c00006369000000080006001d000080000000009d000000140005002ed373eee1f58e04d25317412ddbbfc600000000000000000000faa9c1fe438eb43783fd79b6fa6f48dd8215c929f104caf2a6e89b94"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhci\x00', 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x7, 0x4) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r4) syz_mount_image$ceph(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000015c0)=[{&(0x7f0000000500)="08acfeb4cab3d86cb4e904869035acffa4cb47eb9987ea93e7409cb817c4e4201356e4cd710491", 0x27, 0x4}, {&(0x7f0000000540)="1b1bf8503b787a987a", 0x9, 0x6}, {&(0x7f0000000580)="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", 0x1000, 0x27b6}, {&(0x7f0000001580)="2c30e58ec739f02ca7ff741cc8600bb0d3d825990c", 0x15, 0x5}], 0xc20, &(0x7f0000001640)='bpq0\x00') 06:02:46 executing program 0: [ 994.766589][ T613] debugfs: File '612' in directory 'proc' already present! [ 994.806001][ T622] debugfs: File '617' in directory 'proc' already present! 06:02:46 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) [ 994.815711][ T613] binder: 612:613 unknown command 64 [ 994.818233][ T622] binder_alloc: 30918: binder_alloc_buf, no vma [ 994.846257][ T613] binder: 612:613 ioctl c0306201 20012000 returned -22 06:02:46 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xe, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:02:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x0, @local, 0x401}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, @in={0x2, 0x4e21, @rand_addr=0x5}, @in6={0xa, 0x4e21, 0x4, @rand_addr="27d503cb14268b175032d94342d2423f", 0x7}, @in6={0xa, 0x4e23, 0x5d1, @ipv4={[], [], @rand_addr=0x2}, 0x8}, @in6={0xa, 0x4e22, 0x101, @ipv4={[], [], @multicast1}, 0x2e}], 0xa0) 06:02:46 executing program 0: unshare(0x20400) socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0xa, &(0x7f0000000140), 0x4) [ 995.148690][ T647] binder: BINDER_SET_CONTEXT_MGR already set [ 995.192549][ T647] binder: 645:647 ioctl 40046207 0 returned -16 [ 995.259233][ T647] binder: BINDER_SET_CONTEXT_MGR already set [ 995.275833][ T647] binder: 645:647 ioctl 40046207 0 returned -16 06:02:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000180) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:47 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xf, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000380)=0xffffffff) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1119000000000000"], 0x0, 0xfffffdfd, 0x0}) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x80000) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000280)={0x6, @win={{0x5, 0x3390, 0xc426, 0x2}, 0x7, 0x100000000, &(0x7f0000000100)={{0xac99, 0x4, 0xfffffffffffffc00, 0xfffffffffffffe01}, &(0x7f00000000c0)={{0x0, 0x6, 0x56, 0x2}, &(0x7f0000000080)={{0x6, 0x909, 0x6, 0x3}}}}, 0xe9f, &(0x7f0000000180)="2cb962e693dc4f8c2c04d861dd8ed3d1687fd6548a49004bf86b1e81f2ca77a9de23e13bc2389a63de296db80c54e0fdd9328960e8afa9b71a927bc25e431f04e90dfd5f69ad6cc78bcc8134edc7a0c2f136625e5b706bd3c55acfe2c0acbe389d905f794a3e5d759d3450f0c4fbcfa1d9ebe6ba5c27f9c9ba1c0bf0e1bf8e588570220ebdf2990d41d5d931ff7a2ab6c0e0a51500f49b3e425e966d01e7ab6352a0a2ed52b2a0232234f02609f26120bb4f8cbb48e18c07ae59f33ea5dee9c5a0fd64c9e2beebd8aaeac8e42380d3bcfee7"}}) 06:02:47 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) 06:02:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1163484b000000001ad4d25c77f29426ce9b964771bd164a1a228d8e49824e5e478360728e45caa1c1f2d7a4dc23747c8847de38db8d9dee186eb477ae20ce551d8757cab67deda8cef66a7db39ebbc87a10b6c5072169edc529ab1db7c872c19a652dac728dd27040def5546e6d5c976f6d3943819f518dc965e5481d08963d84fae84d6dffa487f3f8b69f99ee73cb832bc46d6746a62f9cd58e6208dbdc2b1b7442a8a7b9059a06e3df994bca2c5fae2e2cff5c4e3247c7dee62d6dcae5cd88c98466fe4a52f02c1a82e0b4c7f14dd463a67aadf0d22508eebd0facb30ec06339c49aa9a768cad66a84ddcf142696d18021ee513c96963614185ccdc9a897b2a1ea7ef0ad8641035b01ee3d4e2840547af7e928515e25ff2c5503"], 0x0, 0xfffffdfd, 0x0}) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000040)={0x9}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=""/204) 06:02:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) write$vhci(r1, &(0x7f0000000100)=@HCI_EVENT_PKT={0x4, "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"}, 0x1001) close(r1) [ 995.680656][ T665] binder: BINDER_SET_CONTEXT_MGR already set [ 995.694925][ T665] binder: 659:665 ioctl 40046207 0 returned -16 [ 995.699962][ T668] debugfs: File '660' in directory 'proc' already present! [ 995.709757][ T671] binder: BINDER_SET_CONTEXT_MGR already set 06:02:47 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x10, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 995.735880][ T671] binder: 662:671 ioctl 40046207 0 returned -16 [ 995.745500][ T665] debugfs: File '659' in directory 'proc' already present! [ 995.768926][ T668] binder_alloc: 30918: binder_alloc_buf, no vma [ 995.773214][ T665] binder: 659:665 unknown command 6417 06:02:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) close(r2) r3 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x9, 0x410181) ioctl$RTC_VL_CLR(r3, 0x7014) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000200)={@generic={0x1, "1ac0695a317add8e22b4e448b4a63afbc932755a8ff70e007cd15ee7425628f675b2beecd9f9164abf9344dcf88bbb84f431a9e831f5ee75b051477fe2d69949824c25eb3e3866aeea3a4d320e236cf9a4100d9c4d50c0b5c2ff41862fddd2c3da383aa56c709e540a68815a3fe182bf6f60413cc2768bef95dbe84384e5"}, {&(0x7f0000000100)=""/162, 0xa2}, &(0x7f00000001c0), 0xa}, 0xa0) lsetxattr$security_smack_entry(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.SMACK64EXEC\x00', &(0x7f0000000340)='/dev/vhci\x00', 0xa, 0x0) [ 995.794803][ T665] binder: 659:665 ioctl c0306201 20000000 returned -22 [ 995.823214][ T675] binder: BINDER_SET_CONTEXT_MGR already set [ 995.847382][ T675] binder: 659:675 ioctl 40046207 0 returned -16 [ 995.847529][ T676] binder: BINDER_SET_CONTEXT_MGR already set 06:02:47 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x60, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000080)=',/-system-\x00', 0xb, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {r2, r3/1000+30000}}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binder(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, &(0x7f00000001c0)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) getpgrp(r5) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) [ 995.936866][ T676] binder: 662:676 ioctl 40046207 0 returned -16 06:02:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) ptrace$getregset(0x4204, r2, 0x3, &(0x7f0000000180)={&(0x7f00000000c0)=""/75, 0x4b}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x21) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) 06:02:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x800, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) r3 = request_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='/dev/binder#\x00', 0xfffffffffffffffa) keyctl$get_security(0x11, r3, &(0x7f0000000280)=""/64, 0x40) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7fddf4f52bd7e626936febf00aa0d395cea791ce1652db1308e711ab4779dc1ae0bf6e0830d7b63d69db65b0aaee8c62a291d05ec8b0dad1cc55b8e04b3f5365b12bc6e10f635d5c8cbd0ccba21cc12670b7a2d2e826b6362c425d8055a1bc5ec95c2662029eca54c0e8ea64085159cee8d40f5463abfaaddb2eb695a2a961e7744bab4a283f39d3a2f79d560d78c5203367c041f50e5193282f2de3ce8fa35f3c1a42089a00d8f40aaca21e747dc1a39ff89f096ef708af2b418e44cc90fa9a3197dd5ca1200229099eeb7e833f870d386d85db7f326dba50b61562d2d827a155bb3e8d5c848359587e8db225458f23d6b0650cab5078fbcb6ef3e72e4ce1b59d62d48519c73c2616b1c3198f58332c781782903e9e82ccea287942457de067fcee2a2cb672fd624921e5431e964eace051d6ee2b64f8b33682896b2bc3e63dc9734a6f97a439efea21936aefc665c6e3c6aee53816aa55ee0bd5f555a92923c9b35b292d6"], 0x0, 0xfffffdfd, 0x0}) [ 996.132249][ T700] binder: BINDER_SET_CONTEXT_MGR already set [ 996.148301][ T700] binder: 695:700 ioctl 40046207 0 returned -16 [ 996.163554][ T702] binder: BINDER_SET_CONTEXT_MGR already set [ 996.177604][ T700] debugfs: File '695' in directory 'proc' already present! [ 996.177608][ T704] binder: BINDER_SET_CONTEXT_MGR already set [ 996.177627][ T704] binder: 701:704 ioctl 40046207 0 returned -16 [ 996.201306][ T700] binder_alloc: 30918: binder_alloc_buf, no vma [ 996.213930][ T702] binder: 696:702 ioctl 40046207 0 returned -16 [ 996.248459][ T707] binder: BINDER_SET_CONTEXT_MGR already set [ 996.263712][ T707] binder: 695:707 ioctl 40046207 0 returned -16 [ 996.284728][ T700] debugfs: File '695' in directory 'proc' already present! [ 996.294483][ T710] binder_alloc: 30918: binder_alloc_buf, no vma [ 996.302422][ T709] binder: BINDER_SET_CONTEXT_MGR already set [ 996.313118][ T709] binder: 701:709 ioctl 40046207 0 returned -16 06:02:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000181) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x160) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000100)=""/56) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 06:02:48 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xf0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) ptrace$getregset(0x4204, r2, 0x3, &(0x7f0000000180)={&(0x7f00000000c0)=""/75, 0x4b}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x21) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) 06:02:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffdfd, 0x0}) 06:02:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x3, 0xa6, 0x4, 0x10001, 0x0, 0x1, 0x0, 0x4, 0x1, 0x9, 0x10001, 0x100000000, 0x0, 0x2, 0x2000000000000000, 0x3, 0xc36, 0x200, 0x1, 0x9, 0x6, 0x1000, 0x1, 0x1, 0x3, 0x9, 0x7, 0x20, 0x34e, 0x3, 0x28, 0x2, 0x45088bb0, 0x9, 0x5, 0x7, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000100), 0x2}, 0x200, 0x2008000000, 0x5, 0x6, 0x80, 0x6, 0x2}, r4, 0x0, r3, 0x9) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7839cb0a8eab30deea5bfdd7d845114575efdbb1e33a4a19ca496fd8ab325dee773ba5d6c7056b435b592f592f183921bb23b078f94ab35756f70dc74af4a21c1fa9999b673aa8001f6285ecf5c131bf6166e9ab372c484fec9267382ddfd2ba5b746ac55075c241eba6300b20d7117f4ce74848fdc83a34706c62fcb5a571e6096537d434b2d1af56f8c08c80af648b22442a71a67e5c6531364e8d64271e39b29ad6ea2804"], 0x0, 0xfffffdfd, 0x0}) [ 996.696995][ T723] binder: BINDER_SET_CONTEXT_MGR already set [ 996.722376][ T725] binder: BINDER_SET_CONTEXT_MGR already set [ 996.730882][ T723] binder: 719:723 ioctl 40046207 0 returned -16 [ 996.748446][ T724] binder: BINDER_SET_CONTEXT_MGR already set [ 996.762834][ T725] binder: 720:725 ioctl 40046207 0 returned -16 [ 996.787934][ T724] binder: 721:724 ioctl 40046207 0 returned -16 06:02:48 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x300, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) read(r0, &(0x7f0000000100)=""/71, 0x47) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0\x00') r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x52) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x36, 0x4) [ 996.815738][ T723] binder: BINDER_SET_CONTEXT_MGR already set [ 996.833578][ T723] binder: 719:723 ioctl 40046207 0 returned -16 [ 996.834009][ T732] binder: BINDER_SET_CONTEXT_MGR already set 06:02:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1163496000000000"], 0x0, 0xfffffdfd, 0x0}) r3 = request_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='ppp0\x00', 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000180)=""/139, 0x8b) 06:02:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) ptrace$getregset(0x4204, r2, 0x3, &(0x7f0000000180)={&(0x7f00000000c0)=""/75, 0x4b}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x21) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) [ 996.871064][ T732] binder: 721:732 ioctl 40046207 0 returned -16 06:02:48 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:48 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x600, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 997.019209][ T750] binder: BINDER_SET_CONTEXT_MGR already set [ 997.048327][ T750] binder: 749:750 ioctl 40046207 0 returned -16 [ 997.082710][ T752] binder: BINDER_SET_CONTEXT_MGR already set [ 997.110512][ T752] binder: 751:752 ioctl 40046207 0 returned -16 [ 997.110589][ T754] binder: BINDER_SET_CONTEXT_MGR already set [ 997.146969][ T754] binder: 749:754 ioctl 40046207 0 returned -16 06:02:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000182) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:49 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xa00, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x3fffe, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) 06:02:49 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100010000000000e9547b2cc94a77ecb733df956b7f902fea9f3d454fc15dc2e92101056863ca526cbcb46e204a67edc6063781d196ccd7dfe6d7f92eddb6c626f138b7fa4c7a53dfc82facb4455c7edf969e5be3fc1992977e338248d624cf88497afeb97ea211620d414efb509506f445aa2b29049e9fb2fc29d4a89d0bd5dacbda6b18aca7967dd14ebc4021287f6f88"], 0x0, 0xfffffdfd, 0x0}) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast1, @multicast2, 0x0}, &(0x7f0000000180)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14, 0x80000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@multicast2, @broadcast, 0x0}, &(0x7f0000000300)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000ec0)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000fc0)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000003040)={@mcast1, 0x0}, &(0x7f0000003080)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000030c0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f00000031c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000032c0)={@empty, @loopback, 0x0}, &(0x7f0000003300)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003340)={'bridge_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000003380)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000033c0)={'netdevsim0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000003400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003440)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000034c0)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f00000035c0)=0xe8) recvmmsg(0xffffffffffffffff, &(0x7f0000005e40)=[{{&(0x7f00000037c0)=@ax25={{0x3, @null}, [@netrom, @bcast, @bcast, @netrom, @remote, @null, @netrom, @default]}, 0x80, &(0x7f0000003940)=[{&(0x7f0000003840)=""/227, 0xe3}], 0x1, &(0x7f0000003980)=""/64, 0x40}, 0xb3f}, {{&(0x7f00000039c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000005000)=[{&(0x7f0000003a40)=""/244, 0xf4}, {&(0x7f0000003b40)=""/16, 0x10}, {&(0x7f0000003b80)=""/14, 0xe}, {&(0x7f0000003bc0)=""/44, 0x2c}, {&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/146, 0x92}, {&(0x7f0000004cc0)=""/150, 0x96}, {&(0x7f0000004d80)=""/230, 0xe6}, {&(0x7f0000004e80)=""/197, 0xc5}, {&(0x7f0000004f80)=""/123, 0x7b}], 0xa, &(0x7f00000050c0)=""/235, 0xeb}, 0xa2f2}, {{&(0x7f00000051c0)=@tipc=@id, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005240)=""/174, 0xae}, {&(0x7f0000005300)=""/91, 0x5b}, {&(0x7f0000005380)}], 0x3}, 0x1}, {{0x0, 0x0, &(0x7f0000005780)=[{&(0x7f0000005400)=""/31, 0x1f}, {&(0x7f0000005440)=""/171, 0xab}, {&(0x7f0000005500)=""/228, 0xe4}, {&(0x7f0000005600)=""/113, 0x71}, {&(0x7f0000005680)=""/246, 0xf6}], 0x5, &(0x7f0000005800)=""/36, 0x24}, 0x29f}, {{&(0x7f0000005840)=@isdn, 0x80, &(0x7f0000005900)=[{&(0x7f00000058c0)=""/25, 0x19}], 0x1, &(0x7f0000005940)=""/85, 0x55}, 0xfb}, {{&(0x7f00000059c0)=@sco, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000005a40)=""/22, 0x16}, {&(0x7f0000005a80)=""/3, 0x3}, {&(0x7f0000005ac0)=""/176, 0xb0}, {&(0x7f0000005b80)=""/7, 0x7}, {&(0x7f0000005bc0)=""/208, 0xd0}], 0x5, &(0x7f0000005d40)=""/220, 0xdc}, 0x8000000000}], 0x6, 0x40, &(0x7f0000005fc0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000063c0)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f00000064c0)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000006500)={@dev, 0x0}, &(0x7f0000006540)=0x14) accept4(0xffffffffffffffff, &(0x7f0000006580)=@hci={0x1f, 0x0}, &(0x7f0000006600)=0x80, 0x80000) getsockname$packet(0xffffffffffffffff, &(0x7f0000006700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006740)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000006f40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000006f00)={&(0x7f0000006780)={0x76c, r2, 0x0, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0xc0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r4}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0xfffffffffffffffe, 0x6, 0x5, 0x4}, {0x9, 0x3, 0x2, 0x401}, {0x8, 0x7fffffff, 0x0, 0x7}, {0x6, 0x80000000, 0x4, 0x9}, {0x0, 0x7ff, 0xd7, 0x8}, {0x6, 0x7ff, 0xfffffffffffffffa, 0x3}, {0xfffffffffffff415, 0x6, 0x3a3, 0x4856}, {0x200, 0x9, 0x8, 0xfff}, {0x6, 0x4, 0x1, 0x8}]}}}]}}, {{0x8, 0x1, r5}, {0x13c, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xdc}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8001}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x1fc, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x200}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x0, 0x7fffffff, 0xffffffffffffff0e}, {0x0, 0x3, 0x84, 0x3}, {0x9, 0x3f, 0x7, 0x7}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x184, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r18}, {0x40, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0xffffffff, 0x4, 0x0, 0x90700000000000}]}}}]}}, {{0x8, 0x1, r19}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x310}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r20}, {0xf0, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6e}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}]}, 0x76c}, 0x1, 0x0, 0x0, 0x800}, 0x80) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) 06:02:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x6}, {r0, 0x4000}, {r0, 0x4020}, {r0, 0x8051}, {r0, 0x48}, {r0, 0x9210}], 0x6, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={0xfffffffffffff000}, 0x8) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) [ 997.670482][ T771] debugfs: File '769' in directory 'proc' already present! [ 997.682636][ T774] debugfs: File '768' in directory 'proc' already present! [ 997.694665][ T772] debugfs: File '770' in directory 'proc' already present! 06:02:49 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xb3d, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 997.726803][ T774] binder_alloc: 30918: binder_alloc_buf, no vma [ 997.736626][ T771] binder_alloc: 769: binder_alloc_buf, no vma [ 997.782386][ T771] binder: BINDER_SET_CONTEXT_MGR already set 06:02:49 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000300)=""/62) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x3f, 0x800, 0x5, 0x9}) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x8) syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="2c83390f497fc662efb815b1b60a7037e4380e0eca3c04a553c595a6f5e150b60bafd32316bb5b5418838b138fef37b26d7f6391e238da9b", 0x38, 0xfffffffffffffffd) keyctl$invalidate(0x15, r5) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="8100000000000000"], 0x0, 0xfffffdfd, 0x0}) 06:02:49 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000880)='/dev/vbi#\x00', 0x3, 0x2) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r2, 0x5427) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000840)=0x100) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000008c0)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000900)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000940)={r4, r5, 0x7}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') preadv(r2, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/229, 0xe5}, {&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000500)=""/248, 0xf8}, {&(0x7f0000000600)=""/48, 0x30}, {&(0x7f0000000640)=""/98, 0x62}, {&(0x7f00000006c0)=""/221, 0xdd}], 0x6, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x200, r6, 0x520, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7bc0af29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x587d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfe}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x55d}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x20044011}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:49 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x2) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x958d, 0x20, 0x80000001, 0x2}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x1}, &(0x7f0000000100)=0x8) syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40601, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) [ 997.864594][ T771] binder: 769:771 ioctl 40046207 0 returned -16 06:02:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1163484000002010f69e68914d916da7fcc2d77ee04b295cb2d70f4b8479ef7f176ab1acbed7d536d89a23bd4427ce99cc6c45e854848163ec8cc4eaaf7eabf7b8"], 0x0, 0xfffffdfd, 0x0}) 06:02:49 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xc00, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 998.068772][ T801] debugfs: File '790' in directory 'proc' already present! [ 998.102350][ T797] binder: BINDER_SET_CONTEXT_MGR already set [ 998.131065][ T800] binder: BINDER_SET_CONTEXT_MGR already set [ 998.138244][ T797] binder: 793:797 ioctl 40046207 0 returned -16 [ 998.155212][ T800] binder: 794:800 ioctl 40046207 0 returned -16 [ 998.155438][ T795] binder_alloc: 30918: binder_alloc_buf, no vma [ 998.166809][ T797] debugfs: File '793' in directory 'proc' already present! 06:02:50 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xe00, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 998.168802][ T807] binder: BINDER_SET_CONTEXT_MGR already set [ 998.224819][ T807] binder: 803:807 ioctl 40046207 0 returned -16 [ 998.268945][ T797] binder: 793:797 unknown command 129 [ 998.274769][ T797] binder: 793:797 ioctl c0306201 20012000 returned -22 [ 998.296007][ T810] binder: BINDER_SET_CONTEXT_MGR already set [ 998.318550][ T810] binder: 803:810 ioctl 40046207 0 returned -16 06:02:50 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000183) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:50 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000880)='/dev/vbi#\x00', 0x3, 0x2) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r2, 0x5427) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000840)=0x100) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000008c0)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000900)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000940)={r4, r5, 0x7}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') preadv(r2, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/229, 0xe5}, {&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000500)=""/248, 0xf8}, {&(0x7f0000000600)=""/48, 0x30}, {&(0x7f0000000640)=""/98, 0x62}, {&(0x7f00000006c0)=""/221, 0xdd}], 0x6, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x200, r6, 0x520, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7bc0af29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x587d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfe}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x55d}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x20044011}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x2) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x958d, 0x20, 0x80000001, 0x2}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x1}, &(0x7f0000000100)=0x8) syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40601, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:50 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xf00, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000040)=""/187, &(0x7f0000000100)=0xbb) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) 06:02:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) [ 998.655941][ T824] binder: BINDER_SET_CONTEXT_MGR already set [ 998.691922][ T824] binder: 823:824 ioctl 40046207 0 returned -16 [ 998.692212][ T829] binder: BINDER_SET_CONTEXT_MGR already set 06:02:50 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x3d0b, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 998.720945][ T832] binder: BINDER_SET_CONTEXT_MGR already set [ 998.726726][ T835] debugfs: File '822' in directory 'proc' already present! [ 998.727281][ T829] binder: 820:829 ioctl 40046207 0 returned -16 [ 998.749014][ T832] binder: 821:832 ioctl 40046207 0 returned -16 [ 998.772603][ T837] binder: BINDER_SET_CONTEXT_MGR already set [ 998.794730][ T837] binder: 823:837 ioctl 40046207 0 returned -16 [ 998.811431][ T827] binder_alloc: 30918: binder_alloc_buf, no vma [ 998.823169][ T832] debugfs: File '821' in directory 'proc' already present! 06:02:50 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000880)='/dev/vbi#\x00', 0x3, 0x2) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r2, 0x5427) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000840)=0x100) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000008c0)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000900)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000940)={r4, r5, 0x7}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') preadv(r2, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/229, 0xe5}, {&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000500)=""/248, 0xf8}, {&(0x7f0000000600)=""/48, 0x30}, {&(0x7f0000000640)=""/98, 0x62}, {&(0x7f00000006c0)=""/221, 0xdd}], 0x6, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x200, r6, 0x520, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7bc0af29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x587d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfe}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x55d}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x20044011}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x100401000000003, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000018008105e00f80ecdb4cb92e0a480e181e0cd310e8bd6efb1200080008000a00000e0040060000000000", 0x2e}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x7}}, 0x18) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) [ 998.868881][ T832] binder_alloc: 30918: binder_alloc_buf, no vma 06:02:50 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x3f00, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:50 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x20f, 0x503000) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/54, 0x36) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="040f6f63066b612fa5746534e0770e06bfc56063d811d2cd383d7eb178fc842f124df847f1fce504e09123a71d2d5a9b92e8d6fd5bb35c91c0f59b11991bf4a1c0b71ad99461df71c6689f7331ddbab1ca11932e769a318859665f86db7324f8035c6d3145994df9ca0a61acbc1ecf4ea63655f30115a8ec369ce1ba093ae47b263ad67f7cdc1b24"], 0x0, 0xfffffdfd, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0xb4, 0x0, &(0x7f0000000580)=[@increfs={0x40046304, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/240, 0xf0, 0x1, 0x34}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/152, 0x98, 0x1, 0x16}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@flat=@handle={0x73682a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0x101, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/145, 0x91, 0x1, 0x13}}, &(0x7f0000000540)={0x0, 0x18, 0x30}}}, @register_looper, @acquire_done={0x40106309, 0x2}, @register_looper], 0xde, 0x0, &(0x7f0000000640)="6fb4c66db5c356e36b18108c26dbf2a9e5dc5b37a405edcbc19e913cc8168e4840405a1db413739c2577d9b05e765f54e16d0cf1aa59055b76371823e0debe9e24b0e7df855d2860d146060fc1343af958be86029d8d1ab746b31505ef4252f953d074127b9e3164e73cd7c1665d5888a9c145d634e9c171564e62458351b687ea7da1de1442495ee6ddeba955b8f785cac3fb1c374236a13dda120c7caf0de5c13534ffeb395ff942654cfd5760847497cfa405039e53ecf5c12c6f0d26a7b9604ec1441074b6e105686e181da14a0779ef808255a521caee6db0204cbe"}) [ 999.018006][ T853] binder: BINDER_SET_CONTEXT_MGR already set [ 999.042799][ T853] binder: 851:853 ioctl 40046207 0 returned -16 [ 999.072830][ T857] debugfs: File '854' in directory 'proc' already present! [ 999.082216][ T855] binder: BINDER_SET_CONTEXT_MGR already set [ 999.119677][ T855] binder: 852:855 ioctl 40046207 0 returned -16 [ 999.120329][ T864] binder: BINDER_SET_CONTEXT_MGR already set [ 999.143193][ T862] binder: BINDER_SET_CONTEXT_MGR already set [ 999.149519][ T864] binder: 861:864 ioctl 40046207 0 returned -16 [ 999.158777][ T853] debugfs: File '851' in directory 'proc' already present! [ 999.176867][ T857] binder_alloc: 30918: binder_alloc_buf, no vma [ 999.187941][ T864] debugfs: File '861' in directory 'proc' already present! [ 999.200213][ T862] binder: 851:862 ioctl 40046207 0 returned -16 [ 999.257463][ T864] binder: 861:864 unknown command 1668222724 [ 999.278377][ T864] binder: 861:864 ioctl c0306201 20012000 returned -22 06:02:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000184) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:51 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x4000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:51 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000040)={0xf1fb, 0x1, 0x4, 'queue0\x00', 0x20}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='nr0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:51 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x20f, 0x503000) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311}], 0x0, 0xfffffdfd, 0x0}) 06:02:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) 06:02:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/54, 0x36) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="040f6f63066b612fa5746534e0770e06bfc56063d811d2cd383d7eb178fc842f124df847f1fce504e09123a71d2d5a9b92e8d6fd5bb35c91c0f59b11991bf4a1c0b71ad99461df71c6689f7331ddbab1ca11932e769a318859665f86db7324f8035c6d3145994df9ca0a61acbc1ecf4ea63655f30115a8ec369ce1ba093ae47b263ad67f7cdc1b24"], 0x0, 0xfffffdfd, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0xb4, 0x0, &(0x7f0000000580)=[@increfs={0x40046304, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/240, 0xf0, 0x1, 0x34}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/152, 0x98, 0x1, 0x16}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@flat=@handle={0x73682a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0x101, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/145, 0x91, 0x1, 0x13}}, &(0x7f0000000540)={0x0, 0x18, 0x30}}}, @register_looper, @acquire_done={0x40106309, 0x2}, @register_looper], 0xde, 0x0, &(0x7f0000000640)="6fb4c66db5c356e36b18108c26dbf2a9e5dc5b37a405edcbc19e913cc8168e4840405a1db413739c2577d9b05e765f54e16d0cf1aa59055b76371823e0debe9e24b0e7df855d2860d146060fc1343af958be86029d8d1ab746b31505ef4252f953d074127b9e3164e73cd7c1665d5888a9c145d634e9c171564e62458351b687ea7da1de1442495ee6ddeba955b8f785cac3fb1c374236a13dda120c7caf0de5c13534ffeb395ff942654cfd5760847497cfa405039e53ecf5c12c6f0d26a7b9604ec1441074b6e105686e181da14a0779ef808255a521caee6db0204cbe"}) [ 999.561698][ T876] debugfs: File '870' in directory 'proc' already present! [ 999.590206][ T878] debugfs: File '872' in directory 'proc' already present! [ 999.608804][ T877] binder: BINDER_SET_CONTEXT_MGR already set 06:02:51 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x5865, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 999.648082][ T880] binder: BINDER_SET_CONTEXT_MGR already set [ 999.648145][ T876] binder_alloc: 30918: binder_alloc_buf, no vma [ 999.656571][ T880] binder: 875:880 ioctl 40046207 0 returned -16 [ 999.664390][ T877] binder: 871:877 ioctl 40046207 0 returned -16 [ 999.673241][ T880] debugfs: File '875' in directory 'proc' already present! [ 999.688967][ T884] binder_alloc: 30918: binder_alloc_buf, no vma [ 999.732073][ T877] debugfs: File '871' in directory 'proc' already present! [ 999.764896][ T880] binder: BINDER_SET_CONTEXT_MGR already set 06:02:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000140)={0x0, 0x100, 0x101}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000100)={0x9}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x5, 0x1, 0x6, 0xffffffffffffffff}, 0x8) close(r2) [ 999.789343][ T880] binder: 875:880 ioctl 40046207 0 returned -16 [ 999.804562][ T877] binder: 871:877 unknown command 1668222724 06:02:51 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x6000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r2, 0x101) socket$kcm(0x29, 0x2, 0x0) 06:02:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x802) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x10}, {r1, 0x400}, {r0}, {r0, 0x4000}, {r0}], 0x5, &(0x7f0000000100)={r3, r4+10000000}, &(0x7f0000000180)={0x5}, 0x8) setsockopt$inet6_dccp_int(r1, 0x21, 0x7, &(0x7f0000000040)=0x6, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) [ 999.833658][ T877] binder: 871:877 ioctl c0306201 20012000 returned -22 06:02:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x3, 0x5e3, 0x3493, 0x34f9800000000}, 0x10) readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/197, 0xc5) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r1, 0x0, 0x5, &(0x7f0000000340)='eth1\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6}}, &(0x7f00000004c0)=0xe8) getresgid(&(0x7f0000000500)=0x0, &(0x7f0000000540), &(0x7f0000000580)) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0)={r3, r4, r5}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_STAT(r6, 0x2, &(0x7f00000001c0)=""/113) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="093cab4b90cbd7636afeb8be1fa6e36c00b61d248624d54227e4be386c1451ad8a982ce321040736eb911f6896e7d04ec16e025e66345bc92aea2b1f0776f12c314fea0d3c599faefb5987b1aa277710acb41f3c6fd302e67be1efe4ec8e4d834cf0befaeb8e35fff7d6451de26f3abdb1d664cdf4ee5ba352c008fdf1b7662a7d05ea0c10e37c365915ab7ee0a2898c66e7828512224a7acba79e936678665639c0fa0c51bd4508a5b0a8ae6b0702a707290d8e69b8e8ca382c82348a314196f9e781d0e8fd776458a5ec5975ce97e96be9baf04c072ccc19ecc8e431e3b448b1b6"], 0x0, 0xfffffdfd, 0x0}) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) [ 1000.009428][ T905] binder: BINDER_SET_CONTEXT_MGR already set [ 1000.038270][ T905] binder: 901:905 ioctl 40046207 0 returned -16 [ 1000.067261][ T905] debugfs: File '901' in directory 'proc' already present! [ 1000.199661][ T910] binder: BINDER_SET_CONTEXT_MGR already set [ 1000.213733][ T910] binder: 907:910 ioctl 40046207 0 returned -16 [ 1000.239057][ T910] debugfs: File '907' in directory 'proc' already present! [ 1000.260309][ T910] binder: 907:910 unknown command 1269513225 [ 1000.266385][ T910] binder: 907:910 ioctl c0306201 20012000 returned -22 06:02:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000185) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:52 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x6558, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r2, 0x101) socket$kcm(0x29, 0x2, 0x0) 06:02:52 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x103241, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x3, 0x0, 0x6, 0x8, 0x0}, &(0x7f0000000300)=0x10) r4 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000480)=""/223, 0xdf) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000340)={r3, 0x10001, 0x30, 0x1, 0xfff}, &(0x7f0000000380)=0x18) timerfd_gettime(r2, &(0x7f00000000c0)) fcntl$addseals(r0, 0x409, 0x2) getpeername(r2, &(0x7f0000000580)=@sco, &(0x7f0000000600)=0x80) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="46d3850a93057951518e4977a731b152efb7fe905721cd2153841ab56c2453db40329598adff00b4cbaf0bef2988ae3a261006b7095b106583b08eb23b0783b0091414074e260203ec046e4fd393f32bebb0406b2c14833dbb0fda0fc65b8260c99bcb6426daf358830738dbb22e114b28ab1e7ab34b405feeeca96293b78a8b5b2a00a06729f295752dccd8740615a98c112323a8c3825ee9e8b76f070368860b55a34cb2590da09dfc25cce2babf31fad5fa3c02ab105d72b28ac27d", 0xbd, 0xfffffffffffffffd) 06:02:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x3, 0x5e3, 0x3493, 0x34f9800000000}, 0x10) readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/197, 0xc5) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r1, 0x0, 0x5, &(0x7f0000000340)='eth1\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6}}, &(0x7f00000004c0)=0xe8) getresgid(&(0x7f0000000500)=0x0, &(0x7f0000000540), &(0x7f0000000580)) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0)={r3, r4, r5}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_STAT(r6, 0x2, &(0x7f00000001c0)=""/113) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="093cab4b90cbd7636afeb8be1fa6e36c00b61d248624d54227e4be386c1451ad8a982ce321040736eb911f6896e7d04ec16e025e66345bc92aea2b1f0776f12c314fea0d3c599faefb5987b1aa277710acb41f3c6fd302e67be1efe4ec8e4d834cf0befaeb8e35fff7d6451de26f3abdb1d664cdf4ee5ba352c008fdf1b7662a7d05ea0c10e37c365915ab7ee0a2898c66e7828512224a7acba79e936678665639c0fa0c51bd4508a5b0a8ae6b0702a707290d8e69b8e8ca382c82348a314196f9e781d0e8fd776458a5ec5975ce97e96be9baf04c072ccc19ecc8e431e3b448b1b6"], 0x0, 0xfffffdfd, 0x0}) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) [ 1000.514918][ T920] binder: BINDER_SET_CONTEXT_MGR already set [ 1000.530526][ T920] binder: 916:920 ioctl 40046207 0 returned -16 06:02:52 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x8100, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:52 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x103241, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x3, 0x0, 0x6, 0x8, 0x0}, &(0x7f0000000300)=0x10) r4 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000480)=""/223, 0xdf) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000340)={r3, 0x10001, 0x30, 0x1, 0xfff}, &(0x7f0000000380)=0x18) timerfd_gettime(r2, &(0x7f00000000c0)) fcntl$addseals(r0, 0x409, 0x2) getpeername(r2, &(0x7f0000000580)=@sco, &(0x7f0000000600)=0x80) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="46d3850a93057951518e4977a731b152efb7fe905721cd2153841ab56c2453db40329598adff00b4cbaf0bef2988ae3a261006b7095b106583b08eb23b0783b0091414074e260203ec046e4fd393f32bebb0406b2c14833dbb0fda0fc65b8260c99bcb6426daf358830738dbb22e114b28ab1e7ab34b405feeeca96293b78a8b5b2a00a06729f295752dccd8740615a98c112323a8c3825ee9e8b76f070368860b55a34cb2590da09dfc25cce2babf31fad5fa3c02ab105d72b28ac27d", 0xbd, 0xfffffffffffffffd) 06:02:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r2, 0x101) socket$kcm(0x29, 0x2, 0x0) 06:02:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x3, 0x5e3, 0x3493, 0x34f9800000000}, 0x10) readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/197, 0xc5) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r1, 0x0, 0x5, &(0x7f0000000340)='eth1\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6}}, &(0x7f00000004c0)=0xe8) getresgid(&(0x7f0000000500)=0x0, &(0x7f0000000540), &(0x7f0000000580)) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0)={r3, r4, r5}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_STAT(r6, 0x2, &(0x7f00000001c0)=""/113) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="093cab4b90cbd7636afeb8be1fa6e36c00b61d248624d54227e4be386c1451ad8a982ce321040736eb911f6896e7d04ec16e025e66345bc92aea2b1f0776f12c314fea0d3c599faefb5987b1aa277710acb41f3c6fd302e67be1efe4ec8e4d834cf0befaeb8e35fff7d6451de26f3abdb1d664cdf4ee5ba352c008fdf1b7662a7d05ea0c10e37c365915ab7ee0a2898c66e7828512224a7acba79e936678665639c0fa0c51bd4508a5b0a8ae6b0702a707290d8e69b8e8ca382c82348a314196f9e781d0e8fd776458a5ec5975ce97e96be9baf04c072ccc19ecc8e431e3b448b1b6"], 0x0, 0xfffffdfd, 0x0}) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 06:02:52 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xf000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1000.795600][ T905] debugfs: File '901' in directory 'proc' already present! [ 1000.819624][ T905] binder: BINDER_SET_CONTEXT_MGR already set [ 1000.871987][ T940] debugfs: File '901' in directory 'proc' already present! [ 1000.915038][ T905] binder: 901:905 ioctl 40046207 0 returned -16 [ 1000.977170][ T947] binder: BINDER_SET_CONTEXT_MGR already set [ 1000.991530][ T947] binder: 942:947 ioctl 40046207 0 returned -16 06:02:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) 06:02:52 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x103241, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x3, 0x0, 0x6, 0x8, 0x0}, &(0x7f0000000300)=0x10) r4 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000480)=""/223, 0xdf) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000340)={r3, 0x10001, 0x30, 0x1, 0xfff}, &(0x7f0000000380)=0x18) timerfd_gettime(r2, &(0x7f00000000c0)) fcntl$addseals(r0, 0x409, 0x2) getpeername(r2, &(0x7f0000000580)=@sco, &(0x7f0000000600)=0x80) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="46d3850a93057951518e4977a731b152efb7fe905721cd2153841ab56c2453db40329598adff00b4cbaf0bef2988ae3a261006b7095b106583b08eb23b0783b0091414074e260203ec046e4fd393f32bebb0406b2c14833dbb0fda0fc65b8260c99bcb6426daf358830738dbb22e114b28ab1e7ab34b405feeeca96293b78a8b5b2a00a06729f295752dccd8740615a98c112323a8c3825ee9e8b76f070368860b55a34cb2590da09dfc25cce2babf31fad5fa3c02ab105d72b28ac27d", 0xbd, 0xfffffffffffffffd) [ 1001.019192][ T947] debugfs: File '942' in directory 'proc' already present! [ 1001.076582][ T947] binder: 942:947 unknown command 1269513225 [ 1001.100686][ T957] binder: BINDER_SET_CONTEXT_MGR already set [ 1001.115366][ T957] binder: 955:957 ioctl 40046207 0 returned -16 [ 1001.143632][ T947] binder: 942:947 ioctl c0306201 20012000 returned -22 [ 1001.146065][ T957] debugfs: File '955' in directory 'proc' already present! [ 1001.193444][ T959] binder: BINDER_SET_CONTEXT_MGR already set [ 1001.209000][ T959] binder: 955:959 ioctl 40046207 0 returned -16 06:02:53 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000186) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r2, 0x101) 06:02:53 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x34000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:53 executing program 5 (fault-call:3 fault-nth:0): socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) 06:02:53 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x406100) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000000c0)={0xffff, 0x3, 0x4, 0x200, &(0x7f0000000180)=[{}, {}, {}]}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) 06:02:53 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x103241, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x3, 0x0, 0x6, 0x8, 0x0}, &(0x7f0000000300)=0x10) r4 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000480)=""/223, 0xdf) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000340)={r3, 0x10001, 0x30, 0x1, 0xfff}, &(0x7f0000000380)=0x18) timerfd_gettime(r2, &(0x7f00000000c0)) fcntl$addseals(r0, 0x409, 0x2) getpeername(r2, &(0x7f0000000580)=@sco, &(0x7f0000000600)=0x80) 06:02:53 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x400300, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:53 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) [ 1001.484285][ T976] debugfs: File '966' in directory 'proc' already present! 06:02:53 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x103241, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x3, 0x0, 0x6, 0x8, 0x0}, &(0x7f0000000300)=0x10) r4 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000480)=""/223, 0xdf) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000340)={r3, 0x10001, 0x30, 0x1, 0xfff}, &(0x7f0000000380)=0x18) timerfd_gettime(r2, &(0x7f00000000c0)) fcntl$addseals(r0, 0x409, 0x2) [ 1001.557605][ T976] binder_alloc_new_buf_locked: 2 callbacks suppressed [ 1001.557612][ T976] binder_alloc: 966: binder_alloc_buf, no vma 06:02:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r2, 0x101) [ 1001.631427][ T981] debugfs: File '966' in directory 'proc' already present! [ 1001.648959][ T981] binder_alloc: 966: binder_alloc_buf, no vma 06:02:53 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xf0ffff, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x9, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0x4}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xb, 0x0, 0xba}, &(0x7f0000000240)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x40}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r3, 0x0, 0xfffffffffffffdc1, &(0x7f0000000040)='}\rbdev\x82GPLwlan0/)selinux\x00', r4}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r5, 0x4) [ 1001.892939][ T1001] binder: BINDER_SET_CONTEXT_MGR already set [ 1001.912137][ T1001] binder: 999:1001 ioctl 40046207 0 returned -16 [ 1001.948826][ T1001] debugfs: File '999' in directory 'proc' already present! [ 1001.975925][ T1001] binder_alloc: 30918: binder_alloc_buf, no vma [ 1002.001699][ T1005] binder: BINDER_SET_CONTEXT_MGR already set [ 1002.008514][ T1005] binder: 999:1005 ioctl 40046207 0 returned -16 06:02:54 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000187) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:54 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x4000) 06:02:54 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x1000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) 06:02:54 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x103241, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x3, 0x0, 0x6, 0x8, 0x0}, &(0x7f0000000300)=0x10) r4 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000480)=""/223, 0xdf) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000340)={r3, 0x10001, 0x30, 0x1, 0xfff}, &(0x7f0000000380)=0x18) timerfd_gettime(r2, &(0x7f00000000c0)) 06:02:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00f9ffffff000000"], 0x0, 0xfffffdfd, 0x0}) [ 1002.360416][ T1023] binder: BINDER_SET_CONTEXT_MGR already set 06:02:54 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:54 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x1000000) 06:02:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 1002.406682][ T1023] binder: 1012:1023 ioctl 40046207 0 returned -16 06:02:54 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x103241, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x3, 0x0, 0x6, 0x8, 0x0}, &(0x7f0000000300)=0x10) r4 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000480)=""/223, 0xdf) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000340)={r3, 0x10001, 0x30, 0x1, 0xfff}, &(0x7f0000000380)=0x18) [ 1002.480838][ T1024] binder: BINDER_SET_CONTEXT_MGR already set [ 1002.520611][ T1024] binder: 1012:1024 ioctl 40046207 0 returned -16 06:02:54 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x3000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @broadcast}, &(0x7f0000000100)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(r2, 0x200, 0x69c37549) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="3becb11a25bc3bb854f42f1b7b3d1502cbc8219e1f5909624d35af63ba67618bbac9d1d7d62b9c5b49ab9ac6f3ec6e71389b40b0240e5ff304001a"], 0x0, 0xfffffdfd, 0x0}) [ 1002.754750][ T1046] binder: BINDER_SET_CONTEXT_MGR already set [ 1002.813632][ T1046] binder: 1043:1046 ioctl 40046207 0 returned -16 [ 1002.835054][ T1046] binder: BINDER_SET_CONTEXT_MGR already set [ 1002.850466][ T1046] binder: 1043:1046 ioctl 40046207 0 returned -16 06:02:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000188) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:57 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x40000000) 06:02:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) close(r1) 06:02:57 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x103241, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x3, 0x0, 0x6, 0x8, 0x0}, &(0x7f0000000300)=0x10) r4 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000480)=""/223, 0xdf) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000340)={r3, 0x10001, 0x30, 0x1, 0xfff}, &(0x7f0000000380)=0x18) 06:02:57 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) [ 1005.375943][ T1072] binder: BINDER_SET_CONTEXT_MGR already set 06:02:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) close(r1) [ 1005.431487][ T1072] binder: 1067:1072 ioctl 40046207 0 returned -16 06:02:57 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x6000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:57 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x100000000000000) 06:02:57 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x103241, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x3, 0x0, 0x6, 0x8}, &(0x7f0000000300)=0x10) r3 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000480)=""/223, 0xdf) [ 1005.482798][ T1079] binder: BINDER_SET_CONTEXT_MGR already set [ 1005.501761][ T1079] binder: 1067:1079 ioctl 40046207 0 returned -16 06:02:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x4}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x2000000, 0x3, 0x0, 0x0, @msi={0x1, 0x100000001, 0x6}}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) 06:02:57 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x4000000000000000) [ 1005.742556][ T1099] binder: BINDER_SET_CONTEXT_MGR already set [ 1005.778098][ T1099] binder: 1098:1099 ioctl 40046207 0 returned -16 [ 1005.833723][ T1104] binder: BINDER_SET_CONTEXT_MGR already set [ 1005.851033][ T1104] binder: 1098:1104 ioctl 40046207 0 returned -16 06:02:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000189) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:02:58 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xa000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) close(r1) 06:02:58 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x103241, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x3, 0x0, 0x6, 0x8}, &(0x7f0000000300)=0x10) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 06:02:58 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(r1, &(0x7f00000002c0)={0x9c, 0x81, "899c8091d98fc4afdcd8a78c9afbb4ad1a57da41da25fa87ecc1b894130a155f7e877c748e95d6896a2ab9928670512cb2f76e9e306abc5f4490ad6cffb790667b825877869b3b417afe443366a996ac4cf69ffe75967c84c2a91fdd78c0c9731ba344949f9c8acadbfe94e1021c3ce553a0f8704300ba2af5b0b101d76b4f8e197a4370f0ddc8acdab27e71a80db3d02c0d5405"}, 0x30000) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x803, 0x0) setitimer(0x0, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x6) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000180)={0x2000000000000, 0x4, 0x3f, 0x0, 0x0, [], [], [], 0x3f, 0x5}) 06:02:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x7, 0x0, &(0x7f0000000140)=[@acquire={0x40486311, 0x2000000000000000}], 0x0, 0xfffffdfd, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) [ 1006.302685][ T1118] binder: BINDER_SET_CONTEXT_MGR already set 06:02:58 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xc000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:58 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x103241, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x3, 0x0, 0x6, 0x8}, &(0x7f0000000300)=0x10) [ 1006.347194][ T1118] binder: 1111:1118 ioctl 40046207 0 returned -16 06:02:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) [ 1006.426739][ T1123] binder: BINDER_SET_CONTEXT_MGR already set [ 1006.477789][ T1123] binder: 1111:1123 ioctl 40046207 0 returned -16 06:02:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x3, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="41accd5c27aa64bf"], 0x199, 0xfffffdfd, 0x0}) 06:02:58 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xe000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:02:58 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f00000000c0)={0x3, 0x4, {0x56, 0x4, 0x2, {0x7, 0x1}, {0x7, 0x8}, @const={0x0, {0x5, 0x856, 0x8001, 0x4c8}}}, {0x52, 0x6, 0xffffffffffffffc0, {0xc35, 0x9}, {0xfffffffffffffc00, 0x94}, @rumble={0x5, 0xffffffffffffb685}}}) dup3(r0, r2, 0x0) [ 1006.682962][ T1148] binder: BINDER_SET_CONTEXT_MGR already set [ 1006.710865][ T1148] binder: 1145:1148 ioctl 40046207 0 returned -16 [ 1006.746842][ T1148] binder: BINDER_SET_CONTEXT_MGR already set [ 1006.785875][ T1148] binder: 1145:1148 ioctl 40046207 0 returned -16 06:03:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000018a) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:03:01 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x103241, 0x0) 06:03:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 06:03:01 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xf000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:01 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0xc0a00, 0x0) accept4$ax25(r2, &(0x7f00000000c0)={{}, [@null, @bcast, @remote, @remote, @bcast, @remote, @remote, @rose]}, &(0x7f0000000140)=0x48, 0x80800) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r3, 0x0) 06:03:01 executing program 1 (fault-call:5 fault-nth:0): r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) [ 1009.401477][ T1167] block nbd0: shutting down sockets [ 1009.445332][ T1167] FAULT_INJECTION: forcing a failure. [ 1009.445332][ T1167] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.472457][ T1167] CPU: 0 PID: 1167 Comm: syz-executor.1 Not tainted 5.3.0-rc1-next-20190724 #50 [ 1009.481518][ T1167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1009.491572][ T1167] Call Trace: [ 1009.491605][ T1167] dump_stack+0x172/0x1f0 [ 1009.491635][ T1167] should_fail.cold+0xa/0x15 [ 1009.491661][ T1167] ? fault_create_debugfs_attr+0x180/0x180 [ 1009.491685][ T1167] ? ___might_sleep+0x163/0x280 [ 1009.491708][ T1167] __should_failslab+0x121/0x190 [ 1009.509906][ T1167] should_failslab+0x9/0x14 [ 1009.509923][ T1167] __kmalloc+0x2e0/0x770 [ 1009.509942][ T1167] ? tomoyo_realpath_from_path+0xc0/0x7b0 [ 1009.509968][ T1167] ? rcu_read_lock_sched_held+0x110/0x130 [ 1009.539924][ T1167] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1009.545660][ T1167] tomoyo_realpath_from_path+0xcd/0x7b0 [ 1009.551219][ T1167] ? tomoyo_path_number_perm+0x193/0x520 [ 1009.556869][ T1167] tomoyo_path_number_perm+0x1dd/0x520 [ 1009.562337][ T1167] ? tomoyo_path_number_perm+0x193/0x520 [ 1009.567981][ T1167] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1009.573799][ T1167] ? __f_unlock_pos+0x19/0x20 [ 1009.578533][ T1167] ? __fget+0x384/0x560 [ 1009.582715][ T1167] ? ksys_dup3+0x3e0/0x3e0 [ 1009.587144][ T1167] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 06:03:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 06:03:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:03:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000018b) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 1009.593396][ T1167] ? fput_many+0x12c/0x1a0 [ 1009.597828][ T1167] tomoyo_file_ioctl+0x23/0x30 [ 1009.602613][ T1167] security_file_ioctl+0x77/0xc0 [ 1009.607562][ T1167] ksys_ioctl+0x57/0xd0 [ 1009.611733][ T1167] __x64_sys_ioctl+0x73/0xb0 [ 1009.616343][ T1167] do_syscall_64+0xfa/0x760 [ 1009.620948][ T1167] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1009.626851][ T1167] RIP: 0033:0x459829 [ 1009.626869][ T1167] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1009.626878][ T1167] RSP: 002b:00007f7d37ab7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1009.626893][ T1167] RAX: ffffffffffffffda RBX: 00007f7d37ab7c90 RCX: 0000000000459829 [ 1009.626901][ T1167] RDX: 0000000000000000 RSI: 000000000000ab04 RDI: 0000000000000005 [ 1009.626920][ T1167] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1009.626929][ T1167] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d37ab86d4 06:03:01 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xff) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x100000000, 0x80) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000100)={0x3, 0x7}) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r3, 0x80000) 06:03:01 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x10000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1009.626935][ T1167] R13: 00000000004c303d R14: 00000000004d64f0 R15: 0000000000000006 [ 1009.700092][ T1167] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1009.714675][ T1181] kobject_add_internal failed for hci2 (error: -2 parent: bluetooth) 06:03:01 executing program 1 (fault-call:5 fault-nth:1): r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 06:03:01 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 1009.809806][ T1181] Bluetooth: Can't register HCI device 06:03:01 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x3d0b0000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:01 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x88180, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r3, 0x428, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000c4}, 0x20000004) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') dup3(r0, r4, 0x0) 06:03:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 1009.998549][ T1204] block nbd0: shutting down sockets 06:03:01 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) close(r1) [ 1010.058582][ T1208] FAULT_INJECTION: forcing a failure. [ 1010.058582][ T1208] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1010.071846][ T1208] CPU: 1 PID: 1208 Comm: syz-executor.1 Not tainted 5.3.0-rc1-next-20190724 #50 [ 1010.080882][ T1208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.090988][ T1208] Call Trace: [ 1010.094317][ T1208] dump_stack+0x172/0x1f0 [ 1010.098686][ T1208] should_fail.cold+0xa/0x15 [ 1010.103316][ T1208] ? fault_create_debugfs_attr+0x180/0x180 [ 1010.109151][ T1208] ? lock_downgrade+0x920/0x920 [ 1010.114039][ T1208] should_fail_alloc_page+0x50/0x60 [ 1010.119256][ T1208] __alloc_pages_nodemask+0x1a1/0x8f0 [ 1010.124651][ T1208] ? __kasan_check_read+0x11/0x20 [ 1010.129776][ T1208] ? mark_lock+0xc0/0x11e0 [ 1010.134199][ T1208] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1010.139923][ T1208] ? __kasan_check_read+0x11/0x20 [ 1010.139950][ T1208] ? fault_create_debugfs_attr+0x180/0x180 [ 1010.139976][ T1208] cache_grow_begin+0x90/0xd20 [ 1010.139994][ T1208] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1010.140011][ T1208] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1010.140029][ T1208] __kmalloc+0x6b2/0x770 [ 1010.140050][ T1208] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1010.140070][ T1208] tomoyo_realpath_from_path+0xcd/0x7b0 [ 1010.183364][ T1208] ? tomoyo_path_number_perm+0x193/0x520 [ 1010.189041][ T1208] tomoyo_path_number_perm+0x1dd/0x520 [ 1010.194522][ T1208] ? tomoyo_path_number_perm+0x193/0x520 [ 1010.200269][ T1208] ? tomoyo_execute_permission+0x4a0/0x4a0 06:03:02 executing program 5: socketpair$unix(0x1, 0x800000000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x84100, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r1, 0x0) [ 1010.206084][ T1208] ? __f_unlock_pos+0x19/0x20 [ 1010.210815][ T1208] ? __fget+0x384/0x560 [ 1010.215251][ T1208] ? ksys_dup3+0x3e0/0x3e0 [ 1010.219751][ T1208] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1010.226012][ T1208] ? fput_many+0x12c/0x1a0 [ 1010.230450][ T1208] tomoyo_file_ioctl+0x23/0x30 [ 1010.235232][ T1208] security_file_ioctl+0x77/0xc0 [ 1010.240208][ T1208] ksys_ioctl+0x57/0xd0 [ 1010.244387][ T1208] __x64_sys_ioctl+0x73/0xb0 [ 1010.249000][ T1208] do_syscall_64+0xfa/0x760 [ 1010.253519][ T1208] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1010.253533][ T1208] RIP: 0033:0x459829 [ 1010.253558][ T1208] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1010.283148][ T1208] RSP: 002b:00007f7d37a96c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1010.291756][ T1208] RAX: ffffffffffffffda RBX: 00007f7d37a96c90 RCX: 0000000000459829 [ 1010.299750][ T1208] RDX: 0000000000000000 RSI: 000000000000ab04 RDI: 0000000000000005 [ 1010.307740][ T1208] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1010.315731][ T1208] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d37a976d4 [ 1010.323721][ T1208] R13: 00000000004c303d R14: 00000000004d64f0 R15: 0000000000000006 06:03:02 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x3f000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:02 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) close(r1) 06:03:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000018c) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:03:02 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) 06:03:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:03:02 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) close(r1) 06:03:02 executing program 1 (fault-call:5 fault-nth:2): r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 06:03:02 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x40000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1010.794179][ T1243] block nbd0: shutting down sockets [ 1010.827276][ T1243] FAULT_INJECTION: forcing a failure. [ 1010.827276][ T1243] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.849174][ T1243] CPU: 1 PID: 1243 Comm: syz-executor.1 Not tainted 5.3.0-rc1-next-20190724 #50 [ 1010.858275][ T1243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.868346][ T1243] Call Trace: [ 1010.871661][ T1243] dump_stack+0x172/0x1f0 [ 1010.876038][ T1243] should_fail.cold+0xa/0x15 [ 1010.880661][ T1243] ? fault_create_debugfs_attr+0x180/0x180 [ 1010.886523][ T1243] ? ___might_sleep+0x163/0x280 [ 1010.891406][ T1243] __should_failslab+0x121/0x190 [ 1010.896372][ T1243] should_failslab+0x9/0x14 [ 1010.900896][ T1243] __kmalloc+0x2e0/0x770 [ 1010.905170][ T1243] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1010.911435][ T1243] ? d_absolute_path+0x11b/0x170 [ 1010.916396][ T1243] ? __d_path+0x140/0x140 [ 1010.920750][ T1243] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1010.926158][ T1243] tomoyo_encode2.part.0+0xf5/0x400 [ 1010.931419][ T1243] tomoyo_encode+0x2b/0x50 [ 1010.935870][ T1243] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 1010.941548][ T1243] tomoyo_path_number_perm+0x1dd/0x520 [ 1010.947033][ T1243] ? tomoyo_path_number_perm+0x193/0x520 [ 1010.952699][ T1243] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1010.959143][ T1243] ? __f_unlock_pos+0x19/0x20 [ 1010.963881][ T1243] ? __fget+0x384/0x560 [ 1010.968069][ T1243] ? ksys_dup3+0x3e0/0x3e0 [ 1010.972518][ T1243] tomoyo_file_ioctl+0x23/0x30 06:03:02 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r3, 0x0, 0xb, &(0x7f0000000100)='clear_refs\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000280)=0xe8) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001b80)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000001c80)=0xe8) r8 = getuid() stat(&(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001d80)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000001e80)=0xe8) sendmsg$netlink(r2, &(0x7f0000003600)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000003540)=[{&(0x7f00000002c0)={0x19c, 0x2f, 0x308, 0x70bd25, 0x25dfdbff, "", [@generic="c5b53495125160020793267845811598055896f5dea42cb7c035886ac90ee3e63c4c7d84979ab93112265309be7ab60395c4d710bd9c9ae0ecc156c5313f6fcf2ff189e561bbaf1a9935b20b99c1674f513eba9337ac65ad82ad377ef3f6e6d6cb63", @nested={0x30, 0x8d, [@typed={0x14, 0x7a, @ipv6=@remote}, @typed={0x8, 0x5b, @pid=r4}, @typed={0x8, 0x49, @ipv4=@multicast1}, @typed={0x8, 0x36, @uid=r5}]}, @typed={0x8, 0x91, @ipv4=@broadcast}, @generic="a11f9f244ac8261af056f46a22e5204bd43c59c814789e50262d0b5fc03a6e2d3edcc8fe0a68954cc70e6d7ecc9d8ffe41dd07b7e06c3d57c30466e63d764c2677599cbf131f3a742d9e4d0286ed03a7b2bd958f3966887cf238f687a83f746c883210e2befb18c7d72c2e7cb889c2574d33d9a73f1f19130bfbba98c793c3d817afbfc939505a56b4806246d201cc06d81c681866c503a217b529292e9720f054e61fe0cf92c2d9f2f6211e04f05fbc81d4eecb8daafba3f9d81cde429fe79666abf148f466904e81bfc4786b8f4e94732b8faaa1534fe49c791dd2b2c0954ed31b71556ea82b8e1edd6f1d3f7f52b6bb"]}, 0x19c}, {&(0x7f0000000540)={0x198, 0x21, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x8, 0x64, @fd=r1}, @generic="7394bdb8f5f2c3e4df54a3f0cb7aa0f57fdaafb6d063977de73b48b09aed1f242da4ae57a7367f90e4e960e9e2ad45af108c44c51b63ee73408926e859a35971eaa72c35eaf226b9667962fc30b84e0edae451041ecd7756bb002dc3eba5d84ba98958554e5ea68d7b85f721642e94fa184614259dcce354dc8bb05d5e48a7db8c5317650c31b25df60bf2ba634d3e93f23d7b072da163", @typed={0x8, 0x5c, @uid=r6}, @typed={0x14, 0x8b, @ipv6=@loopback}, @generic="d7a9af15aae7b671d0122df79ee5b1e522e14eb8fd674ab09cc5a8a66b1a37af24ff334522bb1f36288fd2352a4a317c60bcdd62b5", @generic="c0721dc1acad9bdfdccf98b8c97d8db4663a36f80efce08edd3be194fd4866cb465a7fa58698611dacf799cc918004ca8146eb49067e7ddf5825ce2320167f23fd413107025d864751adbf0b410692a4c463527ee6e5ba88393b66a3173f4e0d7c560af3007243ba3a3204ca89293b170f49491190e1e7cc82be514cf4d15924a5e838879a32561686fa", @nested={0xc, 0x4e, [@typed={0x8, 0x6a, @str='\x00'}]}]}, 0x198}, {&(0x7f0000000700)={0x12b0, 0x31, 0x4, 0x70bd26, 0x25dfdbfb, "", [@nested={0xc, 0x2f, [@typed={0x8, 0x26, @str=',\x00'}]}, @generic="226f270406ca2b4afd43d1de34cfba4eca4be8e5f1d0b39073df34e599fb5139187fb6c20c3718dc3e3a18ee8fb6fe39fd090bb7805c8e38d2cd5f59b427579ee3d3425fe63988420620f688ca6b398b8b30308bc6317666387d07f0ce79a20ab78b552327eb6eef22090198a2055a9764f0701cc26e6cecda70d5051f7f351f2b4ee121f6", @typed={0x8, 0xb, @fd=r0}, @nested={0x10dc, 0x83, [@generic="e8f335279a8fd5f59503c93196e9f8ffe2f37864b3bd0601e7e1f17d514a968f2fd0b2e6fb6f5aa2c0686c7b245eb62a88ef6dadcc809bff5980551d35d4f5c5e5bb495b2766277bb89c4268afca256bc7d1b1943f23cb531cc8f9653d8b0cf525533bb9697116c5a27e6b446b3c8af9f8f249dafefad8616412d3258a97e84340016dabc156daa0541df124661cafecc69cb5dd90e802b6f94f62071bbac050e1fcaa38873250931016bd1be34f6e0f7a7f8d768d83580acef0f912184eed27b01d", @typed={0x14, 0x91, @ipv6=@mcast2}, @generic="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"]}, @nested={0xc8, 0x65, [@typed={0x8, 0x65, @fd=r2}, @typed={0x8, 0x23, @ipv4=@loopback}, @generic="de899fc58842fe55630a798ab94e0686e2f0c8ecc88e50f3328d639e86e2403ce66d9c4a37dae8e4cfef84507535b340738fbdd3631771447abc100b28782ffe6c0190e156cd6fe807ef7263a37d2db95e9a9ff7271e8a5fd4d364fe0a6483c150befc7ba99edd8408bada3256a311e32833ee517c2caf0a130d065a639e31c8c21934a8dcc6ab3f22299e2c9c891c42330c05b4e3c4cac3f1071b5eef48b978b7d767b9e575ade65ebae3ec37de747a4ec7"]}, @generic="a654bfc4e220d7fd68348fe4e001b60a3193912f18f421d3919a4e1cdbbdee0c21e4230429d32a1874ed2754dc43f5b0cf9d9268e9195bb0cc75555b276810c3a8115a72911d251d5ceeb44269991226118443f64efd644f77b7d3cf0120d95cc15888"]}, 0x12b0}, {&(0x7f00000019c0)={0x1ac, 0x26, 0x400, 0x70bd26, 0x25dfdbfe, "", [@nested={0x10c, 0x12, [@typed={0x18, 0x3, @binary="b31871ac2939994fc189cf14ea0cadb608859e"}, @typed={0x8, 0x73, @ipv4=@rand_addr=0x79}, @generic="98ada5552ea45ac73c58401391d9f3ead121118546a7ced6d8146a6b097340e715b1655077ef2bae628540b476e02f83a12fd2fbba32c4e515bd2f023ed3123924dfe4098021b6044a52f030ab53a0e227acad68c4ff84d07ef4633e35eff941e937a8dbf29e5dd89076ef5a472ad58b9d4808b1a15d068e924769d404cf54c7ee2a38b4870cc0e5c718aba8a17836518ca0e2fcaac7c39e1d196a22b42138634b094b4dcd9f8c02b9036d7b20b74644265a15a90785d982169f58954a3b3750f54455d0763655b740c35aa4b2ed6e2b85f1f1bb784a6a31", @typed={0x10, 0x70, @str='clear_refs\x00'}]}, @generic="6847797c847ec8db1823ef871111124070b82f923eecfbc50f56f78b42bbc59e69596e41fc291e2a084535f8dc2f178929b6c1a9b6484519667a8ef4749cb7ec4992e92092e33971ade8a592bb1ee6d7329dd5e8e332a4998e1e4027fa1a449298b879bb3a66c29562f7215b8da75ea6bfbe258547d4bc36c91615fe2a94730998dd854fc6dc66b8bc5a1edf84a19ede"]}, 0x1ac}, {&(0x7f0000001ec0)={0x1660, 0x28, 0x300, 0x70bd27, 0x25dfdbfc, "", [@nested={0x1c4, 0x82, [@typed={0x8, 0x24, @uid=r7}, @typed={0xe8, 0x4c, @binary="4822caeca9ddace9c9710937628c2c3839059f14c9bea15a1e0a702843c953ee01b46489a5ddc28619e233156de7908691346a093986b745ddcbfb369bab1a44c9e3d2699bfe4f16aed863733b9b77c3f452fb27e00e25885e7608ead53847d1db942c533631aba6c45b39163b8a3b8c84b933f35100fdaa5bcdbc1dd3c16e7174a7a62b948e3a2373dd225f0ac92c976d9ca550119d3b2ec09929899a2e109c7789320225e318ff391720c7a707ea279a45d16349e2ac47f158391d4dcd6dc06f5774cd4c400542e4186b13e70e386a9eb71e3a5136b5c6b0e42d2ff66ceb835f643f"}, @generic="718fdcb03527f81a31c578f54527ce067ce47c2557842b9a54ec28b2f4dc39c1310a086c6be147a3ab2895ea7fd17b3b2415bdce405efe51b665ecc011", @generic="d74c03c083a679d06936eaac7c2828c2f62da9cd036c79b8f1dbd35fd4f60bf28a25c0fe83427bc20530edd169abecb19da7abf9149bc431e0cc936a8951de21d27f2c116476155b29388d54df97849f25707deb14df3d270949e509aec35c9979792fda959835f6b1f68386bae79b4dbdcd615fd9e86e61c1b7d9296143ba6b0c7c2be9b75491df640978a6a1bb2bdca5"]}, @nested={0x12d8, 0x38, [@typed={0x8, 0x79, @u32=0xffffffff80000001}, @generic="ea15ed2516bd04a1054f6064b9fcb1d20ab0700017a6c392ed8d461107c2e6a0f762f7d7b06d6cf10e2f2ff00d694fbfac8bcbaa588c0f4086b93471ca51d25c3af1d395ecd0d9eade46a8140b55a0c911eaca6edb8b88699ea79a8316f5047f983cdc2f8ad6762b92e09b7c8dab04b0a9ffe69534b7b489be05b13252c005b1269faf66ccba88a59ba64e52b8bd1289989a6719b5307727f16919d2337e520f7f7bf08a9d39a83f69492bedf1dd847447263f52b10181c6cdae9b7e4f12e74914de57452b103144503b7bda55f055e5ea646ca6c5d31584e625b50ad5504252dff36bf333d48c8cd9b03f9ea5fad7edd782691def9898c469ae1b98cf2a4ebea986289a97f2646d3aa8e7a823b9d3da3a0d89cb4876c8cdce9dbdfc0a0a0d4e0e38710929a040f1a38a04d04309e8cab9f79c0ef7781574db36ca75c270b3326cf37d24e476dadcae46298be6979e13627cd5ec00ffb8e82349e55f3345a7d67ed79bae9b0b82f5552107ffc3f72d41f128198d64b2cf905c575891c2b57a0a2c8d7b0cecb8e24eddab2e64262efac7e330a71cd1ae012c50c43b38d189384eadae583559132fc8de5656dae39477e4e6cb7eb00e43b278a99f34d76a1a05466b74cf0d561d7a3ab8a881fa53461ddad4399f56c86d8bf34a80294c4301dd0783921065bb60974664b3b92094262e63245f207c58aaeae8b5123d937d3c7f761247ff5431ced5bfcdb39325479387e73823b6022f2f285b1e302b6e630a542097086fe9a531e4298e8676e65e4dc4785b8b635bc17d322055ad03ab71ff35c46f7aac1e6a31a6370bbad30272801d8ffe39ce52b59041104faec3b7c93297882950a2ecaa05a1be3783ae9f5be417b187efd8b2545e9e70829c320ec2a99725a4e8ffc9fbd1a3ddc08c4866fa11752696f837d498fbf86808111df8b6f98b34b9b7c594ecaa98e072f9d9468e71534a38771c34c1e17dcd6f79d96dcfe7131021c3fa0987846f4458441cc2836ecbae46520903c40aa6394069dbd3bb59f84479839f6b105112269a98d2e109568b76a1ebabc595328789b07e85ec9fe736aede15eabdb500ea5331e0002f7102b1c69c529ab156b395a26e6832e3372fdd9bc68f69e112607378979a0a815eb8f03f8403af34bcbab5cb4f44914b37a0a0a46cc67e972f4e090cd1954ba8a648ec0d46d8989cb602f50fe62652a32dc03fc61626d465441afd7bb83657e6709c0dd196b21bea6272d3705bf580b8a9693326eaf8f90253955041fa876d7618aa73501c40f6f74210467e148b020ad6ad44e21a131c1c4b72d8a7af319d0390540cedb18ea4c693a592bb2a58580c8b3648d122d425b83f44d6d3ee76799d64fd2904393a505fbb5615cc9cb1d5de78fe79f73bc25ff5bba65984e46ece0102b521db74219f7119117d63ead5d1a46b42a53824fa2104d8c5fa66df0659698017cb1d795dc6f801687993f366b86a4a76491d3a6c5ff0ced0ed4d4bef6385295509b1d565e5324e9d54bdf9c0e64e833cbf74d194696a9454001a7e086525726504c5048c42d7421a36bf1f0f29c9e525bfff54462dc96a8cc2c2c3794c9a36b4a877eacc2903956c761cace3a5baf0c5bda5da059bc01c479c61f7d1dcdf066de28eb14d54ba7f86b6a6eefd33de754e6fe3cbc95f6128e8485139e78d748bf33c421ce965d2ac8d83275572e8673627dc363d537b4ecb3563ca3fd8f7b4f1a3e7d0c1fa867a17ddb4596f21853b46fc23ceed39044c315f34d659e517d0f0ed2410f07397f7f1b40f6196016784fb8deada9239b58c1cb2f2f05cc31c6016be8cddaf402ee2e656926adfb97429519428ece074664d7d70add2d80f283bd91525906f436f23fa75092eb726c31edf2199833575d1f68461c4ee56cca2f0a40eb2615f7d5afe9c1cddb09904f5040da814e2daee4af8d82c6d679f1f3f9acc97eb5c51eef7837cff2e302bf55c84c913506f0753ad3b6408e50eb6b7640473e10442a98939587bd112eba6881d1380a7114f5430e584088993873c3aa6d927615bb5bb636516641df82e788b8bba35caba5269f04eaaeda9083c5ead58590343f972e8593edec09fa5bec0bf91a01e25cad1c9bafcda0f671fafe1dd979ee5ba4d400fe430465d77de49615bf0ee7d34d03f230c8fe36aca5bbe923405f7d8087b9b6837004932af6e1c49b5d0a8965f90afb2d5f96d26bd2981e15856d8267b99622631d422a4923d4a84adeea03a520d6153ce392bca54faee9d8528c5d400fd0ea5d4e6ea0701c5afc428700d334946d65b808233c39782bdb7f26d761cd8c68d3fa0e74b6051c061cd588a891115b426c9b0dfc6546a4c79208e7b86d9d2c425d4ec86fcd9b9c6dece9d05e8403255d6d712f3cead7bec91f30cae8f79846c16dc9707279e3e49b29665038cffe761b0fce92dd0a227e0bba8c426c16fde42a51f92f4e41663c6b5200367491ec1e8d378841a5a255c019c909c9f980e00b47b1f1d747c61c50e0dac15bc0ced559d18096e46592fa5c91731efcf7be2ba77ec2889de3c70eef2b1317b9b3b1fb53eb9efe485cc7f957aadf4406ac24c7e2f51a93850104bdb1799a267949dd54a49879b2b7d0581d868962f9b7ddf8e5e63fdd4eac62be0d9b590ef04092353beda90475b61039df9f22273e18887ccc027f6178a636889560162762b1bbe0a44c5a702a5ee64bc0e239871f694639f37a6236a39d4da3c5e9903a0e4ad5ba77356f99aa6e30a5e9da81caa708daaf6f294b453311090ea8b2c8595e810bb388d664704268fdf540ca6e9d1d600cf23eb44b29ff46caacfd1580cb10448efd5bf4d49f8ccce58ecfb727c6c8507da2b2303915db1dd952c3848a725aeaf1f3f205009ac05a17c06f44d4a4753efe36e490a597c6f84aa7627d441a3bcaa04469d0de1dc7733cbe6792a515e89d49f7f182827122dc2466b25543a6d86e188e71650f80ba6135f786a8af97639057a58228a586bcc71da7d6021caf1208afb145e9e860a64ce31f53c9848c4f4fce22bce5943c748a494b20b163bd843891fe65d6fd9cc10f88a26b3d7e2bbcd044239a4a6ecd8d6c892f6fa59a7455f97ceb6ac98f9f2a3649e2e364c3689c8a9815ba581fbce8191ea0c234d6c441b7ec0f43cc9f035d564d4276d48e477025e2d93ff1ba6e8eb72f031146d74415b6012e5d7110d637fbac1141c4b789a2d8b22c299e522367ec8a712b3da4019726d480d80f9dba4507f8a1118c93bb3d33e28a3ac362ca0b32c3fbb4fa6e4af4bdfeecbd0fa0742a93f27d157e37c06c97d19e288422c73d05b4a2fac2e4a54c6d3f36068eca0ab2d88e8a36cc2e4d60c1eef899b926f15802274258678370e3246f3cff63b93c7b125a180467852b9c19b6cb58c4ac610e9a03e1fe8eec9c45f301b976a8849274c1423292db90b7c4205d69e16ae18121c2043653e4c7a494f6ad98c832b421756dc4a6b5f908943c33f252d19aa6ce4b8cf4578e4c73c3a93ecfd3f3535c95630842ee4fe46c04ecda24b801c33e17a983eee2a28cfbe0f92c1697159a61d4cd6502fff55acde6ad5bfff498bfb7b463759f71fad20eb5c47883296189380c819892745bad084b1a71c633ba1354d0cb4e16a153e9d5e24c48e76b609f33b523093814b613877bab01a03da0f829afbaf530ff8296395814fb952d930d23bf841294846a2289bcf5ca0fe1664fa495188c3b420eb13e792862b5d0fd9a43e75b7fc296873d0bf8afe16b53cda4fb7034c5c9cc855881b0e63c6e20ac36d263e44b586b74a394d5398ffaf34bf919b76ea937f497d6727915dcaedecee0ebabe267c98adef37c3b44fc9c2fc16db970f893159aa8c2982a9cebf5383cba0b4d1b2eac482112d8b31377518cc9979fc11fbc4373afb3a1e04d7ed89a8eff6fff1732265a1020a8a8b14d5fb0d18457ef41469472958fdf23e01a475ace185ed1fabd6882d6ce4a9b406c9e4d7181462015904954a9227159f3067119f05926a22718908d75d22156183f12275d1b0db26c521c595b9d57ad31ac2ffdbeb1de519b670682c43a2fec30c727becbe5209bac1e93bfb20e3420d3ca5ad7f103f9e9ad113d4cce927c7bbd0afcf09460544f2a2f6b7780e57800a6aece28537e1916142732df4acd28ee58c7da96b4cefe1f7998ee532e6958e13278b5f17205f3cc8ffd237eb0b623d34af4d54887e5e243ae19aa11f262746f6fa4298b837aaa348342ab19f22dfe344443b75e0ce92b19d71f10aad70daf1eb61520d8254e2a149251fee64f406b6600aad8b9f5708091b12b688a3ee7c54d9f6ed617e395a5cd4d05ed4a6bae240b57d26d18f564e69a6eef04e6cf4a91e3ca00309190de16a938688e993905375e2427be82dd3e60d02615fb330a71c32a822ec637b1beefcb277f4201a41973f4f921a0c8ad666631d72ae90164c2eff464b3f0894803f1b2343e82ef6cca494e92aa0e04fb45d4c537b3b29126a474c8c494765d8fd81587586234219b1861130256ec6f208d1dd40b5526b57584254de9edf57d93d87e82220e2d4875b8165ebb426a2c41269b1c58bb3f222fff2f5c3600d5d2d2cbdd3dc370b0314efe5b1440cb07f7208efadefa4d1f306273eee460a2745384df5d1f553f8a955e6be2e8aea1186cc13ef598bdca5686ccb1b97142bf79a79ae12c72f98ab6478dbb130a3a3b9e9775ad069e606290861d03c8b0f75d1aa9d300b1f1c91b373609a80da55b2b8cfa29309f36657bdc2e4ceae574dd0cb24d824d2d88025c601b63b32a8467d1dfa7cc19ae3101bbe1e791833d541f308c6ed10c4860ef3fbdbfcfaf6e2050f2f1720a8e2407527d833c11de143c5513b40e5e21e80bedc831386357fa8cf7e6cbd3688d9a81d964bb8fbee2b592cf32449b20feeea94b11d7eaef95605605019cc162c4642aa0c5cdef46a9e8ea29062a5b203b00382d96080dc4ac7adc5722f17a33371af75d2ef83126c6ff01c31ee36b6549950f063d2c6a0d9b6237ac4b49291272eec6a84382b8fea74d256154a29a72c4fb8585e139073ce094f47617f8019d7d34ca9ca39ca8a9f21a72be53b722122fd189e10b7c92b40b381d04aeab17930e1a9900d9b60e43b8b6b3ca8bf3a2485345218854622b6ea850e62fa5b6b7be12deeeb36ad6aef338f0c9f34de9c33d71d6fb36ff065d85b59e95368c5981c3b796b74ff4267d0a619328309184924021375c6fd116cc41493c485403a6913ccef20e11e90b4bba36727cbbce2e8d925848b1f12b666f9932e7aec46ffaf2019730b5d424134cbddf99d51a059ae4c55486985923a52aa99ff88b94271b2590f50037fbe0273ea239653f70dd80714248be63698150834987ea0158af8e03e8731da0542ce2a1ee22d95c15a1b8ecf190f510d4c58bf86114f5f867cb80e3b10de15440c50369066c3cdaf55beacacd6abaf84b4cd4eba705065b4dc65ad7a10cfedbd7004bef1692efa8bf78f22fe6e01d6fc89b7f046a26915564e2f8b4d13dfbf2fbeedb2eed282993a5995d5198da85c87969b2545a16333af581e56f603410475dd77513515e6685e251262c8285b96fc2773a20150806fe43bd9bbdc2df579cd84c0f53a726ce0945165128ee6a46f46a81f46efed4cada5e9b65ea9730895a7dd302f7e2d696f6ef50cedbfe49f82ff581d3e2ec1c0fead80b87a562f95bd915ec6fc708bdcc4daf582579477900ee002d289a86acc66d264ca0e90edcca97c825011f760f2aa943ad4aaf02c72c5", @generic="7d2375e78ee5db2631ba165bb95d692a4d2925a0f1f0e9216a12ec1461eea48c2d815714893fde6c61e01e8620827338e0bb2a616d97a3121c011460c0509036a497a88da9be4089214a2d5b6b5b34b446dbbb74bf2ba078d6b89dcb381d434e6180f722cafab9d9aeadedda5126c16126c466488f19eaca3f79f41ce0142da6a391e896b6b249d68c92a9d1eba3988757dd8dbcbd17a376fd4110800efe14a776e0bf81cedbf0bce0f3bbd58fa6f3120f797ff9ebe28485e936c7e3bc04974208", @typed={0x8, 0x4f, @uid=r8}, @generic="48f44308c5cadc7c6aa55cbaa2ca8a1003506205145e95238398712c70b68d2c10929722b44ca4341579ebbb33e94aa425dbdff193eaf4c46338d007cd578c5b1d12382e3f8972870380e14c97bcd5e628ad5934619b7a7a62ef931ff118765117ab0b9617e681866b05bdb8977c6d7939ca77f88f8451a333ef66031fba5586c43d4f03dace593a5a7e68b8b3f43a582b1bfb3ce3afb3e796b310446e7adfc744c4d11fb9668685589d5e06f40f1c9615ccfd6c7e98454f49e2d95019eb980dc0e222ae426bd5fa9380ce755b89cef947a2130c462fc41121d0b0ccecc695496359bb28", @typed={0x4, 0x95}, @typed={0x18, 0x20, @str='.wlan0-wlan1\xe4wlan0\x00'}, @typed={0x4, 0x72}, @typed={0x8, 0x7d, @uid=r9}, @generic="173dab21c9eb6367770d954ad4fe80aad963e53828250b864e1c1bbfb9e6b9e0a11dc0123f13942c61c3ed874eb6b930f20a71cf96f27ac1e11d7d7e6f6126776e5214823f09a873cd6be45eb1cc3a747e16f97b8ac59ddeca6e52222a290c896f9614dbd1e3011e60f81d0be55d4ec1a0fbf7a2b4d19bfb36dbcd04b08b1a46a40c791fd23ed4cb46f78364a07e9a9a59b009336a87bd83409a69a0623763b50255ffdb0329a264896e07ceb3841de862dd59eef41b4d478c6b2d5375011f73c349ee3f1d8868ddbff96dcb940e3f54710957e085401f7a60b428f2bfb87729ff237073e5c34cc24ffb23cf7cf6dec3b88b80e286"]}, @nested={0x1b4, 0x4e, [@generic="a8515899d22d5b30267464a0bb06c249bcfbf9afb80cf4ee3f8fca", @typed={0x8, 0x86, @uid=r10}, @generic="f29bad4cddb38b7c9d404d80a7d173b5a032bb055b8de83ed0b528534d99a84bd6f29cc1fed7", @generic, @generic="f8fbdda68162b49b938cf07761738eb8e7460d52516d80d8c924908f1793cd48ec13e2e6641c970ca1b2aac932b74fab4d04116f7bf324d03ece48160c5224dc44487de96c7b30909e0f81bdb88ff764fa", @typed={0x24, 0x2a, @str='cpusetkeyring]GPLem0vboxnet1\x00'}, @generic="8cf6d94a2c538f9d53e3a8f971d82d3b42d6d7342b8e71bd7ff1e5ce6f91460af20e2f16acbaefe4883c4dce4d1d3adc1d3b73319b46b9b7c0ad7edbeb850c0ed91da7a09682b0c08853932ca28412607f05ad5815b77a2eb377b35c5eab5255861adf05072bcea82eb95bf54d0e9b211597da5cc39ac8a5a76996eaf7f4fb208fab367946b11d98380908bc1990cb5b2ef220d473469a62bdef0f2654689f14179d5f681b953db04c02b67407ba1aaa3394a10727b0cbd49660260a0e8e290a916056c6420f7bf3c62c093b60c378b9e97020482e984e55c7c4a0d1ef02a7b29ba0149687b90034245c8f9c9015c4f3acb1"]}]}, 0x1660}], 0x5, &(0x7f00000035c0), 0x0, 0x4000}, 0x4) dup3(r0, r3, 0x0) userfaultfd(0x0) [ 1010.977304][ T1243] security_file_ioctl+0x77/0xc0 [ 1010.982273][ T1243] ksys_ioctl+0x57/0xd0 [ 1010.982290][ T1243] __x64_sys_ioctl+0x73/0xb0 [ 1010.982310][ T1243] do_syscall_64+0xfa/0x760 [ 1010.982351][ T1243] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1010.982363][ T1243] RIP: 0033:0x459829 [ 1010.982378][ T1243] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:03:02 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 06:03:02 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x60000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:02 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:03:02 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) [ 1010.982386][ T1243] RSP: 002b:00007f7d37ab7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1010.982401][ T1243] RAX: ffffffffffffffda RBX: 00007f7d37ab7c90 RCX: 0000000000459829 [ 1010.982409][ T1243] RDX: 0000000000000000 RSI: 000000000000ab04 RDI: 0000000000000005 [ 1010.982417][ T1243] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1010.982434][ T1243] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d37ab86d4 [ 1011.001572][ T1243] R13: 00000000004c303d R14: 00000000004d64f0 R15: 0000000000000006 06:03:03 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 1011.212904][ T1243] ERROR: Out of memory at tomoyo_realpath_from_path. 06:03:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000018d) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:03:05 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 06:03:05 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x65580000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:05 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xfffffffffffffffd) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)=0x0) ptrace$setregs(0xf, r3, 0x1, &(0x7f0000000100)="aaa50971b075510e0a03a6ffcb0644c844057ca4b2b6e0ebf4b91869d9d44c1de4c78972c565cf3eb69e9e275c76a821fa4d785597d5e3cae35a291040e4e7c6d21a6dd56d4aa8de4319fd413cc445281a6f8430673d3b8f6e1892e8c214b008d05a269c7081fc1d2ac4da2469f93a4437e1743b23e42c51e0832ac7b7c012aceaccd026304f530464565134a0738ab5609dc031") dup3(r0, r2, 0x0) 06:03:05 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:03:05 executing program 1 (fault-call:5 fault-nth:3): r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) [ 1013.837296][ T1276] block nbd0: shutting down sockets 06:03:05 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x81000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:05 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:05 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:05 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 06:03:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x11) 06:03:06 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 1014.136047][ T1304] block nbd0: shutting down sockets 06:03:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000018e) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:03:06 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x88a8ffff, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:06 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f00000000c0)={{0x1cf, 0x8, 0x8001, 0x9d, 0x359, 0x7f, 0x223, 0x9}, "eede096f88489dc0624bac7958279d60a6f0f440fc369084f6cc08ee2cec5ca86b4490d3af6c9676de8d0121a3f056e1070991629604c77c1d27495136f38d2cd1fec0eb50f66c25156499c3684f60d3f48538774c", [[], [], [], []]}, 0x475) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) 06:03:06 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:06 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x2) 06:03:06 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:06 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x9effffff, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1014.871671][ T1329] block nbd0: shutting down sockets [ 1014.900088][ T1333] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:03:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) 06:03:06 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x4) 06:03:06 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:06 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000003c0)={'ip_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:07 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xf0ffffff, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1015.160130][ T1352] block nbd0: shutting down sockets [ 1015.215807][ T1357] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:03:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000018f) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:03:09 executing program 5: r0 = getpid() getpriority(0x3, r0) socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r1, r3, 0x0) 06:03:09 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xffffa888, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:03:09 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:09 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x7) 06:03:09 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1e82a0000000000, 0x400002) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r4, 0x0) [ 1018.024264][ T1378] block nbd0: shutting down sockets [ 1018.044145][ T1379] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:03:10 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xfffff000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:03:10 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:10 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x10) 06:03:10 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vfio/vfio\x00', 0x100, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000300)={0xa9, ""/169}) socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="6a156e13117c01365e0f716ff7734ac3388bea5c4dcb0795207950d02da6ad2aa91eeb25ce3bf0963a31c192aed3a6b6ae2fcfebf01940c540fd0ad66f3ed18507b9918592669f23a43eac1e5b9fdaada0eee3c6dffa21abc7ac61065659189c653c03928261ef8e57b3983fe2b1e9b4a5695f46f961817e8bf2c22539c3c4ef15ea05980429e99fdb1313942924f5f355221f7d6aa4cba1c83bd5d1f52bd22d", 0xa0, 0x0) r4 = add_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="525d4529a622a57250459cb26f3ff3f65aaa230b83c33bf3b69737594ae69cf014682923105e7eaf3f073f515232c3ee31e5b74145ea7815a5cf434440c47bb425c679a9b2723905f5388eda006891169a3e3166f45d08a40d9040713d942cc81a36cb05b084a9f737c2", 0x6a, 0xffffffffffffffff) keyctl$reject(0x13, r3, 0xffffffffe22be850, 0xffffffffffffff00, r4) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r1, r5, 0x0) [ 1018.367383][ T1407] block nbd0: shutting down sockets 06:03:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:03:12 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000190) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:03:12 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:03:12 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x301) 06:03:12 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1000400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) capset(&(0x7f0000000140)={0x20071026, r3}, &(0x7f0000000180)={0x0, 0xffff, 0x1, 0x1, 0x4, 0x8}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200), &(0x7f0000000240)=0x4) r4 = dup3(r0, r2, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x3, 0x3, 0x1, r4}) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000000c0)={0xd, 0x5, {0x0, 0x7ff, 0x5, {0xe01}, {0x5, 0x5}, @ramp={0x4, 0x3, {0x5, 0x6, 0x3, 0x4000000000000000}}}, {0x57, 0xfe, 0x102, {0x6, 0xc796}, {0x9, 0x18}, @rumble={0x4, 0x4}}}) [ 1021.141423][ T1427] capability: warning: `syz-executor.5' uses deprecated v2 capabilities in a way that may be insecure [ 1021.182852][ T1430] block nbd0: shutting down sockets 06:03:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:03:13 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xffffff9e, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:13 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:03:13 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000100)={0x8, 0x100000001}) socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x779, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r1, r3, 0x0) 06:03:13 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x125d) 06:03:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:03:13 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xfffffff0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:13 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 1021.586944][ T1454] block nbd0: shutting down sockets [ 1021.643506][ T1463] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:03:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000191) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:03:13 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r3, 0x14, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x24, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40044) dup3(r0, r2, 0x0) 06:03:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:03:13 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x40030000000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:13 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x125e) 06:03:13 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 1022.092037][ T1480] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 1022.108670][ T1481] block nbd0: shutting down sockets 06:03:14 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xf0ffffffffffff, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:14 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) getsockopt$inet6_dccp_int(r3, 0x21, 0x10, &(0x7f0000000040), &(0x7f00000000c0)=0x4) dup3(r1, r3, 0x0) 06:03:14 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:14 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x125f) 06:03:14 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x100000000000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1022.519820][ T1509] block nbd0: shutting down sockets 06:03:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000192) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:03:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:14 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000040)=0x6, 0x4) dup3(r0, r0, 0x0) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f00000000c0)) 06:03:14 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:14 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x1260) 06:03:14 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x200000000000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1022.974750][ T1530] block nbd0: shutting down sockets 06:03:14 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x3c, 0x1, 0x4, 0x1000, {0x77359400}, {0x1, 0x1, 0x1, 0x8, 0xfff, 0xd11, "e8671206"}, 0x9, 0x3, @planes=&(0x7f0000000040)={0x40, 0x8, @fd, 0x8}, 0x4}) dup3(r0, r2, 0x0) 06:03:14 executing program 2: socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:03:14 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x300000000000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:15 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x1261) 06:03:15 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) dup2(r0, r0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fe) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x18080) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) [ 1023.314711][ T1559] block nbd0: shutting down sockets 06:03:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000193) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:03:15 executing program 2: socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:03:15 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x400000000000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:15 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x1262) 06:03:15 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x101000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fe) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f00000000c0)={0xffff, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) dup3(r0, r2, 0x0) [ 1023.940515][ T1578] block nbd0: shutting down sockets 06:03:15 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x600000000000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:15 executing program 2: socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:03:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read(r0, &(0x7f0000000140)=""/139, 0x8b) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f00000000c0)={0x100000001, "38d2794e1f2790c312449e449f9e63e56911041ac61dac3c3ee56ab735667690", 0x3, 0x10, 0x32, 0x5, 0x3, 0x4, 0x9, 0x5}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000040)=0xb142) dup3(r0, r2, 0x0) 06:03:16 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x1263) 06:03:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 1024.363122][ T1611] block nbd0: shutting down sockets 06:03:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000194) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:03:18 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xa00000000000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:18 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:03:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:18 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x1264) 06:03:18 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f0000000100)={0x0, 0x4, 0x8001, [], &(0x7f00000000c0)=0x9}) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r3, 0x0) [ 1027.053076][ T1628] block nbd0: shutting down sockets 06:03:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:19 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x640, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000440)={0x1, 0x1, 0x155, 'queue1\x00', 0x3}) socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x50, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='gre0\x00', 0x1, 0x80, 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x100, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @default, @bpq0='bpq0\x00', 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) r4 = dup3(r1, r3, 0x5) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000240)=0x200) unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x24000040}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00032abd7000fedbdf0000000c000200ee22ea6c7eb7bb040000000000000c000800060045416e68d8fb15a4f23b7124c849811a497fe59b0953cce551b0688a10d3242441ea3b0a66c900508d972431b928748fb1ce"], 0x2c}, 0x1, 0x0, 0x0, 0x20000841}, 0x81) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000200)={0x1000, 0xfc, 0x1000, 0x0, 0x0, 0x80}) name_to_handle_at(r2, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x45, 0x8, "4973f3494bd60245fc3c17d3d14ccd1219fc4d3a5dc5ce66b7c0990f97e408cab807d691e1ef8b826cdf77be38f2f47ddefd714c7429b41886200804e4"}, &(0x7f00000005c0), 0x400) 06:03:19 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xc00000000000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:19 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:03:19 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x1265) 06:03:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 1027.414827][ T1658] block nbd0: shutting down sockets 06:03:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000195) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:03:19 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xe00000000000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:19 executing program 5: socketpair$unix(0x1, 0xa, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) 06:03:19 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:03:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:19 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x1267) 06:03:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:19 executing program 5: socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) [ 1028.046847][ T1673] block nbd0: shutting down sockets 06:03:19 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:19 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xf00000000000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:20 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x1268) 06:03:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 1028.321562][ T1698] block nbd0: shutting down sockets 06:03:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000196) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:03:20 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x1000000000000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:20 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x4, 0x301300) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001200)='/dev/vfio/vfio\x00', 0xffffffffdffffff9, 0x0) r2 = socket(0xb, 0x0, 0xffff) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x7, 0x8}, &(0x7f00000011c0)=0x8) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000001300)='./file0\x00', 0x7f, 0x6, &(0x7f00000035c0)=[{&(0x7f0000001340)="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", 0x1000, 0xb5}, {&(0x7f0000002340)="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", 0x1000, 0x1}, {&(0x7f0000003340)="65e94e9c233565a697aecf911d7031e9caf69b20cf276602ec81f7338b1c87b0a8c100e6189fe784997b7cfd0f3edd89b5076153b6e1f1fbe428c42cf62d7cccfd3b5b95460d12d9908e4f70bdb187bd0d5a052dab36b372a45d8d48cecb1ce7563d11ec063efc797defdc9e6161a2a80e8a4b90b2e53112b6cc698b49e9675bc960d56f0265bcdab0f8da841c739a6252fc4ee7ffb15664e80efd884988f7e42e3838388c01bb7c32e2352ab2eb09cd2196", 0xb2, 0x687}, {&(0x7f0000003400)="db9d335d5358299bb8b5b84541d5a7da0ea540d9a98b1af18f561a45346aaf81683251ddf834a6b1e0fd527b7bd4115fa3ecfae4604c6062e80188a774daa631381c63c2e1cf416c5e476f9e8af63579e583b6e0045f4c6f1b2dad8986b46783868a359140f2ad4bdc0d1db76a74c5df3210e61d7734d1c6740d02a23169463cbfff4c6683a6a81cacdda45d81eaf2f647f06794063b7b70cdaca24d", 0x9c, 0x101}, {&(0x7f00000034c0)="516dd44e2a", 0x5, 0x8}, {&(0x7f0000003500)="badc654984f78ed2644b320e12e2f5b769aed34c7847e72191394dc6329ffcbe595784cab5a9280afedcbae86dabe25f715239eaf802d9e357e5b0b770e5c488091cb3c52843eb295b9d1d6a52a5406b2b344aceb3a849d31c75bb26529807d05c3ac363a7f7e7308be379f988dc41eead6a202e3f49ff99766e3007080cd8159c15d99a6563a012609c9be48f911cb67ad061", 0x93, 0x1}], 0x100000, &(0x7f0000003680)={[{@subvolid={'subvolid', 0x3d, 0x3}}], [{@measure='measure'}, {@pcr={'pcr', 0x3d, 0x12}}, {@seclabel='seclabel'}]}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000001240)={r3, 0x6}, &(0x7f0000001280)=0x8) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f00000012c0), 0x0) quotactl(0xfb8, &(0x7f0000000040)='./file0\x00', r4, &(0x7f00000001c0)="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") dup3(0xffffffffffffffff, r1, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x8) 06:03:20 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:20 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x1269) 06:03:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, 0x0, 0x0) close(r1) [ 1028.910962][ T1715] block nbd0: shutting down sockets 06:03:20 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x3d0b000000000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:20 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:20 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0xfffffffffffffffd, 0x0) dup3(r0, r2, 0xfffffffffffffffe) 06:03:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, 0x0, 0x0) close(r1) 06:03:21 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x1274) 06:03:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, 0x0, 0x0) close(r1) [ 1029.392596][ T1749] block nbd0: shutting down sockets 06:03:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000197) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:03:21 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x3f00000000000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:21 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:21 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x10000000000008, 0x400001) ioctl$KIOCSOUND(r1, 0x4b2f, 0x6) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r2, r1, 0x0) 06:03:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r1) 06:03:21 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x1276) 06:03:21 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x4000000000000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1029.867462][ T1765] block nbd0: shutting down sockets 06:03:21 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:21 executing program 5: socketpair$unix(0x1, 0x800000080000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)=0x1, 0x4) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x6, @ipv4={[], [], @multicast2}, 0x2}}, [0x9, 0x2, 0x6, 0x100000001, 0x0, 0x3, 0x1, 0x2, 0x0, 0xffffffffffffff97, 0x6, 0x3, 0x8, 0x5, 0x6]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r2, 0x4, 0x20}, 0xc) dup3(r0, r1, 0x0) 06:03:21 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x1277) 06:03:21 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x6000000000000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:22 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 1030.245981][ T1805] block nbd0: shutting down sockets 06:03:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000198) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:03:24 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x4, 0x8c, [], 0x0, &(0x7f0000000040), &(0x7f00000000c0)=""/140}, &(0x7f0000000200)=0x78) r3 = dup3(r0, r2, 0x0) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000040)) 06:03:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x6558000000000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:24 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r1) 06:03:31 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x1278) 06:03:31 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x8100000000000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:31 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:31 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000000c0)={0x3ff, 0x3a, "a8da78e6114c6e6c0a3af7e965e7af7458e32dee3ca87050e120bb1c0165ec6952f55e278b9d3c48bb82b9cd6221f929a74e001db66b6a07c2f9"}) r2 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x100000001, 0x200080) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000240)={{0x0, 0x0, 0x8, 0x3, 0x800}, 0x67d9, 0xffffffffffffffff}) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x8, {{0xa, 0x4e23, 0x7f986d0f, @local, 0x31}}}, 0x88) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) r5 = dup3(r0, r4, 0x0) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000000040)=[0x3, 0xfa2]) 06:03:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x1000000000000199) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:03:31 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 1040.088660][ T1842] block nbd0: shutting down sockets 06:03:32 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000040)=0x10000) 06:03:32 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x88a8ffff00000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:32 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x1279) 06:03:32 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 1040.342980][ T1863] block nbd0: shutting down sockets 06:03:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) r3 = dup3(r0, r2, 0xbffffffffffffffe) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000040)={0xfffffffffffffff9, 0x20, 0x0, 0x1, 0x1}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x10000, 0x4) 06:03:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r1) 06:03:42 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x9effffff00000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:42 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:42 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x127a) 06:03:42 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fstatfs(r0, &(0x7f00000000c0)=""/226) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1d7, 0x8880) ioctl$VT_ACTIVATE(r2, 0x5606, 0x1) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x8000, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r2, r3, 0x80000) 06:03:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000019a) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:03:42 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:03:42 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xf0ffffff00000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:42 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x30040, 0x0) r1 = accept4$x25(r0, 0x0, &(0x7f0000000040), 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) r5 = accept4$alg(r3, 0x0, 0x0, 0x80000) r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) r7 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x6, 0x8001) ioctl$KVM_NMI(r0, 0xae9a) r8 = socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f0000000140)=[{r5, 0x4000}, {r2, 0x2}, {r3, 0x8000}, {r4, 0x300}, {r6, 0x2400}, {r7, 0x10}, {r8}], 0x7, 0xda) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L-', 0x5}, 0x28, 0x2) socketpair$unix(0x1, 0x800000000000025, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x1, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xfffffffffffffdfa) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="d9000000a6417577d95ae58d2c383a1947a6a18c82566c35f9b5922f3c127b7036de6ea5f40e97907c66498410c50194bb54a607b3a43b986b76a8f3872631e0e33320b6fa0f4b95160be9b54c72c7c73af8fe02d332c317fcc860ce497dcf96235f7a48d9c6d23166c848367a18f34fa2dd7f7d5d2c2dc31b1cb3c20000eb64feb75289deb7af18b4f851eba9192901080000d7f5770bd44d5411e3fefd48b1adca27a90d5a006a8d8af0a51dd2bd7acc0b0adc7b8d7c12ba08ff1f2c024a58abb0173d1920c2940d703063bdef8a9176b8e7e525014f387b67258c56"], &(0x7f0000000380)=0xe1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000003c0)={r10, 0x6, 0x7fff}, &(0x7f0000000400)=0x8) r11 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r9, r11, 0x0) [ 1050.367536][ T1888] block nbd0: shutting down sockets 06:03:42 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xffffff7f00000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:42 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x127b) 06:03:42 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, 0x0, 0x0) close(r1) [ 1050.647090][ T1917] block nbd0: shutting down sockets 06:03:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 06:03:52 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xffffffff00000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:52 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, 0x0, 0x0) close(r1) 06:03:52 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x127c) 06:03:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) 06:03:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000019b) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 1060.564658][ T1935] block nbd0: shutting down sockets 06:03:52 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, 0x0, 0x0) close(r1) 06:03:52 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x101001, 0x100) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000100)={'ip6gretap0\x00', {0x2, 0x4e21, @multicast1}}) dup3(r0, r2, 0x0) 06:03:52 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0xfffffffffffff000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 06:03:52 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x127d) 06:03:52 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r1) 06:03:52 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:52 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe2(&(0x7f0000000040), 0x4000) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7, 0x480400) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) [ 1060.954190][ T1965] block nbd0: shutting down sockets 06:03:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 06:03:52 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xfc51, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xffffffffffffffe0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) 06:03:52 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x3, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:53 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000019c) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:03:53 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x127e) 06:03:53 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x16) 06:03:53 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000040)={0x3, "7a9558"}, 0x4) 06:03:53 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x4, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:03:53 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x6, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1061.545804][ T1997] block nbd0: shutting down sockets 06:04:03 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r1) 06:04:03 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 06:04:03 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xa, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:03 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x127f) 06:04:03 executing program 0: poll(&(0x7f0000000100)=[{}], 0x1, 0x2000000000000050) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xff5b, 0x0, 0x0, 0x800e004c7) recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000040)=""/62, 0x3e}, {0x0}], 0x2}, 0x0) shutdown(r0, 0x0) 06:04:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000019d) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:03 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xc, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:03 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r1, r1, 0xfffffffffffffffd) [ 1071.489637][ T2033] block nbd0: shutting down sockets 06:04:03 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x4c00) 06:04:03 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xe, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e007c1) 06:04:03 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000100)='/dev/vfio/vfio\x00'}, 0x30) sched_setparam(r0, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0)) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000200)={0x0, 0x100000000, 0xffffffff, &(0x7f00000001c0)=0x5}) dup3(r4, r1, 0x1) [ 1071.752965][ T2055] block nbd0: shutting down sockets 06:04:13 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r3, 0x1, 0x7fffffff}, 0xc) 06:04:13 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xf, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:13 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x4c01) 06:04:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000019e) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:13 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) close(r1) 06:04:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") prctl$PR_MCE_KILL(0x21, 0x1, 0x1) [ 1081.718429][ T2079] block nbd0: shutting down sockets 06:04:13 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f00000000c0)) 06:04:13 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1c0000001e00a1eb0000f4ff080000000700"/28, 0x1c) 06:04:13 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x10, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:13 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x2, @loopback, 0x6}}, 0x400, 0x4, 0x1000, 0x100, 0x20}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r3, 0x1}, &(0x7f00000001c0)=0x8) dup3(r0, r2, 0x0) 06:04:13 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x4c80) 06:04:13 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x60, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:13 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) [ 1082.022697][ T2111] block nbd0: shutting down sockets 06:04:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001500)=[{&(0x7f0000000040)=""/61, 0x3d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r0, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup2(r2, r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/108, 0x6c}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) shutdown(r4, 0x0) 06:04:14 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x4c81) [ 1082.309008][ T2129] block nbd0: shutting down sockets 06:04:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000019f) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:23 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 06:04:23 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@empty, 0x74, r1}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair(0x10, 0x0, 0xe38f, &(0x7f0000000100)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x3, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x100, 0x108) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f00000000c0)={0xf4}) dup3(0xffffffffffffffff, r2, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f0000000300)={{0x9, 0x0, 0x248, 0x80000001, 0x4, 0x400}, 0xffffffff}) 06:04:23 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xf0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:23 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x5408) 06:04:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/82, 0x52}, {0x0}, {0x0}], 0x3}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x9, 0x0, &(0x7f00000000c0)) recvfrom$inet(r2, 0x0, 0xfffffffe, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) 06:04:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001a0) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 1091.924786][ T2149] block nbd0: shutting down sockets 06:04:23 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) r3 = dup3(r0, r2, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 06:04:23 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x300, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:24 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 06:04:24 executing program 5: setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x101000, 0x0) bind$netrom(r2, &(0x7f00000000c0)={{0x3, @default, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$RTC_UIE_OFF(r2, 0x7004) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r3, 0x0) 06:04:24 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x540f) 06:04:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) 06:04:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x600, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1092.246504][ T2182] block nbd0: shutting down sockets 06:04:24 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = request_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='\x00', 0x0) r3 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="d9bd288eef8a5bf25560c37fa2d310542766299fb808b52e961d61ceb979e362eeff8be48d63bbe436c5b03b0d324e9265c4bd35608c2dffc2a5a6e32715b93ec4009d82c208940a336426b1948f16c347ca85d83b1249061b21c87497caadca6b2404f5621892e5f577fe45f259647a903539b5d762ce26c24990c1f690acb7beef48fa3732ed2df006d9d3baba65ea0299fd45990370098491577dffb1825d3fb63446a0953b1adfa7a654de46995c73950dbc28624275c37503", 0xbb, 0xfffffffffffffffc) keyctl$unlink(0x9, r2, r3) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x8000) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x8003, 0x0) dup3(r0, r4, 0x0) 06:04:24 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 06:04:24 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) dup3(r1, r0, 0x0) 06:04:24 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x5417) [ 1092.585732][ T2206] block nbd0: shutting down sockets [ 1092.613189][ T2202] serio: Serial port pts0 06:04:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001a1) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xa00, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:24 executing program 5: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) r0 = gettid() get_robust_list(r0, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f00000000c0)={&(0x7f0000000040)}}, &(0x7f0000000180)=0x18) socketpair$unix(0x1, 0xffffffffffd, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685, &(0x7f00000002c0)={0x1, 0xea, 0x1000, 0xfffffffffffffe29, &(0x7f0000001640)="7497ff50af000000", 0x2bd, 0x0, &(0x7f0000001680)="f29f1354d39ccad116ef0f4bd2d54a5a8da7784d281f4c3bcd29082351ffa72d15407b45e51fc8014c7730b1f0bfd523bf950849011c88549e64a54aa82170439e5bab2cd9d066b17957fc3f4431693a44821913132280fcdfeb2632327eca9f00aae32f1a1a000000000000"}) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x2, 0x0) r4 = dup3(r1, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000001380)=0x1008) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000013c0)={0x0, 0xee, "aecca2b89668408c1265c847297dadc26635d0818f88876b7e30ed48c10ddba6521079710f79e221620143fa12cc048840dd81a2f4a89e6f5ece3486d92ab6f30019fd2a0f614a399d2736662e39216548d2363167ea18d1d311a4f5a0c42d574b10ab9f79cf6d553bbb66bf11fb43d171349dadb0d1063b3a611864757f55618fdaf314ac42b2c6ed84d6d87c7d7f26013aefd6bf7eaad3149bff89c6e9f54e52ba963e3ba6b3bccf36a605e6b9621fd1e2767498d215291fc224e2c29b248d6cd424fe046c2fe06a8278176120f7d65f34ba65a87dcf76f86b78153181222bd1b88b9b6eb2fe276f098449a142"}, &(0x7f00000014c0)=0xf6) openat$cgroup_ro(r4, &(0x7f0000001600)='rdma.current\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000001500)={r5, 0xc6, 0x1d, 0x9, 0x6, 0x7f, 0x28, 0x0, {r6, @in={{0x2, 0x4e23, @remote}}, 0x6989, 0x0, 0x200, 0x100000000, 0x81}}, &(0x7f00000015c0)=0xb0) 06:04:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/224, 0xe0}, {0x0}], 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfffffecb, 0x0, 0x0, 0x800e00519) shutdown(r1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) poll(0x0, 0x0, 0x4c) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x10101, 0x0, 0x0, 0x800e0091e) ppoll(&(0x7f0000000040)=[{r4}, {r3}], 0x2, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 06:04:24 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x541a) 06:04:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000500)={0x0, 0xcf, &(0x7f0000000580)=[{&(0x7f0000000000)=""/82, 0x52}, {0x0}, {0x0, 0x1bb}, {0x0, 0xa3}, {0x0, 0x2a3}], 0x3}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x14, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xfffffffe, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) [ 1092.872960][ T2225] block nbd0: shutting down sockets 06:04:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xb3d, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:24 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl(r1, 0x64, &(0x7f00000000c0)="6c8605304cf14dda06230ffa22650a48b0746167b34e89fdf6473c246d1609db23688401") ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) dup3(r0, r2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x5c, 0x12) 06:04:24 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x5421) 06:04:24 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x35, 0x200201) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f00000000c0)=@bpq0='bpq0\x00', 0x10) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) syz_open_procfs(r3, &(0x7f0000000140)='net/raw\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r4, 0x0) 06:04:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xc00, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:25 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f5ffffff000000000000000085000000360000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x1bc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0xf0ffffffffffff, 0xe, 0x0, &(0x7f0000000240)="950620989f5a67f56db0d8e362a7", 0x0}, 0x28) [ 1093.143455][ T2251] block nbd0: shutting down sockets 06:04:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001a2) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:25 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xe00, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) r3 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(r2, r3, 0x26, &(0x7f0000000100)={0x10, 0x100000000, 0x5}) r4 = syz_open_dev$media(&(0x7f0000000500)='/dev/media#\x00', 0x2c, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0xfffffffffffffff7, 0x2}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYBLOB="920000009e136743919c676fb2c508aefafdfa6e2fdccab3c67fea5ad22c64bb7f19570eddf9b2778e2190f40b99ad6f3fcee684e14afd043a3092bc3ae618c8b215129e73319fa3a7144a30c77b786a057f778f23456f07035ce02cf637096f6c94ec5dd7ebc8ef82c2dfda325c2cde388a1594bb8aa408d0b04cdb2399f2a8c7573bc80334ba1f47f5fb70e7c65c77e7471695b5be"], &(0x7f0000000680)=0x9a) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r6, 0x0) 06:04:25 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x5450) 06:04:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:04:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 1093.883670][ T2283] block nbd0: shutting down sockets [ 1093.896318][ T2282] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:04:25 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) 06:04:25 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xf00, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:04:25 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:26 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x5451) 06:04:26 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) r3 = dup3(r0, r2, 0x0) socketpair(0x13, 0x801, 0x3f, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x880000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="08010000", @ANYRES16=r4, @ANYBLOB="000028bd7000fddbdf2508000000840001004400020008000300050000000800010017000000080001001e000000000003000100000008000100080000000800040006000000080002000400000008000300840b0000080003004a0e0000100001006574683a6361696653184316bb66cfa93e681c7b9b3320000000100001007564703a73797a32000000001400020008000200a11c0000080002000500000064000100100001007564703a73797a3100000000100001007564703a73797a32000000000800030001800000380004001400010002004e22e00000010000000000000000200002000a004e20000000ffff010000de1ba2785cdc029d000000000000000000000001a40300000c00090008000100ff0f00006cd04462476f"], 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 1094.256735][ T2310] block nbd0: shutting down sockets [ 1094.286289][ T2312] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:04:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001a3) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:28 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x3d0b, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:04:28 executing program 0 (fault-call:4 fault-nth:0): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:28 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x4080, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r1, r3, 0x0) 06:04:28 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x5452) [ 1097.009983][ T2330] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 1097.026936][ T2335] block nbd0: shutting down sockets 06:04:28 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x4001) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) r3 = getpgrp(0x0) migrate_pages(r3, 0x2, &(0x7f0000000040)=0x4, &(0x7f00000000c0)=0xfffffffffffffffc) 06:04:29 executing program 2 (fault-call:4 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:29 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x3f00, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:29 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:29 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x5460) 06:04:29 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) [ 1097.321109][ T2357] FAULT_INJECTION: forcing a failure. [ 1097.321109][ T2357] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.382780][ T2359] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 1097.389810][ T2357] CPU: 1 PID: 2357 Comm: syz-executor.2 Not tainted 5.3.0-rc1-next-20190724 #50 [ 1097.399929][ T2357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1097.410008][ T2357] Call Trace: [ 1097.413326][ T2357] dump_stack+0x172/0x1f0 [ 1097.417679][ T2357] should_fail.cold+0xa/0x15 [ 1097.422287][ T2357] ? fault_create_debugfs_attr+0x180/0x180 [ 1097.422306][ T2357] ? hci_unregister_dev+0x6f4/0x860 [ 1097.422334][ T2357] ? find_held_lock+0x35/0x130 [ 1097.438089][ T2357] __should_failslab+0x121/0x190 [ 1097.443033][ T2357] should_failslab+0x9/0x14 [ 1097.443050][ T2357] kmem_cache_alloc_node+0x56/0x740 [ 1097.443081][ T2357] __alloc_skb+0xd5/0x5e0 [ 1097.443100][ T2357] ? netdev_alloc_frag+0x1b0/0x1b0 [ 1097.443126][ T2357] ? wait_for_completion+0x440/0x440 [ 1097.452819][ T2357] hci_sock_dev_event+0xf3/0x580 [ 1097.452841][ T2357] hci_unregister_dev+0x233/0x860 [ 1097.452868][ T2357] vhci_release+0x76/0xf0 [ 1097.467561][ T2357] __fput+0x2ff/0x890 [ 1097.467583][ T2357] ? vhci_close_dev+0x50/0x50 [ 1097.467601][ T2357] ____fput+0x16/0x20 [ 1097.467617][ T2357] task_work_run+0x145/0x1c0 [ 1097.467642][ T2357] exit_to_usermode_loop+0x316/0x380 [ 1097.467662][ T2357] do_syscall_64+0x65f/0x760 [ 1097.467688][ T2357] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1097.477632][ T2357] RIP: 0033:0x459829 [ 1097.477650][ T2357] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1097.477659][ T2357] RSP: 002b:00007fb7ab0bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1097.477674][ T2357] RAX: 0000000000000000 RBX: 00007fb7ab0bec90 RCX: 0000000000459829 [ 1097.477683][ T2357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1097.477691][ T2357] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1097.477698][ T2357] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb7ab0bf6d4 [ 1097.477710][ T2357] R13: 00000000004f8ab2 R14: 00000000004d1810 R15: 0000000000000006 [ 1097.489433][ T2362] block nbd0: shutting down sockets 06:04:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001a4) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:29 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x4000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:29 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) dup2(r2, r3) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f00000000c0)={0x6, 0x1, @start={0x400, 0x1}}) dup3(r0, r1, 0x1080000) 06:04:29 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth1\x00'}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:29 executing program 2 (fault-call:4 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:29 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x6364) [ 1097.938203][ T2380] block nbd0: shutting down sockets [ 1097.970964][ T2378] FAULT_INJECTION: forcing a failure. [ 1097.970964][ T2378] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.989041][ T2378] CPU: 1 PID: 2378 Comm: syz-executor.2 Not tainted 5.3.0-rc1-next-20190724 #50 [ 1097.998103][ T2378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1098.008177][ T2378] Call Trace: [ 1098.011230][ T2385] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 1098.011519][ T2378] dump_stack+0x172/0x1f0 [ 1098.011547][ T2378] should_fail.cold+0xa/0x15 [ 1098.028568][ T2378] ? fault_create_debugfs_attr+0x180/0x180 [ 1098.034403][ T2378] ? cancel_delayed_work_sync+0x1b/0x20 [ 1098.039978][ T2378] ? __cancel_work_timer+0x1e0/0x540 [ 1098.040008][ T2378] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1098.040027][ T2378] ? should_fail+0x1de/0x852 [ 1098.040047][ T2378] __should_failslab+0x121/0x190 [ 1098.040067][ T2378] should_failslab+0x9/0x14 [ 1098.040080][ T2378] kmem_cache_alloc_node_trace+0x5a/0x750 [ 1098.040108][ T2378] __kmalloc_node_track_caller+0x3d/0x70 [ 1098.056416][ T2378] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1098.056438][ T2378] __alloc_skb+0x10b/0x5e0 [ 1098.056457][ T2378] ? netdev_alloc_frag+0x1b0/0x1b0 [ 1098.056477][ T2378] ? wait_for_completion+0x440/0x440 [ 1098.056510][ T2378] hci_sock_dev_event+0xf3/0x580 [ 1098.083387][ T2378] hci_unregister_dev+0x233/0x860 [ 1098.083413][ T2378] vhci_release+0x76/0xf0 [ 1098.083435][ T2378] __fput+0x2ff/0x890 [ 1098.083454][ T2378] ? vhci_close_dev+0x50/0x50 06:04:29 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x5865, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:29 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x6000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1098.108211][ T2378] ____fput+0x16/0x20 [ 1098.108231][ T2378] task_work_run+0x145/0x1c0 [ 1098.108257][ T2378] exit_to_usermode_loop+0x316/0x380 [ 1098.108277][ T2378] do_syscall_64+0x65f/0x760 [ 1098.108299][ T2378] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1098.108318][ T2378] RIP: 0033:0x459829 [ 1098.116632][ T2378] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:04:30 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) [ 1098.135150][ T2378] RSP: 002b:00007fb7ab0bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1098.135164][ T2378] RAX: 0000000000000000 RBX: 00007fb7ab0bec90 RCX: 0000000000459829 [ 1098.135173][ T2378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1098.135182][ T2378] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1098.135191][ T2378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb7ab0bf6d4 [ 1098.135200][ T2378] R13: 00000000004f8ab2 R14: 00000000004d1810 R15: 0000000000000006 [ 1098.245214][ T2400] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:04:30 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x7006) 06:04:30 executing program 5: socketpair$unix(0x1, 0x800000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) 06:04:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x6558, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1098.497148][ T2413] block nbd0: shutting down sockets 06:04:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001a5) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:30 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x200400, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000280)) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x4, 0x4, 0x3}) alarm(0x6) write$input_event(r3, &(0x7f0000000140)={{}, 0x3, 0xad, 0x4d}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x7) 06:04:30 executing program 2 (fault-call:4 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x8100, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:30 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r1, 0x1) 06:04:30 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x8906) [ 1098.840875][ T2429] block nbd0: shutting down sockets 06:04:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xf000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1098.882127][ T2433] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 1098.892174][ T2431] FAULT_INJECTION: forcing a failure. [ 1098.892174][ T2431] name failslab, interval 1, probability 0, space 0, times 0 06:04:30 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x56d, 0x4000) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x880, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xec8, 0x800) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) [ 1098.952538][ T2431] CPU: 0 PID: 2431 Comm: syz-executor.2 Not tainted 5.3.0-rc1-next-20190724 #50 [ 1098.963097][ T2431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1098.973171][ T2431] Call Trace: [ 1098.976504][ T2431] dump_stack+0x172/0x1f0 [ 1098.980863][ T2431] should_fail.cold+0xa/0x15 [ 1098.985472][ T2431] ? fault_create_debugfs_attr+0x180/0x180 [ 1098.991303][ T2431] ? ___might_sleep+0x163/0x280 [ 1098.991325][ T2431] __should_failslab+0x121/0x190 [ 1098.991344][ T2431] should_failslab+0x9/0x14 [ 1098.991358][ T2431] kmem_cache_alloc_trace+0x2d3/0x790 [ 1098.991376][ T2431] ? mutex_lock_io_nested+0x11d0/0x11d0 [ 1098.991388][ T2431] ? __kasan_check_write+0x14/0x20 [ 1098.991412][ T2431] kobject_uevent_env+0x387/0x1023 [ 1099.026805][ T2431] ? wait_for_completion+0x440/0x440 [ 1099.032120][ T2431] ? software_node_notify+0xfd/0x2ed [ 1099.037429][ T2431] kobject_uevent+0x20/0x26 [ 1099.041954][ T2431] device_del+0x6f9/0xb80 [ 1099.046303][ T2431] ? __device_links_no_driver+0x250/0x250 06:04:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x34000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1099.052048][ T2431] rfkill_unregister+0xd1/0x2c0 [ 1099.056912][ T2431] hci_unregister_dev+0x267/0x860 [ 1099.061961][ T2431] vhci_release+0x76/0xf0 [ 1099.067055][ T2431] __fput+0x2ff/0x890 [ 1099.071059][ T2431] ? vhci_close_dev+0x50/0x50 [ 1099.075752][ T2431] ____fput+0x16/0x20 [ 1099.079752][ T2431] task_work_run+0x145/0x1c0 [ 1099.084366][ T2431] exit_to_usermode_loop+0x316/0x380 [ 1099.089674][ T2431] do_syscall_64+0x65f/0x760 [ 1099.094286][ T2431] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1099.100195][ T2431] RIP: 0033:0x459829 [ 1099.104103][ T2431] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1099.123726][ T2431] RSP: 002b:00007fb7ab0bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1099.132159][ T2431] RAX: 0000000000000000 RBX: 00007fb7ab0bec90 RCX: 0000000000459829 [ 1099.140153][ T2431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1099.148140][ T2431] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1099.156123][ T2431] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb7ab0bf6d4 [ 1099.164109][ T2431] R13: 00000000004f8ab2 R14: 00000000004d1810 R15: 0000000000000006 06:04:31 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x890b) 06:04:31 executing program 5: socketpair$unix(0x1, 0x800000000000009, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f00000000c0)={0x0, 0x80000001, 0x8, [], &(0x7f0000000040)=0x49e5}) dup3(r0, r2, 0x0) 06:04:31 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000240)=@HCI_VENDOR_PKT, 0x399) close(r1) [ 1099.295654][ T2459] block nbd0: shutting down sockets 06:04:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001a6) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:31 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x400300, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:31 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x6) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000040)={0x11, 0x3, 0x7}) dup3(r0, r2, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={'rose', 0x0}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) 06:04:31 executing program 2 (fault-call:4 fault-nth:3): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:31 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x8912) 06:04:31 executing program 0: fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) [ 1099.819518][ T2483] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 1099.844573][ T2484] block nbd0: shutting down sockets [ 1099.848377][ T2480] FAULT_INJECTION: forcing a failure. [ 1099.848377][ T2480] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1099.863027][ T2480] CPU: 0 PID: 2480 Comm: syz-executor.2 Not tainted 5.3.0-rc1-next-20190724 #50 [ 1099.863037][ T2480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1099.863042][ T2480] Call Trace: [ 1099.863067][ T2480] dump_stack+0x172/0x1f0 [ 1099.863091][ T2480] should_fail.cold+0xa/0x15 [ 1099.863109][ T2480] ? fault_create_debugfs_attr+0x180/0x180 [ 1099.863127][ T2480] ? __kasan_check_read+0x11/0x20 [ 1099.863145][ T2480] ? __lock_acquire+0x1702/0x4c30 06:04:31 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x200, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000000c0)={0x8, 0x9, 0xffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r3, 0x0) [ 1099.863172][ T2480] ? debug_smp_processor_id+0x3c/0x214 [ 1099.921170][ T2480] should_fail_alloc_page+0x50/0x60 [ 1099.921188][ T2480] __alloc_pages_nodemask+0x1a1/0x8f0 [ 1099.921205][ T2480] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1099.921223][ T2480] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1099.921236][ T2480] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1099.921262][ T2480] ? fault_create_debugfs_attr+0x180/0x180 [ 1099.921281][ T2480] cache_grow_begin+0x90/0xd20 [ 1099.921306][ T2480] ? kobject_uevent_env+0x387/0x1023 [ 1099.931892][ T2480] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1099.971422][ T2480] kmem_cache_alloc_trace+0x6b3/0x790 [ 1099.971444][ T2480] ? mutex_lock_io_nested+0x11d0/0x11d0 [ 1099.971458][ T2480] ? __kasan_check_write+0x14/0x20 [ 1099.971480][ T2480] kobject_uevent_env+0x387/0x1023 [ 1099.971504][ T2480] ? wait_for_completion+0x440/0x440 [ 1099.971522][ T2480] ? software_node_notify+0xfd/0x2ed [ 1099.971538][ T2480] kobject_uevent+0x20/0x26 [ 1099.971554][ T2480] device_del+0x6f9/0xb80 [ 1099.971576][ T2480] ? __device_links_no_driver+0x250/0x250 [ 1099.992723][ T2480] rfkill_unregister+0xd1/0x2c0 [ 1100.012099][ T2480] hci_unregister_dev+0x267/0x860 [ 1100.012124][ T2480] vhci_release+0x76/0xf0 [ 1100.012145][ T2480] __fput+0x2ff/0x890 [ 1100.012164][ T2480] ? vhci_close_dev+0x50/0x50 [ 1100.022743][ T2480] ____fput+0x16/0x20 [ 1100.032087][ T2480] task_work_run+0x145/0x1c0 [ 1100.032116][ T2480] exit_to_usermode_loop+0x316/0x380 [ 1100.032137][ T2480] do_syscall_64+0x65f/0x760 [ 1100.059199][ T2480] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1100.065103][ T2480] RIP: 0033:0x459829 [ 1100.065121][ T2480] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1100.065130][ T2480] RSP: 002b:00007fb7ab0bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1100.065144][ T2480] RAX: 0000000000000000 RBX: 00007fb7ab0bec90 RCX: 0000000000459829 [ 1100.065153][ T2480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 06:04:32 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xf0ffff, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1100.065162][ T2480] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1100.065171][ T2480] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb7ab0bf6d4 [ 1100.065179][ T2480] R13: 00000000004f8ab2 R14: 00000000004d1810 R15: 0000000000000006 06:04:32 executing program 2 (fault-call:4 fault-nth:4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:32 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x8933) 06:04:32 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x1000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:32 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) mq_open(&(0x7f0000000040)='\xdc[securitymd5sum(*mime_typeGPLGPL\'^\x00', 0x841, 0x2, &(0x7f00000000c0)={0x3, 0x0, 0xc5f3, 0xd9, 0x6808, 0x9, 0x7fffffff, 0xffff}) [ 1100.354616][ T2510] FAULT_INJECTION: forcing a failure. [ 1100.354616][ T2510] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.399636][ T2490] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 1100.420953][ T2510] CPU: 0 PID: 2510 Comm: syz-executor.2 Not tainted 5.3.0-rc1-next-20190724 #50 [ 1100.430041][ T2510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1100.440120][ T2510] Call Trace: [ 1100.443435][ T2510] dump_stack+0x172/0x1f0 [ 1100.447791][ T2510] should_fail.cold+0xa/0x15 [ 1100.452400][ T2510] ? fault_create_debugfs_attr+0x180/0x180 [ 1100.452425][ T2510] ? ___might_sleep+0x163/0x280 [ 1100.452448][ T2510] __should_failslab+0x121/0x190 [ 1100.452468][ T2510] should_failslab+0x9/0x14 [ 1100.452481][ T2510] __kmalloc+0x2e0/0x770 [ 1100.452506][ T2510] ? kobject_uevent_env+0x387/0x1023 [ 1100.468100][ T2510] ? rcu_read_lock_sched_held+0x110/0x130 [ 1100.468119][ T2510] ? kobject_get_path+0xc4/0x1b0 [ 1100.468137][ T2510] kobject_get_path+0xc4/0x1b0 [ 1100.468154][ T2510] kobject_uevent_env+0x3ab/0x1023 [ 1100.468172][ T2510] ? wait_for_completion+0x440/0x440 [ 1100.468190][ T2510] ? software_node_notify+0xfd/0x2ed [ 1100.468206][ T2510] kobject_uevent+0x20/0x26 [ 1100.468222][ T2510] device_del+0x6f9/0xb80 [ 1100.468243][ T2510] ? __device_links_no_driver+0x250/0x250 [ 1100.487982][ T2510] rfkill_unregister+0xd1/0x2c0 [ 1100.488005][ T2510] hci_unregister_dev+0x267/0x860 [ 1100.488029][ T2510] vhci_release+0x76/0xf0 [ 1100.488048][ T2510] __fput+0x2ff/0x890 [ 1100.488064][ T2510] ? vhci_close_dev+0x50/0x50 [ 1100.488080][ T2510] ____fput+0x16/0x20 [ 1100.488095][ T2510] task_work_run+0x145/0x1c0 [ 1100.488119][ T2510] exit_to_usermode_loop+0x316/0x380 [ 1100.488140][ T2510] do_syscall_64+0x65f/0x760 [ 1100.497842][ T2510] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1100.497856][ T2510] RIP: 0033:0x459829 [ 1100.497871][ T2510] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1100.497879][ T2510] RSP: 002b:00007fb7ab0bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1100.497892][ T2510] RAX: 0000000000000000 RBX: 00007fb7ab0bec90 RCX: 0000000000459829 [ 1100.497901][ T2510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1100.497910][ T2510] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1100.497919][ T2510] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb7ab0bf6d4 [ 1100.497926][ T2510] R13: 00000000004f8ab2 R14: 00000000004d1810 R15: 0000000000000006 06:04:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001a7) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:34 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x2000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:34 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept$netrom(r0, 0x0, &(0x7f0000000040)) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f00000000c0)=0x3, 0x4) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) setfsgid(r3) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r4, 0x0) 06:04:34 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x20, 0x200400) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="c42ee9ee975f0eea384bc8d76e91e139", 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xc6d, 0x9}, &(0x7f0000000280)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000002c0)={0x128dfb75, 0x4, 0x9, 0x3ff, 0x6, 0x8, 0x794, 0xe516, r2}, &(0x7f0000000300)=0x20) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x2) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000080)={0xfffffffffffffffb, 0x3c15, 0x7, 0x100, 0x11b1, 0x6b9ec2c6}) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x4, 0x10000) 06:04:34 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x89a0) 06:04:34 executing program 2 (fault-call:4 fault-nth:5): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 1102.965813][ T2535] block nbd0: shutting down sockets 06:04:34 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x3000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1102.987548][ T2537] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:04:34 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x2001, &(0x7f0000000040), 0x0, r1, 0x4}) 06:04:34 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 1103.043444][ T2545] FAULT_INJECTION: forcing a failure. [ 1103.043444][ T2545] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.078744][ T2545] CPU: 1 PID: 2545 Comm: syz-executor.2 Not tainted 5.3.0-rc1-next-20190724 #50 [ 1103.087821][ T2545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1103.097909][ T2545] Call Trace: [ 1103.101225][ T2545] dump_stack+0x172/0x1f0 [ 1103.105596][ T2545] should_fail.cold+0xa/0x15 [ 1103.110215][ T2545] ? fault_create_debugfs_attr+0x180/0x180 [ 1103.116055][ T2545] ? ___might_sleep+0x163/0x280 [ 1103.120974][ T2545] __should_failslab+0x121/0x190 [ 1103.125946][ T2545] should_failslab+0x9/0x14 [ 1103.130473][ T2545] kmem_cache_alloc_node+0x268/0x740 [ 1103.135779][ T2545] ? find_held_lock+0x35/0x130 [ 1103.140564][ T2545] ? netlink_has_listeners+0x23b/0x3f0 [ 1103.146055][ T2545] __alloc_skb+0xd5/0x5e0 [ 1103.150412][ T2545] ? netdev_alloc_frag+0x1b0/0x1b0 [ 1103.155611][ T2545] ? __kasan_check_read+0x11/0x20 [ 1103.160663][ T2545] alloc_uevent_skb+0x83/0x1e2 [ 1103.165447][ T2545] kobject_uevent_env+0xaa3/0x1023 [ 1103.170591][ T2545] ? wait_for_completion+0x440/0x440 [ 1103.175903][ T2545] kobject_uevent+0x20/0x26 [ 1103.180419][ T2545] device_del+0x6f9/0xb80 [ 1103.184774][ T2545] ? __device_links_no_driver+0x250/0x250 [ 1103.190532][ T2545] rfkill_unregister+0xd1/0x2c0 [ 1103.195410][ T2545] hci_unregister_dev+0x267/0x860 [ 1103.200463][ T2545] vhci_release+0x76/0xf0 [ 1103.204832][ T2545] __fput+0x2ff/0x890 [ 1103.208845][ T2545] ? vhci_close_dev+0x50/0x50 [ 1103.213541][ T2545] ____fput+0x16/0x20 [ 1103.217545][ T2545] task_work_run+0x145/0x1c0 [ 1103.222153][ T2545] exit_to_usermode_loop+0x316/0x380 [ 1103.227455][ T2545] do_syscall_64+0x65f/0x760 [ 1103.232065][ T2545] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1103.237971][ T2545] RIP: 0033:0x459829 06:04:35 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x4000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:35 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 1103.241905][ T2545] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1103.261610][ T2545] RSP: 002b:00007fb7ab09dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1103.270048][ T2545] RAX: 0000000000000000 RBX: 00007fb7ab09dc90 RCX: 0000000000459829 [ 1103.278034][ T2545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1103.286018][ T2545] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 06:04:35 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f0000000140)=""/223, 0x800}) close(r1) [ 1103.294002][ T2545] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb7ab09e6d4 [ 1103.302012][ T2545] R13: 00000000004f8ab2 R14: 00000000004d1810 R15: 0000000000000006 06:04:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001a8) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:37 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x6000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:37 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x89a1) 06:04:37 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x100) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x80200, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000440)=0xe8) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x846008, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6361a2d4a04b6368653d6c6f6f73652c6e6f657874656e642c6e6f6465766d61702c6c6f6f73652c6e6f6465766d61702c666f776e65723e", @ANYRESDEC=r2, @ANYBLOB=',euid<', @ANYRESDEC=r3, @ANYBLOB=',euid>', @ANYRESDEC=r4, @ANYBLOB=',\x00']) socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000000c0)=""/128) 06:04:37 executing program 2 (fault-call:4 fault-nth:6): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:37 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, "59a49c85dc9a29721fb8c385e946032fb0384cf35fe86e9b95b1fa419bffd0c2fed0cd6f555afd9010b75cd1eb934c49a0c1b8ca5c9ad4d9cf767d9f72b3234b434e1987657848f07eedd2cd98a593211236b760abfe21bcc20256392c2b6e359e4cf796917dc034ca8084df190d2cc765a69761f9caf6f2f3f63a37717e3c939b18fd6bfd9a36817620583e91002953889fb3ef6d352da8429457c53de2620ec5f0bea526dfae4bad2c"}, 0xab) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 1106.024674][ T2583] block nbd0: shutting down sockets [ 1106.042908][ T2588] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:04:38 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xa000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1106.082480][ T2587] FAULT_INJECTION: forcing a failure. [ 1106.082480][ T2587] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.097473][ T2587] CPU: 1 PID: 2587 Comm: syz-executor.2 Not tainted 5.3.0-rc1-next-20190724 #50 [ 1106.106513][ T2587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1106.116569][ T2587] Call Trace: [ 1106.119877][ T2587] dump_stack+0x172/0x1f0 [ 1106.124232][ T2587] should_fail.cold+0xa/0x15 [ 1106.128834][ T2587] ? fault_create_debugfs_attr+0x180/0x180 [ 1106.134656][ T2587] ? ___might_sleep+0x163/0x280 [ 1106.139525][ T2587] __should_failslab+0x121/0x190 [ 1106.144473][ T2587] should_failslab+0x9/0x14 [ 1106.148979][ T2587] kmem_cache_alloc+0x2aa/0x710 [ 1106.153887][ T2587] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 1106.159699][ T2587] ? __kmalloc_node_track_caller+0x4e/0x70 [ 1106.165496][ T2587] skb_clone+0x154/0x3d0 [ 1106.169767][ T2587] netlink_broadcast_filtered+0x8da/0xb90 [ 1106.175537][ T2587] netlink_broadcast+0x3a/0x50 [ 1106.180302][ T2587] kobject_uevent_env+0xad4/0x1023 [ 1106.185420][ T2587] ? wait_for_completion+0x440/0x440 [ 1106.190824][ T2587] kobject_uevent+0x20/0x26 [ 1106.195312][ T2587] device_del+0x6f9/0xb80 [ 1106.199632][ T2587] ? __device_links_no_driver+0x250/0x250 [ 1106.205343][ T2587] rfkill_unregister+0xd1/0x2c0 [ 1106.210181][ T2587] hci_unregister_dev+0x267/0x860 [ 1106.215209][ T2587] vhci_release+0x76/0xf0 [ 1106.219551][ T2587] __fput+0x2ff/0x890 [ 1106.223547][ T2587] ? vhci_close_dev+0x50/0x50 [ 1106.228237][ T2587] ____fput+0x16/0x20 [ 1106.232207][ T2587] task_work_run+0x145/0x1c0 [ 1106.236789][ T2587] exit_to_usermode_loop+0x316/0x380 [ 1106.242082][ T2587] do_syscall_64+0x65f/0x760 [ 1106.246659][ T2587] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1106.252538][ T2587] RIP: 0033:0x459829 [ 1106.256439][ T2587] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1106.276042][ T2587] RSP: 002b:00007fb7ab0bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1106.284462][ T2587] RAX: 0000000000000000 RBX: 00007fb7ab0bec90 RCX: 0000000000459829 [ 1106.292420][ T2587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1106.300378][ T2587] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1106.308338][ T2587] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb7ab0bf6d4 [ 1106.316330][ T2587] R13: 00000000004f8ab2 R14: 00000000004d1810 R15: 0000000000000006 06:04:38 executing program 2 (fault-call:4 fault-nth:7): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:38 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xc000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:38 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x89e0) 06:04:38 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000140)={r3, 0x3}) dup3(r0, r2, 0x0) [ 1106.459652][ T2603] FAULT_INJECTION: forcing a failure. [ 1106.459652][ T2603] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.472815][ T2603] CPU: 1 PID: 2603 Comm: syz-executor.2 Not tainted 5.3.0-rc1-next-20190724 #50 [ 1106.481945][ T2603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1106.492026][ T2603] Call Trace: [ 1106.495342][ T2603] dump_stack+0x172/0x1f0 [ 1106.499701][ T2603] should_fail.cold+0xa/0x15 [ 1106.504314][ T2603] ? fault_create_debugfs_attr+0x180/0x180 [ 1106.510144][ T2603] ? ___might_sleep+0x163/0x280 [ 1106.515027][ T2603] __should_failslab+0x121/0x190 [ 1106.519979][ T2603] should_failslab+0x9/0x14 [ 1106.524506][ T2603] kmem_cache_alloc+0x2aa/0x710 [ 1106.529373][ T2603] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 1106.531986][ T2609] block nbd0: shutting down sockets [ 1106.535192][ T2603] ? __kmalloc_node_track_caller+0x4e/0x70 [ 1106.535217][ T2603] skb_clone+0x154/0x3d0 [ 1106.535238][ T2603] netlink_broadcast_filtered+0x8da/0xb90 06:04:38 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x10000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r1, 0x0) [ 1106.535266][ T2603] netlink_broadcast+0x3a/0x50 [ 1106.561038][ T2603] kobject_uevent_env+0xad4/0x1023 [ 1106.566184][ T2603] ? wait_for_completion+0x440/0x440 [ 1106.571485][ T2603] kobject_uevent+0x20/0x26 [ 1106.575996][ T2603] device_del+0x6f9/0xb80 [ 1106.580329][ T2603] ? __device_links_no_driver+0x250/0x250 [ 1106.586073][ T2603] rfkill_unregister+0xd1/0x2c0 [ 1106.590915][ T2603] hci_unregister_dev+0x267/0x860 [ 1106.595942][ T2603] vhci_release+0x76/0xf0 [ 1106.600288][ T2603] __fput+0x2ff/0x890 [ 1106.604284][ T2603] ? vhci_close_dev+0x50/0x50 [ 1106.608980][ T2603] ____fput+0x16/0x20 [ 1106.612996][ T2603] task_work_run+0x145/0x1c0 [ 1106.617623][ T2603] exit_to_usermode_loop+0x316/0x380 [ 1106.622911][ T2603] do_syscall_64+0x65f/0x760 [ 1106.627486][ T2603] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1106.633373][ T2603] RIP: 0033:0x459829 [ 1106.637263][ T2603] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1106.656860][ T2603] RSP: 002b:00007fb7ab0bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1106.665290][ T2603] RAX: 0000000000000000 RBX: 00007fb7ab0bec90 RCX: 0000000000459829 [ 1106.673258][ T2603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1106.681228][ T2603] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1106.689208][ T2603] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb7ab0bf6d4 [ 1106.697180][ T2603] R13: 00000000004f8ab2 R14: 00000000004d1810 R15: 0000000000000006 06:04:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001a9) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:38 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f00000000c0)={0x2, "30bf"}, 0x3) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:38 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x10001, 0x201000) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$ax25(r2, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @bcast]}, 0x48) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000480)={0x0, 0x0, 0x2, {0x0, @raw_data="c5d57e1409c8c8bfc4b0a6a486e6759ec6b71794ff0adc9ee376a40807fdd9774aece3e8b95da34ee175d3529bc03c3401cbd467e3a00b3f565d83fcdaa18e1364954192aa37c8b5d52de4df78b6ea9e89a2c13f92b9f7650b89fdf12ca7c48762bc81646f92b9f2270c1a324c9820fd0525a8c381ced94247dfa06a9362cdade36c5ee4e0463288dced378801a8dad713036ecfa51add03337e4cc1d3d7cdea599d986641334404b67bd660b034ebd565d306b651d8b3a7d05256fd53039928498f4aa480448183"}}) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc058565d, &(0x7f0000000300)={0x0, 0x2, 0x9edc0aff, {0x0, @raw_data="2085f3072c9b42f03f10be83b68ebcf014a0409fdf8be3d3e82c747c7f79f7cee00b443f02000000a91ca25441677d16ff0adc9e2d6eebf4bef6c96076d67f243aebaac6430c9ef1a788e60eb3d0a7c29a5e3416871c8a51df55701a05e0a2f09883c482efaf6dc9e1695038733a23bbf0faf76a1d3fae5c251c4fad507b2ead2f1581057e3f84f3e8503ee570d8069eb53a897d2dd5f3d89629917fb171132181e9f3c510ac5229a6b6096547977578c5795d84cf23fe1d042df97dbd37a4b3d0e338a1b611e3ae"}}) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000100)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r3, r5) r6 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r6, 0x0) 06:04:38 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xe000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:38 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x89e2) 06:04:38 executing program 2 (fault-call:4 fault-nth:8): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:38 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) fcntl$lock(r0, 0x6, &(0x7f0000000140)={0x3, 0x0, 0x536e, 0x7fffffff, r2}) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) 06:04:38 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xf000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:39 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) [ 1107.058522][ T2629] block nbd0: shutting down sockets [ 1107.093933][ T2626] FAULT_INJECTION: forcing a failure. [ 1107.093933][ T2626] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.137971][ T2626] CPU: 1 PID: 2626 Comm: syz-executor.2 Not tainted 5.3.0-rc1-next-20190724 #50 [ 1107.147025][ T2626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.157091][ T2626] Call Trace: [ 1107.160396][ T2626] dump_stack+0x172/0x1f0 [ 1107.164750][ T2626] should_fail.cold+0xa/0x15 [ 1107.169353][ T2626] ? fault_create_debugfs_attr+0x180/0x180 [ 1107.175174][ T2626] ? ___might_sleep+0x163/0x280 [ 1107.180044][ T2626] __should_failslab+0x121/0x190 [ 1107.185024][ T2626] should_failslab+0x9/0x14 [ 1107.189550][ T2626] kmem_cache_alloc_trace+0x2d3/0x790 [ 1107.194947][ T2626] ? __kasan_check_write+0x14/0x20 [ 1107.200094][ T2626] kobject_uevent_env+0x387/0x1023 [ 1107.205227][ T2626] ? wait_for_completion+0x440/0x440 [ 1107.208455][ T2638] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 1107.210528][ T2626] kobject_uevent+0x20/0x26 [ 1107.210548][ T2626] device_del+0x6f9/0xb80 [ 1107.210569][ T2626] ? __device_links_no_driver+0x250/0x250 [ 1107.210584][ T2626] ? kobject_put+0x84/0xe0 06:04:39 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1107.210616][ T2626] hci_unregister_dev+0x2a6/0x860 [ 1107.233192][ T2626] vhci_release+0x76/0xf0 [ 1107.233216][ T2626] __fput+0x2ff/0x890 [ 1107.233235][ T2626] ? vhci_close_dev+0x50/0x50 [ 1107.233253][ T2626] ____fput+0x16/0x20 [ 1107.233278][ T2626] task_work_run+0x145/0x1c0 [ 1107.251021][ T2626] exit_to_usermode_loop+0x316/0x380 [ 1107.251046][ T2626] do_syscall_64+0x65f/0x760 [ 1107.251067][ T2626] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1107.251087][ T2626] RIP: 0033:0x459829 [ 1107.264313][ T2626] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1107.264323][ T2626] RSP: 002b:00007fb7ab0bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1107.264338][ T2626] RAX: 0000000000000000 RBX: 00007fb7ab0bec90 RCX: 0000000000459829 [ 1107.264347][ T2626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1107.264357][ T2626] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 06:04:39 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@initdev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x1000040, &(0x7f0000000500)=ANY=[@ANYBLOB="74727101733d756e69782c636184cb300e8746fbdb7c506368653d6e6f6e652c6163636573733d616e792c76657273696f6e3d3970323030302e4c2c6163636573733d616e792c70726976700000742c64666c747569643d0aa8a1349ed60ae8826d9dcd499eed7171eff4ea9c9658cf8fdf14b31aa00c8306fc", @ANYRESHEX=r2, @ANYBLOB=',seclabel,uid=', @ANYRESDEC=r2, @ANYBLOB=',subj_user=/dev/vfio/vfio\x00,defcontext=user_u,uid<', @ANYRESDEC=r3, @ANYBLOB=',\x00']) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r4, 0x0) 06:04:39 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x3d0b0000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1107.264366][ T2626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb7ab0bf6d4 [ 1107.264375][ T2626] R13: 00000000004f8ab2 R14: 00000000004d1810 R15: 0000000000000006 [ 1107.428738][ T2640] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:04:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001aa) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:39 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x89f0) 06:04:39 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) r3 = dup3(r0, r2, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x19d9bef2, 0x1, 0x2, @dev={[], 0x26}}, 0x10) 06:04:39 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, "1bda7b10896046e23c3f3b50c4d6ca0f940cbdf89e27842497436a57212fc3e2ab226f57f1eb32953f7bcaf23f54a65bbc3256fa292e84c696d258d48a3d38c9d399bf8eebb5a46e327cc798fe59a3d3a0f0b669123b9df41106024f8a1f39e7d4780e7279584ffb244ebfb9e95a088ad9c4cb0d6517f1fba516963a78cb5bd4ec485066a8"}, 0x2cc) close(r1) 06:04:39 executing program 2 (fault-call:4 fault-nth:9): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:39 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x3f000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1107.980520][ T2661] FAULT_INJECTION: forcing a failure. [ 1107.980520][ T2661] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1107.993458][ T2669] block nbd0: shutting down sockets [ 1107.993770][ T2661] CPU: 1 PID: 2661 Comm: syz-executor.2 Not tainted 5.3.0-rc1-next-20190724 #50 [ 1108.007980][ T2661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1108.018047][ T2661] Call Trace: [ 1108.021366][ T2661] dump_stack+0x172/0x1f0 [ 1108.025717][ T2661] should_fail.cold+0xa/0x15 [ 1108.030331][ T2661] ? fault_create_debugfs_attr+0x180/0x180 [ 1108.036156][ T2661] ? __kasan_check_read+0x11/0x20 [ 1108.041200][ T2661] ? __lock_acquire+0x1702/0x4c30 [ 1108.046250][ T2661] should_fail_alloc_page+0x50/0x60 [ 1108.051472][ T2661] __alloc_pages_nodemask+0x1a1/0x8f0 [ 1108.056873][ T2661] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1108.062525][ T2661] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1108.068264][ T2661] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1108.073912][ T2661] ? fault_create_debugfs_attr+0x180/0x180 [ 1108.073950][ T2661] cache_grow_begin+0x90/0xd20 [ 1108.073969][ T2661] ? kobject_uevent_env+0x387/0x1023 [ 1108.073993][ T2661] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1108.074027][ T2661] kmem_cache_alloc_trace+0x6b3/0x790 [ 1108.084596][ T2661] ? __kasan_check_write+0x14/0x20 [ 1108.084624][ T2661] kobject_uevent_env+0x387/0x1023 [ 1108.084644][ T2661] ? wait_for_completion+0x440/0x440 [ 1108.084667][ T2661] kobject_uevent+0x20/0x26 [ 1108.084689][ T2661] device_del+0x6f9/0xb80 [ 1108.096206][ T2661] ? __device_links_no_driver+0x250/0x250 [ 1108.096223][ T2661] ? kobject_put+0x84/0xe0 [ 1108.096251][ T2661] hci_unregister_dev+0x2a6/0x860 [ 1108.096273][ T2661] vhci_release+0x76/0xf0 [ 1108.096296][ T2661] __fput+0x2ff/0x890 [ 1108.106786][ T2661] ? vhci_close_dev+0x50/0x50 [ 1108.106809][ T2661] ____fput+0x16/0x20 [ 1108.106826][ T2661] task_work_run+0x145/0x1c0 [ 1108.106853][ T2661] exit_to_usermode_loop+0x316/0x380 [ 1108.106874][ T2661] do_syscall_64+0x65f/0x760 [ 1108.172578][ T2661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1108.178488][ T2661] RIP: 0033:0x459829 [ 1108.182396][ T2661] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1108.202015][ T2661] RSP: 002b:00007fb7ab0bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1108.210441][ T2661] RAX: 0000000000000000 RBX: 00007fb7ab0bec90 RCX: 0000000000459829 [ 1108.218420][ T2661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 06:04:40 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x40000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:40 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0xb20, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x408c0}, 0x1) socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000200)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r3, r3, 0x0) dup3(r2, r4, 0x0) [ 1108.226398][ T2661] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1108.234376][ T2661] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb7ab0bf6d4 [ 1108.242356][ T2661] R13: 00000000004f8ab2 R14: 00000000004d1810 R15: 0000000000000006 06:04:40 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0x80002) getresgid(&(0x7f00000000c0), &(0x7f0000000140)=0x0, &(0x7f0000000180)) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:40 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x60000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:40 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 06:04:40 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab00) [ 1108.488912][ T2696] block nbd0: shutting down sockets 06:04:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001ab) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:40 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x65580000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:40 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'dummy0\x00', {0x2, 0x4e22, @empty}}) dup3(r0, r2, 0x0) getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)=0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000180)={{0x3b, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x4, 'lblc\x00', 0x0, 0xf372, 0x6b}, {@loopback, 0x4e23, 0x7, 0x9, 0x8, 0x5}}, 0x44) r4 = getegid() fchown(r1, r3, r4) 06:04:40 executing program 2 (fault-call:4 fault-nth:10): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:40 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200100, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000140)=""/198) 06:04:40 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab01) [ 1108.910631][ T2704] block nbd0: shutting down sockets 06:04:40 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x81000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1108.948248][ T2707] FAULT_INJECTION: forcing a failure. [ 1108.948248][ T2707] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.964571][ T2711] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 1109.007995][ T2707] CPU: 1 PID: 2707 Comm: syz-executor.2 Not tainted 5.3.0-rc1-next-20190724 #50 [ 1109.017071][ T2707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1109.017079][ T2707] Call Trace: [ 1109.017110][ T2707] dump_stack+0x172/0x1f0 [ 1109.017148][ T2707] should_fail.cold+0xa/0x15 [ 1109.030542][ T2707] ? fault_create_debugfs_attr+0x180/0x180 [ 1109.030567][ T2707] ? ___might_sleep+0x163/0x280 [ 1109.030597][ T2707] __should_failslab+0x121/0x190 [ 1109.039503][ T2707] should_failslab+0x9/0x14 [ 1109.039519][ T2707] __kmalloc+0x2e0/0x770 [ 1109.039538][ T2707] ? kobject_uevent_env+0x387/0x1023 [ 1109.039558][ T2707] ? rcu_read_lock_sched_held+0x110/0x130 [ 1109.039572][ T2707] ? kobject_get_path+0xc4/0x1b0 [ 1109.039589][ T2707] kobject_get_path+0xc4/0x1b0 [ 1109.039608][ T2707] kobject_uevent_env+0x3ab/0x1023 [ 1109.039631][ T2707] ? wait_for_completion+0x440/0x440 [ 1109.059893][ T2718] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 1109.065333][ T2707] kobject_uevent+0x20/0x26 [ 1109.065354][ T2707] device_del+0x6f9/0xb80 [ 1109.065375][ T2707] ? __device_links_no_driver+0x250/0x250 [ 1109.065388][ T2707] ? kobject_put+0x84/0xe0 [ 1109.065413][ T2707] hci_unregister_dev+0x2a6/0x860 [ 1109.086104][ T2707] vhci_release+0x76/0xf0 [ 1109.086127][ T2707] __fput+0x2ff/0x890 [ 1109.086146][ T2707] ? vhci_close_dev+0x50/0x50 [ 1109.086164][ T2707] ____fput+0x16/0x20 [ 1109.086184][ T2707] task_work_run+0x145/0x1c0 [ 1109.104633][ T2707] exit_to_usermode_loop+0x316/0x380 06:04:41 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000000c0)={r4, 0x80000, r2}) write$UHID_GET_REPORT_REPLY(r2, &(0x7f00000001c0)={0xa, 0x8, 0xfffffffffffffffd, 0x3}, 0xa) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) capset(&(0x7f0000000140)={0x19980330, r5}, &(0x7f0000000180)={0x5, 0xfff, 0x3ff, 0x8, 0x2, 0x3}) 06:04:41 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x242, 0x0) write$FUSE_POLL(r2, &(0x7f0000000100)={0x18, 0x0, 0x4, {0x2}}, 0x18) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = dup3(r0, r2, 0x0) dup(r3) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0x100000001}, 0x28, 0x1) sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3c, 0x324, 0x70bd27, 0x25dfdbfe, {0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x4044000) [ 1109.104657][ T2707] do_syscall_64+0x65f/0x760 [ 1109.104680][ T2707] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1109.104693][ T2707] RIP: 0033:0x459829 [ 1109.104714][ T2707] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1109.128650][ T2707] RSP: 002b:00007fb7ab0bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1109.128665][ T2707] RAX: 0000000000000000 RBX: 00007fb7ab0bec90 RCX: 0000000000459829 06:04:41 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab02) [ 1109.128674][ T2707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1109.128683][ T2707] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1109.128692][ T2707] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb7ab0bf6d4 [ 1109.128701][ T2707] R13: 00000000004f8ab2 R14: 00000000004d1810 R15: 0000000000000006 06:04:41 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x88a8ffff, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:41 executing program 2 (fault-call:4 fault-nth:11): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 1109.358562][ T2736] block nbd0: shutting down sockets [ 1109.433945][ T2741] FAULT_INJECTION: forcing a failure. [ 1109.433945][ T2741] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.456910][ T2741] CPU: 1 PID: 2741 Comm: syz-executor.2 Not tainted 5.3.0-rc1-next-20190724 #50 [ 1109.466008][ T2741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1109.476082][ T2741] Call Trace: [ 1109.479413][ T2741] dump_stack+0x172/0x1f0 [ 1109.483787][ T2741] should_fail.cold+0xa/0x15 [ 1109.488404][ T2741] ? fault_create_debugfs_attr+0x180/0x180 [ 1109.494234][ T2741] ? ___might_sleep+0x163/0x280 [ 1109.499108][ T2741] __should_failslab+0x121/0x190 [ 1109.504062][ T2741] should_failslab+0x9/0x14 [ 1109.508576][ T2741] kmem_cache_alloc+0x2aa/0x710 [ 1109.513445][ T2741] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 1109.519270][ T2741] ? __kmalloc_node_track_caller+0x4e/0x70 [ 1109.525101][ T2741] skb_clone+0x154/0x3d0 [ 1109.529365][ T2741] netlink_broadcast_filtered+0x8da/0xb90 [ 1109.535113][ T2741] netlink_broadcast+0x3a/0x50 [ 1109.539899][ T2741] kobject_uevent_env+0xad4/0x1023 [ 1109.545031][ T2741] ? wait_for_completion+0x440/0x440 [ 1109.550335][ T2741] kobject_uevent+0x20/0x26 [ 1109.554850][ T2741] device_del+0x6f9/0xb80 [ 1109.559196][ T2741] ? __device_links_no_driver+0x250/0x250 [ 1109.564927][ T2741] ? kobject_put+0x84/0xe0 [ 1109.569369][ T2741] hci_unregister_dev+0x2a6/0x860 [ 1109.574417][ T2741] vhci_release+0x76/0xf0 [ 1109.578765][ T2741] __fput+0x2ff/0x890 [ 1109.582763][ T2741] ? vhci_close_dev+0x50/0x50 [ 1109.587455][ T2741] ____fput+0x16/0x20 [ 1109.591458][ T2741] task_work_run+0x145/0x1c0 [ 1109.596082][ T2741] exit_to_usermode_loop+0x316/0x380 [ 1109.601394][ T2741] do_syscall_64+0x65f/0x760 [ 1109.606013][ T2741] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1109.611921][ T2741] RIP: 0033:0x459829 [ 1109.615834][ T2741] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1109.635460][ T2741] RSP: 002b:00007fb7ab0bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1109.643898][ T2741] RAX: 0000000000000000 RBX: 00007fb7ab0bec90 RCX: 0000000000459829 [ 1109.651895][ T2741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1109.659885][ T2741] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1109.667885][ T2741] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb7ab0bf6d4 [ 1109.675872][ T2741] R13: 00000000004f8ab2 R14: 00000000004d1810 R15: 0000000000000006 06:04:41 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x10000, 0x240000) write$FUSE_DIRENT(r0, &(0x7f0000000140)={0xc8, 0x3fd3b8719ae4bb23, 0x8, [{0x6, 0x80000000, 0xa, 0x6, '/dev/vhci\x00'}, {0x1, 0x6, 0x0, 0x2}, {0x3, 0x9, 0xa, 0x4, '/dev/vhci\x00'}, {0x4, 0x81, 0xa, 0x100000001, '/dev/vhci\x00'}, {0x6, 0x7f, 0xa, 0x7, '/dev/vhci\x00'}]}, 0xc8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 06:04:41 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) dup3(r0, r2, 0x0) 06:04:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001ac) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:41 executing program 2 (fault-call:4 fault-nth:12): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:41 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) 06:04:41 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:41 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xf0ffffff, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1109.943256][ T2749] block nbd0: shutting down sockets [ 1109.954605][ T2755] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 1109.980087][ T2751] FAULT_INJECTION: forcing a failure. [ 1109.980087][ T2751] name failslab, interval 1, probability 0, space 0, times 0 06:04:41 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xffffa888, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1110.039522][ T2751] CPU: 1 PID: 2751 Comm: syz-executor.2 Not tainted 5.3.0-rc1-next-20190724 #50 [ 1110.048609][ T2751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1110.058680][ T2751] Call Trace: [ 1110.062009][ T2751] dump_stack+0x172/0x1f0 [ 1110.066373][ T2751] should_fail.cold+0xa/0x15 [ 1110.070998][ T2751] ? fault_create_debugfs_attr+0x180/0x180 [ 1110.076824][ T2751] ? ___might_sleep+0x163/0x280 [ 1110.081694][ T2751] __should_failslab+0x121/0x190 [ 1110.086646][ T2751] should_failslab+0x9/0x14 [ 1110.091167][ T2751] kmem_cache_alloc_node_trace+0x274/0x750 [ 1110.097004][ T2751] __kmalloc_node_track_caller+0x3d/0x70 [ 1110.102656][ T2751] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1110.108048][ T2751] __alloc_skb+0x10b/0x5e0 [ 1110.112481][ T2751] ? netdev_alloc_frag+0x1b0/0x1b0 [ 1110.117615][ T2751] ? __kasan_check_read+0x11/0x20 [ 1110.122679][ T2751] alloc_uevent_skb+0x83/0x1e2 [ 1110.127467][ T2751] kobject_uevent_env+0xaa3/0x1023 [ 1110.132591][ T2751] ? wait_for_completion+0x440/0x440 [ 1110.137875][ T2751] kobject_uevent+0x20/0x26 [ 1110.142370][ T2751] device_del+0x6f9/0xb80 [ 1110.146691][ T2751] ? __device_links_no_driver+0x250/0x250 [ 1110.152421][ T2751] ? kobject_put+0x84/0xe0 [ 1110.156846][ T2751] hci_unregister_dev+0x2a6/0x860 [ 1110.161867][ T2751] vhci_release+0x76/0xf0 [ 1110.166186][ T2751] __fput+0x2ff/0x890 [ 1110.170170][ T2751] ? vhci_close_dev+0x50/0x50 [ 1110.174857][ T2751] ____fput+0x16/0x20 [ 1110.178849][ T2751] task_work_run+0x145/0x1c0 [ 1110.183435][ T2751] exit_to_usermode_loop+0x316/0x380 [ 1110.188726][ T2751] do_syscall_64+0x65f/0x760 [ 1110.193337][ T2751] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1110.199236][ T2751] RIP: 0033:0x459829 [ 1110.203144][ T2751] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1110.222765][ T2751] RSP: 002b:00007fb7ab0bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1110.231203][ T2751] RAX: 0000000000000000 RBX: 00007fb7ab0bec90 RCX: 0000000000459829 06:04:42 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r1, 0x40000000000001) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000001c0)={r3, 0xfffffffffffffff7, 0x5, 0x6, 0xff, 0x5, 0x101}) [ 1110.239170][ T2751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1110.247131][ T2751] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1110.255111][ T2751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb7ab0bf6d4 [ 1110.263350][ T2751] R13: 00000000004f8ab2 R14: 00000000004d1810 R15: 0000000000000006 06:04:42 executing program 2 (fault-call:4 fault-nth:13): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:42 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000140)=""/64, &(0x7f0000000180)=0x40) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x200040, 0x0) ioctl$VT_ACTIVATE(r3, 0x5606, 0xe4) close(r1) 06:04:42 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xfffff000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:42 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r2, 0x0) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000040)={0x7, 0x2}) 06:04:42 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab05) [ 1110.463001][ T2779] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 1110.517517][ T2784] FAULT_INJECTION: forcing a failure. [ 1110.517517][ T2784] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.553361][ T2784] CPU: 0 PID: 2784 Comm: syz-executor.2 Not tainted 5.3.0-rc1-next-20190724 #50 [ 1110.562431][ T2784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1110.562439][ T2784] Call Trace: [ 1110.562467][ T2784] dump_stack+0x172/0x1f0 [ 1110.562507][ T2784] should_fail.cold+0xa/0x15 [ 1110.562533][ T2784] ? fault_create_debugfs_attr+0x180/0x180 [ 1110.575901][ T2784] ? ___might_sleep+0x163/0x280 [ 1110.575926][ T2784] __should_failslab+0x121/0x190 [ 1110.575946][ T2784] should_failslab+0x9/0x14 [ 1110.575961][ T2784] kmem_cache_alloc+0x2aa/0x710 [ 1110.575979][ T2784] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 1110.576006][ T2784] ? __kmalloc_node_track_caller+0x4e/0x70 [ 1110.584565][ T2788] block nbd0: shutting down sockets [ 1110.584924][ T2784] skb_clone+0x154/0x3d0 [ 1110.630960][ T2784] netlink_broadcast_filtered+0x8da/0xb90 [ 1110.636800][ T2784] netlink_broadcast+0x3a/0x50 [ 1110.641570][ T2784] kobject_uevent_env+0xad4/0x1023 [ 1110.646668][ T2784] ? wait_for_completion+0x440/0x440 [ 1110.651941][ T2784] kobject_uevent+0x20/0x26 [ 1110.656431][ T2784] device_del+0x6f9/0xb80 [ 1110.660766][ T2784] ? __device_links_no_driver+0x250/0x250 [ 1110.666468][ T2784] ? kobject_put+0x84/0xe0 [ 1110.670887][ T2784] hci_unregister_dev+0x2a6/0x860 [ 1110.675896][ T2784] vhci_release+0x76/0xf0 [ 1110.680212][ T2784] __fput+0x2ff/0x890 [ 1110.684195][ T2784] ? vhci_close_dev+0x50/0x50 [ 1110.688870][ T2784] ____fput+0x16/0x20 [ 1110.692839][ T2784] task_work_run+0x145/0x1c0 [ 1110.697418][ T2784] exit_to_usermode_loop+0x316/0x380 [ 1110.702690][ T2784] do_syscall_64+0x65f/0x760 [ 1110.707286][ T2784] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1110.713169][ T2784] RIP: 0033:0x459829 [ 1110.717063][ T2784] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1110.736861][ T2784] RSP: 002b:00007fb7ab09dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1110.745298][ T2784] RAX: 0000000000000000 RBX: 00007fb7ab09dc90 RCX: 0000000000459829 [ 1110.753254][ T2784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1110.761207][ T2784] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1110.769167][ T2784] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb7ab09e6d4 [ 1110.777141][ T2784] R13: 00000000004f8ab2 R14: 00000000004d1810 R15: 0000000000000006 06:04:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001ad) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:42 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xffffff7f, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:42 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x12041, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000140)={0x1, 0x1, 0x0, [{0x3, 0x4, 0x9, 0x8001, 0x7, 0x6, 0x3}]}) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r3, 0x0) pidfd_send_signal(r3, 0x7, &(0x7f00000000c0)={0x22, 0x9, 0x4}, 0x0) 06:04:42 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x20000, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f00000000c0)=0x2) 06:04:42 executing program 2 (fault-call:4 fault-nth:14): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:42 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab06) 06:04:42 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xffffff9e, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1111.025700][ T2807] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 1111.034461][ T2804] block nbd0: shutting down sockets 06:04:42 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) r3 = dup3(r0, r2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) r7 = getegid() r8 = getegid() r9 = getegid() getgroups(0x5, &(0x7f0000000340)=[r5, r6, r7, r8, r9]) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x4e35e7573c7296ce, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x1c}}, 0x800) 06:04:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:43 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = dup2(r1, r1) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@mpls_getroute={0x3c, 0x1a, 0x10, 0x70bd2c, 0x25dfdbfe, {0x1c, 0x94, 0xa0, 0xffffffffffffffff, 0xff, 0x3, 0x0, 0x1, 0x100}, [@RTA_TTL_PROPAGATE={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x120, 0x749c, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x2, 0x0, 0x0, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000002c0), &(0x7f0000000300)=0xc) close(r1) 06:04:43 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xfffffff0, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:43 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab07) [ 1111.420219][ T2834] block nbd0: shutting down sockets 06:04:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001ae) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:43 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0xfffd, 0x0) dup3(r0, r2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x208, r3, 0x300, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff1}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x376}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fa0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd70}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0x114, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x401}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x100000001, @ipv4={[], [], @rand_addr=0x2886c00000000}, 0x1000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @ipv4={[], [], @broadcast}, 0x400000000000000}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @remote, 0xffff}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x266}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffff00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x20008800}, 0x20048044) 06:04:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x8) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:43 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x40030000000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:43 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab08) 06:04:43 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000001340)=@HCI_EVENT_PKT={0x4, "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"}, 0xffffffffffffffb6) clone(0x80200, &(0x7f0000000140)="d85e2c7a34911d10ec795450ab6d3f45e260cf27622b78ab57d0adcf87c0d60801ec64e4b9db3d220a9be9f20c87b5e648ac4081c6bea87e573253b99343d2e9aab3e5f5794551dfe84db8a23601fce58f0fa37df277e054f89378999fe297b559b94dab91fc4fec7d0f495d8fc3a6debacc52e49f216a0320152ecb486f4d9dbe13c5cff62b0958f090e7fec4b2", &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000240)="4df89a6ad37d1e") close(r1) delete_module(&(0x7f00000000c0)='/dev/vhci\x00', 0xa00) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x0, 0x7, 0x101, 0xf4d, 0x1a, 0x6e00, 0x100, 0x601094b6, 0x7, 0x4}) [ 1111.970492][ T2843] block nbd0: shutting down sockets 06:04:43 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000000c0)={0x40, 0x5, 0x740, 'queue1\x00', 0x2}) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000020000000500c800b30b3c6c6bdabfcb0411e2d7eaff03aed2c071ca59537c3e34fadb7e5ab66ad0e9f21e1f9aa2a65df67cacc92521a546b2cdd70b1d31caad9d2e93c8e41d37104c5fb924460a000da705acd14f5468b4f7a5f1ffa82829289b30e6d61b9b51ec3d05f988f6ea7c8c545e5b956237b674d4dc8ab473279e721443ba5d45fa5ae9e5bdab1c85602d09decc4452a9713f2d23b9b92d9872298d3f954dd98d6d888aba01e419c4c5b5ec36a85ba8fbb6fa5115a812acabb0f3826345d3f03779f504884ebd547e0a085c06d3c336b1"], 0xd4) dup3(r0, r2, 0x0) 06:04:43 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xf0ffffffffffff, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1112.020711][ T2843] block nbd0: NBD_DISCONNECT [ 1112.025417][ T2843] block nbd0: Send disconnect failed -6 06:04:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffff, 0x448040) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={0x0, 0xff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000200)=r3, 0x4) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000100)={{0x2, 0x4e23, @broadcast}, {0x307, @dev={[], 0xe}}, 0x54, {0x2, 0x4e21, @remote}, 'bpq0\x00'}) 06:04:44 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x100, 0x200) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000180)={0x0, 0x0, 0x81, &(0x7f0000000140)=0x4}) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x7) 06:04:44 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab09) 06:04:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x80) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) close(r2) fcntl$setflags(r1, 0x2, 0x1) [ 1112.333512][ T2873] block nbd0: shutting down sockets 06:04:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001af) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:44 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x100000000000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:44 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7, 0x8000) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) dup3(r0, r3, 0x0) 06:04:44 executing program 0: socketpair$unix(0x1, 0x40000000000000a, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) r3 = dup(r0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000040)={0x3a, 0x6, 0x0, {0x3, 0x0, 0x11, 0x0, '{em1lolonodevppp0'}}, 0x3a) 06:04:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x2000) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) connect$llc(r2, &(0x7f0000000100)={0x1a, 0x0, 0x2, 0xffffffff00000000, 0x0, 0x1ff, @local}, 0x10) 06:04:44 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab0a) 06:04:44 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup3(r0, r0, 0x80000) [ 1113.043607][ T2890] block nbd0: shutting down sockets [ 1113.054662][ T2885] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:04:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400201) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x1}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="213189a48381e3496e6cf1e9cfa891f003cda472abad06a5a44ab6ce86bb679895ad6ffe62dd6359921c6e73d65aa8b1ef45", 0x32}, {&(0x7f0000000140)="a2104c20a4693426632f1aa61682fac590bbd581a492266532b498b223ac6f6010c300f8e2c0a04a046023960ad4ebc71768396957fd164e418c1a0e5f5607bfbed8e140a9c75e3a1a7e66cc88b3ad08139f6f0981b83d5b517bd92e2635041407746ecb5a4dc1ab28dfede21ae9d181cd6f4620a6a67820a61f8a2c2b30233e8fe989052f04820ddecaf981ff79529fdd34c7292ffe11b2433b4f1645ad0339a46d2ca49111f8d3786b029330fdc2b37a1d46f2d47d03f9a491e28a9f461a61e261dac842adb16971bdde6f38ce20f0", 0xd0}], 0x2, &(0x7f0000000280)="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", 0xfd, 0x94}, 0x0) close(r2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$inet6(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)="31b8d31b2db0d9afc6c199c4347a8ca8c35a27c7c4aa2e3f42f12e47871235d91684541eb63a02435cdcac0fc2f8dd0d18ca896dc5d76c619c910b6c", 0x3c}, {&(0x7f0000000400)="e29b4d7b54df0ea50180d5ab373c80711b531a6d136e76499e9d4dcf8e466fb00d36557461376f7b835dfa1e1b5e9b78d1a3200651de0ce8c4f604a1a25df5caada7b82f6cc9744865c30d04c3cf61889fbd66df962be98fd0f5f8e1da2d587fbcaff78b7f4dd0232a47de7f77d57d52b4241da9dd2e0d6507e0d253d879bf91af8cbe977645609481c589287511b4d1c416f78fc22005653ff91c2da40c347358991dcb5689841803036623a2dd1bc6be083e", 0xb3}, {&(0x7f00000004c0)="7e03017f64dd6ba87e87cc8b0dba99e3cba95ea4c3f7337d737c7f406a5d4048d241eba8993a04c6c7aa8a6a76d4440db77eab423b96c02a11b17cf37766b6f87e7db0f4c64e69ee3130ac2e0850aa97c3fee892022d04d569fa20a40adbad7c69e16bec976bba34685757a8c64965fd4a48557aba6c019d5fb80a8eafdc08b03b086586e13b91fd59d18efe4f3727e4db4c0f6ccaaf5824b6ec94a7184ecfa6", 0xa0}, {&(0x7f0000000580)="68695980674542f75ec92fb09614b956e31ca5bcdecb917152add468de62ba47efb98b2aaaf081a31865b0952089cf43465314a38ca46c834e3db28a1a18fd3c53d4bfd6da0402d792e922816f30", 0x4e}], 0x4, &(0x7f00000006c0)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, [], 0x15}, r3}}}], 0x28}, 0x10) 06:04:45 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x200000000000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:45 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x101800, 0x0) ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000140)=0x1) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) 06:04:45 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab10) 06:04:45 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x3, 0x2) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000280)={0x8000000000000000, 0xf000, 0x7f, 0xd, 0x20}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x300, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0xffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000) socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) r3 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x0, 0x840) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x600) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup3(r2, r4, 0x0) [ 1113.353335][ T2912] block nbd0: shutting down sockets [ 1113.361334][ T2913] Unknown ioctl -1073462520 [ 1113.413571][ T2916] Unknown ioctl -1073462520 06:04:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001b0) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:45 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x300000000000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:45 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x2020000191081) write$vhci(r1, &(0x7f0000000200)=@HCI_EVENT_PKT={0x4, "198321924d6200ea799567d5"}, 0xffffffffffffff49) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1ff, 0x400) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x100) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000140)={0x2, 0x2}) close(r1) 06:04:45 executing program 5: socketpair$unix(0x1, 0x808000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x80000, 0x0) dup3(r0, r2, 0x80000) open_by_handle_at(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x80) 06:04:45 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab12) [ 1113.966195][ T2930] block nbd0: shutting down sockets 06:04:45 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) 06:04:45 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x400000000000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:45 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0xc000000f, 0xfffffffffffffff8, 0x2, 0x3, 0x7, 0x7, 0x9}]}) dup3(r0, r1, 0x0) 06:04:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 06:04:46 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x400454ca) [ 1114.146410][ T2948] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:04:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xa02d) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x1) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 1114.296737][ T2957] block nbd0: shutting down sockets 06:04:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001b1) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:46 executing program 5: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x101040, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000100)) dup3(r0, r2, 0x0) 06:04:46 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x600000000000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:46 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x1ffe, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x10001) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$SIOCNRDECOBS(r0, 0x89e2) close(r1) 06:04:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0xb6b, @mcast2, 0x81}], 0x1c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000180)={0x5ea6, 0xfffffffffffffffc, 0x7fffffff, {r2, r3+10000000}, 0x8, 0x7}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x40000) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r4) 06:04:46 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x40046207) [ 1114.996555][ T2973] block nbd0: shutting down sockets 06:04:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:04:46 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xa00000000000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) getpeername$netlink(r2, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = epoll_create(0x947) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000001c0)={0x0, @reserved}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) 06:04:47 executing program 5: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) 06:04:47 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x40049409) [ 1115.246108][ T2993] block nbd0: shutting down sockets 06:04:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x400100, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000001c0)={0xffffffffffffff81, 0x35323645, 0x3, @stepwise={0x6, 0x9582, 0x6, 0xd7, 0x200, 0xdd}}) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0) accept4$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14, 0x80800) close(r1) [ 1115.271480][ T2997] block nbd0: Device being setup by another task 06:04:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001b2) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:49 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth1\x00'}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:49 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xc00000000000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:49 executing program 0: syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x2002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:49 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x40081271) 06:04:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x121a80, 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0xe911, 0xdf, 0x3, 0x7fffffff, 0x5, 0x20, 0x8, 0x3, 0x1, 0x3, 0x6, 0x20}) io_uring_enter(r1, 0xffffffffffffffff, 0x7ff, 0x1, &(0x7f0000000140)={0x9}, 0x8) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000180)={0xffffffff, 0x1}) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x1000000000000000, 0x0) [ 1118.131699][ T3017] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 1118.141636][ T3014] block nbd0: shutting down sockets 06:04:50 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xe00000000000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:50 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x300000000000, 0x0) renameat(r1, &(0x7f0000000140)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x880, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f00000000c0)={0x7, 0x4004}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) close(r4) 06:04:50 executing program 5: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x40049409) 06:04:50 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x40082406) 06:04:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x1, 0x2, 0x8, 0x5, 0x3, 0x3e, 0x8, 0x281, 0x38, 0x187, 0x100000001, 0x20, 0x20, 0x2, 0x7fff, 0x4, 0x80}, [{0x70000000, 0x8000, 0x10000, 0x4, 0x3, 0x8000, 0x1, 0xffff}], "71ff719b42f0e899378673f2341817f73d98c184a1ed7b140fb54431b9c917e22d05eaaddc44498c1f73c7c5f26bb421eb22503ebfb5b9e3218a24768c7e9a744c7d4dfdc103e55df7674ce50233b2b485ce9e0bbda4082c900654531f5a23a210df6817cc5572dc83ef0a6f26a2cc8270a94cd8a296e2e08a046aec852dcedf3fc05a4041068d6bb1fa1ee30b46d2d53a6e923dc9aae3353f73b17a85b8432577c385aed57a9eeb009f8bec8250eb52f9bc63c9a137320a3d6cc7ff41f5b82d428d074c5fe7cc565e19749924c3752735d04c7c603e49e46a", [[], [], [], [], [], [], [], [], [], []]}, 0xb31) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x7fff, 0x4) write$vhci(r1, &(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, "79f60d29b9b97458da9585cbf87478b0344cdfffa8d94420097bdc690e5d2a32d3b05d75c126b85d589056d7b413a58c99ce119abb831a2f74b4cf04a8e652322dfaf4e857f825d1cd4ac0ca06075201935562c4e6f9779dc3d4d524bc8b9511099fdb8f1f9a591027179c564b160dd5591d57b9b59d58d2b6b8c72d3faf67e44e7f2e03960e73e3d8ea68400772fa7dd61402c71b"}, 0x96) close(r1) socket$can_bcm(0x1d, 0x2, 0x2) 06:04:50 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xf00000000000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1118.421691][ T3036] block nbd0: shutting down sockets [ 1118.444509][ T3037] block nbd0: Device being setup by another task 06:04:53 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001b3) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:53 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x8902, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x2040, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x20) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80000400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write(r0, &(0x7f0000000000)="6e28c52dd34a5089fb146ff88094cadfe83af3e880c933", 0x17) write$vhci(r2, &(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0xfffffffffffffede) close(r2) 06:04:53 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000040)=0x40) close(r1) 06:04:53 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x4008af60) 06:04:53 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x1000000000000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x121a80, 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0xe911, 0xdf, 0x3, 0x7fffffff, 0x5, 0x20, 0x8, 0x3, 0x1, 0x3, 0x6, 0x20}) io_uring_enter(r1, 0xffffffffffffffff, 0x7ff, 0x1, &(0x7f0000000140)={0x9}, 0x8) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000180)={0xffffffff, 0x1}) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x1000000000000000, 0x0) [ 1121.256569][ T3054] block nbd0: shutting down sockets 06:04:53 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x3d0b000000000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1121.286118][ T3053] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:04:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000140)=0xfff, 0x4) close(r1) 06:04:53 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getegid() r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="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", 0x1000, 0xfffffffffffffff8) r4 = add_key(&(0x7f0000001180)='.dead\x00', &(0x7f00000011c0)={'syz', 0x3}, &(0x7f0000001200)="a72637a8c695394a2a962841622506e2b89c2bad95a464b3fb0753ee6a5a199b5a0d354faa438ed38053b7e55a4bc3263ef27def979e0bd47b9f8f77b145d15543ee44ecfa809170150a2201bf77e779b8af130c09f5629fbd653573e16a84a2bc235ddee0838e81d56fdbed648f4da5d0627e5879685953fe653441393cd6e639b6cbf1f93587", 0x87, 0xfffffffffffffffc) r5 = add_key$user(&(0x7f00000012c0)='user\x00', &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)="a65e07b6c6a02788592f09b485600758b34578b010215ac2dbe21c6543043856007747d63fb95ea763bca7575a54df44c190cdcd02", 0x35, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000001380)={r3, r4, r5}, &(0x7f00000013c0)=""/4096, 0x1000, 0x0) read(r1, &(0x7f0000000040)=""/12, 0xc) close(r2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000023c0)={0x0, @speck128, 0x2, "bbc68ccb689aa875"}) 06:04:53 executing program 5: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000100)=@ng={0x4, 0x8, "bdf86feee4d13e4a83"}, 0xb, 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x0) clock_gettime(0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x14f) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) 06:04:53 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x40101283) 06:04:53 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x3f00000000000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1121.563625][ T3074] block nbd0: shutting down sockets [ 1121.581364][ T3072] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:04:54 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001b4) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:54 executing program 2: r0 = fanotify_init(0x4, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 06:04:54 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x4000000000000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:54 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x401070c9) 06:04:54 executing program 5: syz_emit_ethernet(0x52, &(0x7f0000000100)={@random="6b47e06adc9a", @local, [{[{0x9100, 0x80000001, 0x5}], {0x8100, 0x1, 0x403, 0x2}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0xf402, 0x0, @empty, @multicast1}, @tipc=@name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) [ 1122.292359][ T3102] block nbd0: shutting down sockets 06:04:54 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x6000000000000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:54 executing program 5: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lstat(0x0, 0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r0, 0x8) r1 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x3, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000001c0)) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 06:04:54 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) fcntl$addseals(r2, 0x409, 0x1) close(r2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$RTC_WIE_ON(r3, 0x700f) recvfrom$netrom(r3, &(0x7f0000000140)=""/170, 0xaa, 0x10000, &(0x7f0000000200)={{0x3, @bcast, 0x2}, [@default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 06:04:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0xff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0xffff, 0x30}, &(0x7f00000001c0)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) 06:04:54 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x401070ca) 06:04:54 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x6558000000000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1122.605136][ T3128] block nbd0: shutting down sockets [ 1122.614538][ T3129] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:04:54 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x8100000000000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:55 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x401070cd) 06:04:55 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x12400) fcntl$setstatus(r0, 0x4, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 06:04:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x63d, 0x80000000, 0x4, 0x9}, 0xffffffffffffff4d) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x76, 0x8080) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x1c, 0x1, @ib={0x1b, 0xc97, 0x2, {"3bf2ce8c6e60a5d91bc8bca0b267c502"}, 0x7, 0x8000, 0x7}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000340)={0x11, 0x10, 0xfa00, {&(0x7f0000000100), r2}}, 0x18) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000240)=@nfc={0x27, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000080)=@vsock, 0x80, 0x0, 0xffffffffffffffdd, 0x0, 0xfd36}}], 0x2, 0x8000) 06:04:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001b5) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x24080, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) write$vhci(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0367b2aa19a10a147b6c807ea95eaaab9789b929d5bac7a50ee8cbedb25d44b600934fe37c2ab3c936e05d4dfcd80999bab016db9e26a58b61b8f61985e43f401342240cecca1d37b28beda36d94c4aab86445d0aa494a2d61b429e3cf3deb073432525d6312961c0c1ce50414b0f1f217416608ce76a8dd20e9fc93db75ce19517442b59bce18578bbefb14f800d4be954528f0754004dc63f57addb092d6cfdba85000819d2dd0d7c0ea85f76c565ad126bb7b5735844fcb12d515d5449abaaaa8f473df3063e8ac07db689be6c8277ff5e24470fd8320df28ae18d1aa5801dc5d0d28a7720559e311a1e71d7a9c8d6af07e6cc428"], 0xfd22) close(r1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x1f, 0x1, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) fcntl$setlease(r2, 0x400, 0x0) 06:04:55 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x88a8ffff00000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1123.387702][ T3165] block nbd0: shutting down sockets 06:04:55 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x9effffff00000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20000, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ppoll(&(0x7f0000000100)=[{r2}, {r3, 0x48}, {r0, 0x40}, {r1, 0x50}, {r0, 0x4}, {r1, 0x200}, {r0, 0x1000}], 0x7, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={0x7}, 0x8) 06:04:55 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:04:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x45b2, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r3, 0x257}, 0x8) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x3) close(r1) 06:04:55 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x401870c8) 06:04:55 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xf0ffffff00000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:55 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x1000000}}, 0x18) [ 1123.602857][ T3189] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:04:55 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) 06:04:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 1123.749711][ T3196] block nbd0: shutting down sockets [ 1123.859113][ T3214] QAT: Invalid ioctl [ 1123.937504][ T3217] QAT: Invalid ioctl 06:04:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001b6) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:04:58 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xffffff7f00000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:58 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x1000000}}, 0x18) 06:04:58 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x401870cb) 06:04:58 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x42040, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000002c0)=0x4c) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087705, &(0x7f0000000080)='\x00') r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0) write$vnet(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000140)=""/187, 0xbb, &(0x7f0000000200)=""/44, 0x1}}, 0x68) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) 06:04:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x6, 0x1) dup(r0) syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x4, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x101080, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x100000000) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r3) r4 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x4) [ 1126.484550][ T3222] block nbd0: shutting down sockets 06:04:58 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xffffffff00000000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:04:58 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x1000000}}, 0x18) 06:04:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x183) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x8e7, @ipv4={[], [], @rand_addr=0x8}}, @in={0x2, 0x4e20, @multicast2}], 0x2c) 06:04:58 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:04:58 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x401870cc) 06:04:58 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0xfffffffffffff000, {0x0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1126.804504][ T3260] block nbd0: shutting down sockets 06:05:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001b7) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:05:01 executing program 5: r0 = getpid() r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x82841) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x141000) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000240)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb, 0x0, 0x1f]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 06:05:01 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x2) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm_plock\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x4000) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x400680, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.origin\x00', &(0x7f0000000380)='y\x00', 0x2, 0x3) dup3(r1, r0, 0x546a832b28637bd6) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) close(r2) 06:05:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:05:01 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:01 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x4018aee2) [ 1129.594339][ T3285] block nbd0: shutting down sockets 06:05:01 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x3, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:01 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0x9, 0x0, &(0x7f0000000040)=0x237) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000340), 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @empty}, 0x10) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000400)="fa29d475f50c5dee0ea43bdb5fcbf604a97158e1ade7c5f3c76900262945d4959ac026dbcd08de4eb613057402bcf50ecff1814bb2b485ea05367147b1f4603b2e3f4637f074ecb2e4839a67870e55e5463a506773bada7f7a9622799aa33f48256e446938ab514c3f1f0ad1fb0314652d62b61d21a3db9c8eb3450f2b628899e637d2699cc595fe26e357a70b31ca8dd862df2427efc91d7148d747c883db72", 0xa0}, {&(0x7f0000000080)="9072c8995d076e960ca06b01666fcd18658f0992f99b2be8893197fd0fa9a31f3418fcf2b5b80a3f9ecd546563de96cdcd8f9474ee6c920e9e338b793057b6da98bf9599d217e737906c", 0x4a}], 0x3, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}, @dstopts={{0x168, 0x29, 0x37, {0x1, 0x29, [], [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @loopback}, @generic={0x3ff, 0x8c, "858240df042b65fba69624746e94622dd530675b5774f142ae112b24dd602a10ee240f643115098696dd0eeb07e7fe7db76cca89db9e86177887a37f2e659b25cea0d5c536288f0372a1068c7c16a35d9e0ab8e55ec91e52a15bfd6a6bc82f1f21b6e534ee330d6dcf199885608f4ec3756b7f2b87fa6b155419caf152ff851737f47cf739ea6cc96b8e61e2"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo, @generic={0x5, 0x7e, "9adfc57e49e982e03099b04aea021fc429f29eea1a45efd08c612663c67a2f04c0243ea91a5554b1b54ade6126d4f7f13df71da3db6ef9b8f05d0964781a582dca5d92da800f6fd854a3078d8fea3c36212553fe91715bc263dc07c8f9faaf1838c99b0db70e35de781626820572ddec04cb300424c751404455cc5f773e"}, @pad1]}}}, @flowinfo={{0x14}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x6, 0x2, [], [@ra={0x5, 0x2, 0xfff}, @hao={0xc9, 0x10, @mcast1}]}}}], 0x1c8}, 0x840) accept$alg(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000005c0)={0x0, 0x800}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000640)={r2, 0x800}, &(0x7f0000000680)=0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000001c0)=0x1f, 0x4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="0f6406762f6d643000"], 0x0, &(0x7f0000000540)='anon_inodefs\x00', 0x800000, &(0x7f0000000580)='vmnet1em0\xa2nodevGPL\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknodat(r1, &(0x7f0000000500)='./file0\x00', 0x8, 0x8) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r4, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r4) write$vhci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="156404967905e8d618bfec82280fd22cb5c4c513fed2c8d1be1025f51435d07270b3c84c2f2477b6295aa5a6055c79490eb0007bbdd81c46d393969fc7c500000000010000004fd321379f49a3b0a0254df71912392facfd2aab8b4d71"], 0x5d) 06:05:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x20000) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0xc0, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:05:01 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x401c5504) [ 1129.884103][ T3307] block nbd0: shutting down sockets 06:05:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000100)) 06:05:01 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x4, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1130.049581][ T3317] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 1130.174318][ T3320] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:05:04 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001b8) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:05:04 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x4020940d) 06:05:04 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x6, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 06:05:04 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xa240, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x22000) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40800, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f00000000c0)={0x3f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000140)={0x5, 0x2, {0x2, 0x2, 0x0, 0x3, 0x7}}) 06:05:04 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x48, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xff000000}) [ 1132.712627][ T3339] block nbd0: shutting down sockets 06:05:04 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:04 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 06:05:04 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x100000400000003a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) write(r0, &(0x7f0000000180)="00f30000", 0x4) 06:05:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 06:05:04 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x40286608) 06:05:04 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x145000) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xbd070c372f0a5708, 0x0) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f00000000c0)) close(r0) [ 1133.065834][ T3375] block nbd0: shutting down sockets 06:05:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001b9) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:05:05 executing program 5: r0 = eventfd2(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') sendfile(r0, r1, 0x0, 0x47ffc) 06:05:05 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0xc, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:05 executing program 2: socketpair$unix(0x1, 0x22, 0x0, &(0x7f0000000100)) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2000, 0xa4) syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x1ff, 0x20240) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8000400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0xffffffff, 0x204000) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000140)={0x0, @frame_sync}) 06:05:05 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fgetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f00000000c0)=""/55, 0x37) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000140)={0x8, 0x1000, "f84efda6b09f0cd26113fc09f5e515638307c0c210e6869192a6e578788accb4bccbaf36b1a650906ca5d98f5db62e88ca308de1c502534632c67d2c3976729a0139a26d4fea3f3199858995b769841c9a12bcd5b2521306ed2b93c5345dc7fa812e1519d32faf2c98a5f49627851cd7c8e591176ed28e3259f87bdc8ef3c7df5c3053c5ce5c94affb130fdec9ef945ed2bd4de70d88c1d09dd416ad2ed33ee6940d0e5104d38359ad3ab39bbd823300d26c2606e221752964a8005eb6c257667c52d3e072a0e6660b695f82b92507fed2bea39bd6845c15109136f0ac9ba108c3415e22f4cc789cf59a9d57c699dbc30ad57be97b4138660e43bc379311c32191f752eb563455a4bb5357f6b00c397547409ddf7ffd42d35ab5138be85f2c1a8ee0198e1857a9189fecac940c7f95040f24ad4d611d1e98da4b16c7379c783e5b61fb7b5abcd61584df7099bfe57208c00c73174d3551f7aa12f6ea58b6ff11db95865fa772acdc2aa63521639ddeaface86d6e73db89351cebc96821c0c27163486563f0dbc91b10549eae85df04acc8007daea74c9447e2697fbb431e606c1bcb1d489ccf10ce2e37c7d092943a116f75f11aacc7c6f2768c5408e591c3849e8ee208fe9b7585ce287707a36e0eb68d8b5c696223ca30a42b23292103c2f5d94818621077fdb975946564888dd335cc0695312a90a19609bdc489ebfea786f476224ec08e2392934bc2de4655dc75cf2472dac0831013071360f1b03d2f33f42e67be17c1b68377e089c009cc4a607f165225dbf852407950c3f4cbce2ce69426fc1a5f68d7791740419de089d438a9a8a2c32b6606dc96d6415c88f7996b56bdb323b75907b20aa61cecd06d1982199c5796452d033e83101eadab30519b7b5b1f1f14c46cf6dbf67b261e4f488ca1f02a2a664322fce18e81d725f77a06e56b6dcd98e77e2ecd6bfe3724c83bfb7fd7a0d09aafd6fdfac1fcfc2d5a8fbc3f848ec44a5bf45e986a227b8d02698c692fa651da8dcdcf7d4a0405fa6a4d6ae6e1502bc6f6d3c643b40aec18b56295b2273025ebd2489a8e8c419337c7746843db589a04aeea4ed1bc58820b1eff7af21a7c057036b7883a93aa79a09ebb59c7a205e47ba6ea1c7d66951917b73b02f297ca3e4274d7c715aed0355babd40ea1de3946f2549447da16a8898da79237bb100f775c98cee6bdd378d5aea4ab6630fc94f8f7810bc22fedcdf268c16de1abf49d3220f92d62681e32044cfc87a863322a70eeef46a22b2fa42a2d413461bf28a8803d335c4641f2bdb3c3978da3ee9d6c85e73c58a6db512741bd97003a135982bb02eade2840c35556ee23d9179005374842478c01a42fe3609a0b093ba4adf3019fd491104a61d3433c5074ccd5cf93972ca3a9de241bf889e5ff16166a6390f8775b3eb52fc36f4e0b79227d60d06fccf5fca077d2555dd42771d8e3dd34f50561cba060da26c53e14cfa29d08d4227ba1e6bb86b0b19b4de7ae5449e4240c680845d78f48a090b61dd9ac154b0afadbb6402d4c5b7a1359c32fe0a114370f64d793eb9d059f9f9388352d87adde5fd0067f2a61317fb2be2a8b1a7a8ba2d6557c089412d58fde7d2f98f4621012b2b4f4d77da542f1de3bd0965d07bfb5580668412fbff3ef236ff95927c987bc4207e914ad7387828f9e3c97d0374c906098ecee18ef7c1daeb039570257f7c67c39150a9de9cf5cb026c407a6f3b3e89c7c7646850f11c2dc8e90eba68596c3cc08c60cca6c06c587f29384dd15bcfffaf9da4e9f8a6da6f31e815f06fc81d83129dff5890c202dfa94164674a15401a1097ccbfa9b39cf528b2eb72d18686cf84061552938cbfda253407d5b0ccdaf25fc086fb639d0b5b796b835193a2b354fd25edb0b1a43528ca86c7f6e5f3c7b30e6adffdbbcd99d0e4a203797247c6dd11413c1e2bd5a5d21abb187af1fa129e4d007bd0765f5dbf8535ce6e4e11c918751fb662512796aa9f6356b9be7f9db51f528cb9f9253132639e7a4a4fee5f9fc4a5afd8909d69c78b1168c90e2da97339ea0b7fa6a4700583e43e8fd0033e1895819f8b048dc4a0f1671a638ad4b95f99d33426d05070160fc234bb00a25dd588b6cbde9b13eb5ed0acfc54d66ad3f440a3c22530b5ec4784b892028ccb32985e23633f57bdc95e8b0b58299195603933313bd1ec9d07684e9b8f05e05a78c4ae35008cc9eca1c2fec9738f2d2c65c6e9814f266739a9f41dea3b44a31dc604652a0b24edb54c93f9d95cf4b839ebc2dc72d9c913bdeb3a097228ffccf30ab4725e34e76ad12377136bcf91b7558727232dfb422bce3209c357a5424b8f4c4a485b7c244b8169029e001b130c90529f98f96d2f56db20a21c6cfe180e6f2f4b607355618fa0d666ce968c846b935f55ed3de459b8ea9762f00e743133dc03968391eca192ceaf9bf82ca5d6289a20a360661ae0b85d7bbc73eaf660849c0fe49ed74b0e7aff6e53d309380536fc07de3c1cc9b7ddda06225e763f78ed423f0472d1ee996db8eee63b5e25958755c14c171d04f2272988a452107b8d991dfd23da93db1a7ed25809d48f15fe311ed4309c129d617dd61a7aabfd83ebd8996936434a4de5f6d392291d46381ca0730d65921a1403dbb8248e7c1fd9ccccc5ccfe50cbdb6a9b269d947b7de963051d1d1b5c4f1dde9af7d64c29fedea1184e251b2d48709edeeba8573ddb2d660f1681ac1adf46efb146ece26e1151beb5bfe55fb576ba2ed39c03eb38e453e41bd6122db63061112f2981cb18d2100ecc22707097195c002f5ecca21e1889763b567a40a6ff7252f0f08e34c1c69af3f7f1a295b326c86c084f080b1fcaa4a4d022411f472b913433bc31d1f24d5387f3869bcc83ebe55a5547918143c73f4d9686b568fe7e51954dddbe62ca69de0598b56e66ddb698097ffbca7a1b6c840662526d97071ebaab7aeee867cc094a16909ef46ce757e138856934eb17a8425a56ac8db9da157f7eabd31b16d1af58c4d7e30b5b88f5496bb19506af99d4396b622d0f003f9cadb807929edc200a73c9bd7dd1bb406ccbe7bb3cbac5059d8e0bdd7e050e9c6c6ed7c878dfc641792fd073c52ae6c615f434950ddae6cbcb0619e89182b1c29f4fcdeccec61d6d51d410e7169a948beb27dbf24290a526d863d7645349a39e926b87de61688ff9c35ad4f57790c2ac1313bde46a031c34ecd997845a813b9f20562f4728f124781de2b3140f7da1929c9d10e51a2300788ed1bf2b52ec78fa78359e44ecaa919fc7f873299a2d490adb2ff463ed79b69f704ff69fc958decce8974066eba83e6511dd189262370c6e522d35aae942cb70f41e7112986d3089a10fcf028b9b836157113f9c85b0f08bc8aeed378ac956650744d01aa93f12789de770853a4958c00551d2895f50e9940aa71c8a6f9c636b35f8a4e891be6dcdedde49cdc5b766c28979569546b45858ea5255ab6aa1fd0c7985d043813abcf0ea29cfecb98c56f69597d2dfb59fd38d9df9daf47a53418b46b4e93df421f6d3a9b9b2d3c88eba9405898c15896e76ec1f213a6386c8965b273959fb8713bb91f2f2d504c15c713d969b8f5779aa46b2495f39bb4b142a08cbf1fe89262d33e1f3bdbc3a76d53be2988d9de19bc37392568864fd019ec8aa293e33c993eac4388d3e20e4e2124b7d2a6437f8426f1bf59554af9f6ef6b80909c6bd3ae3817e27ff9650f1ecbb3518d47c0207ae54f11c7f0b5506941cef4aa094b7b651feaf7eed5deccae5fd83b0330ced9589001cc91097576c4fb464c5541bb424e6e657f85eb6120b72c7587cb54c9933dcfe95b5bf1653b2f2b0df1f04d3c00312f08e6dc868fe38c67173ac654e5db34edcc3b24a45db64e369162b3000f9ffeeb5cf603b56016d8356835bff1072670faf7263af9174ff8e8d94582201570a2a97fad35af6f9b3434d0a0f7b07ad2f166dd9c1962797d2efa8184c43a08420da3b7cd602073bf87158717bececd90523cab91f09dfa00edb1c0c14466ff1e13b3f6215fdde66c66591889c04fe33ab6a6686d75c4b129af80e572846c1f882897dfe3c4bb49bd890836ed5ebbcdabcb895141ac5107b6b14ed33b3ea839764e4175f69420d5041b125bca74313ce51e39af97a9ee1c1da349c8d040039acb6fe57dd0560610e43148e1986926cbe266bf354aa158460fb4e3e485c8b366f31a10d8846b58e28ef5e86122630347055b4138c471cb59088f21cd67ae14558f6f261555199cadb15be3c292b8d028a5940d849da1747d06109f6b1b944a3f904157d7d5031f95f4aa6f5401dc178969dbe82e0e525a0a25455305983954b4b2e59c36eb3eb6604416f36aebdd4168039c0bdb91adfdcfba64bc2e3c830d61acd271a9e52d8cca3689d85b0019dd2858b4fa22b71373831ed8efbecbfc56ee9babf160879da214fe3e7693bedc3d629623cc020479b756fe6ecba9c3ac7da45f0e9ec8717c8714af24050cfcc417875332867a9a5e1a70a61d079dfd5d576ed623ca7d386b8bfd6a3fc7009b7683821ef161a5d625a10006d49dc87234d5fa791a7da1b443076864db683571cc89d3e0d869229f7521a84bcfc3dd0b2cae7fad244538269950970867685dd1987dedae2070f3a65f8f1272aca13017d474137714f98d098803953433852636705ede7d602bb233c7695bc51fb761454f1917bb98e3ce0b94e23e968c5d8dccec1e30e8a0b1d85b909c6caf7ba8561debece166eef802df460d14a8efcdf1ed2d8a33d2a7ca97e4de45dbc31f621ddd202f4eca0134a85766820eb853a990b67b7728e001898e79ea161f43f9c0fa58f8e480703adb9a6225ec77dd14f6e268917a0df69cb930b80e77880160e4c65163c4369a0728a7d9774487d6ff36915d4d4092257c8c38f2fd1db5aceb243a8508960cabb6d1446a916f5e890f0a8a262d0181c5026bbf4d054bbe19b2aea4731a060022214e60b6c04a26c35e2b8e513d68939ee7d3dde214b66d3a5130389dd432485d939d4049ac6f7343bb8e3a9a3e9f56793649432f61ce134917170aefe9d651f98e38b01e8ba9f750ae81d9c449961e73fcd0a740d6eeeacdb85ac53ce042ae9f0eb606f1f73e4ec7933e3b0eee149275747295a453c31425475be886386d1b75297fa09b04743985327463faf4aa9829b23042fbb270a8540b5941c90a30290e7d3875cd304a5b363664acd89a60e81c7c166c4760f5a6dc9a42336675f327e067459e5d44d8ad11dabce5e02e8b1ceb9429e0bb4cfb635fc6bd028db33cdc3d17dc14d694111bf4227fe316c26b2d3077b9d5be22e76ecd54b8cd36a4d1618f64cadc3cd51afae31ebeab698ba15932a99be9bed131f043cbfc28eca9ac3fb768640c486e1220ad0252ccaf2157513abe397366ebac7548e083006e6f381871f7d8fe8736ca32efb14c88d779bdb62a63b0d8254034f5c7138b8d0672c94443b835f741906df65236152c5db9cef0ce10015c66810ab0fa69c3550f83018ca66f017c1ea7e8f847aa6e9159e417ea7ca1dbb367055f39593d93b9b3140c65310d813cd7ddf00635b299252ee83b18cabf5593066a9cf9d6de8c8198c57bc7d6147ef5b355759d96a98b3061f1a9c5ceabff2a7da31f9ccd73f899050f7d551e1f3d81463e5bb3b60957747e04dc1cdec7a656feecb45515b51dd7dcfb42db670b121cfbaa99c582c437215fb1b1c8fd489483ebb35d1c5bc7e5100e2dc13b605b517561035907ef795c5a762d3bd1bb43"}) 06:05:05 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x4030560b) 06:05:05 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1133.810397][ T3390] block nbd0: shutting down sockets [ 1133.816236][ T3392] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:05:05 executing program 5: userfaultfd(0x0) r0 = eventfd2(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00\x13\xcd\xe8\xe9Z\x02\x12[x\x99e\a\xafs\x95\xbbv\xb2\x8f5\xcd\x05\x89\x7f\xe8w\xc2\xc1\x9daZ\x99\x16\x12\x85O\xdb') sendfile(r0, r1, 0x0, 0x8) 06:05:05 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x40345632) 06:05:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x2, 0x2) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f00000002c0)={0x4, 0x9, 0x800000000000}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x86001, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000240)={0xa00000, 0x2, 0x9, [], &(0x7f0000000200)={0x990afd, 0x2, [], @p_u16=&(0x7f00000001c0)=0xffffffff}}) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$FICLONE(r0, 0x40049409, r0) close(r2) write$vhci(r2, &(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, "9a64b34938fa08ca9664f43bf31bace3794a52ecd4deeaa19f56e074da4ddd851491597f5c6e494132b20a079138ebae20ffbacf69ce700cea653c75533763ddf9438824347b779028830e8d26e2edb0b48b2a85fb630fb8a160d4102c53c38c99b0e6aa160deec2ef42daf7247f1ac6a0a72d2b3dcf26cae5f1167869fd4c6a81f1d3e3d4624da257fd95169064e5ce9f"}, 0x92) 06:05:05 executing program 0: socketpair$unix(0x1, 0x40000000000b, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@datasec={0x1, 0x1, 0x0, 0xf, 0x1, [{0x1, 0x2}], 'N'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "61e6cb"}]}, {0x0, [0x5f]}}, &(0x7f0000000100)=""/213, 0x43, 0xd5, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x80000000001) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x301042) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000000c0), 0x4) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:05:05 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0xf, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1134.043197][ T3413] block nbd0: shutting down sockets 06:05:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001ba) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:05:06 executing program 5: munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000004c0)='./file1\x00', 0x100000000) fstatfs(r0, &(0x7f0000000400)=""/128) 06:05:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_setup(0xb29, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2, 0x22}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) fstatfs(r0, &(0x7f00000001c0)=""/86) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x8000, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000180)=0x395c, 0x4) close(r1) 06:05:06 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x404c534a) 06:05:06 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x10, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:06 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000140)=""/190) [ 1134.841033][ T3437] block nbd0: shutting down sockets 06:05:06 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x60, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1134.872481][ T3431] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 1134.882550][ T3435] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 06:05:06 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x40505412) 06:05:06 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000140), 0xbbdd6aae4e4c1b1f) close(r1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2000, 0x0) connect$rose(r2, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x2, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) 06:05:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x400) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:05:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) 06:05:06 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0xf0, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1135.108866][ T9760] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1135.165014][ T3464] block nbd0: shutting down sockets 06:05:09 executing program 0: openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x3) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:05:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000100)=0x3ff) 06:05:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001bb) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:05:09 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x300, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:09 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x80041284) 06:05:09 executing program 5: ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x313, 0x3}) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0xff7ffffffffffffc, 0x0) pipe2(0x0, 0x7fc) r0 = dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x1, 0x1}}, 0x80) prctl$PR_GET_FP_MODE(0x2e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) getuid() prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000340)="5d5f43a474c40329b5fbcff1d0675020e456e97c329ef11fad7ec67f4b3619c519011f62595720bffbf698dfddae62eedbfa8a21b36b8315cd93d85e1b2a84a3178fb56f85583d67874b55c9c6d979064684265e748fdc4266429f0abe7996bdc73dd77f3c6d45210a2d39a7dd6be3d15702c83ad90db590a2dc7b9b52c9fa8b3dd39941b478ca2a199bf9335d1221bd83c891fc0046e39bddfada9c2edeed9706306d595ad965eef444778115f028c18046906c06fdc189c505a37cdff5134a5f51d9eaf794bbccaf8e575365b9448c5803de88eb4aadf6db1e449872b77ced162a9e3a33bc8d49bf6390794fd25e5ef6", 0xf1) [ 1137.959501][ T3479] block nbd0: shutting down sockets 06:05:09 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x600, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:09 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) sync_file_range(r1, 0x0, 0x7, 0x2) 06:05:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x483, 0x0) close(r2) 06:05:10 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x80041285) [ 1138.230753][ T3503] block nbd0: shutting down sockets 06:05:10 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0xa00, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454cc606050700071f000000000000020000000d0000177b0300000008000040000000009ccc5881710010007302553a0004000000000000001600"], 0x45) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f0000000100)}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000080)) [ 1138.252634][ T3504] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:05:10 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:05:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, "4cb4b40079c216e9ff161edee34ed6d65a789ea250e8d4c7e1d56cf0c7e24b33a608cbe7d52388ecc987a5e9f4f71b56a5c2f429d1568f24122554255d3a8315c3fff41d883fb1c7ee331c60943359c37c474e7e16e28316dc63cf6615ccd70a06379fd24aa6c60c616bdb9386fd6f6b96f2711c37011436a2d10d83c9b154225144fe007a6ac1469149cceea311fb6b91637cca61aa08211817fafa1bbdf9416dc68587ed578b499e04cdfcc76bae855b866be513e4705ab0dc924101fedcb7af982207cc3e"}, 0xc7) close(r0) [ 1138.406157][ T3513] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 06:05:12 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x80044324) 06:05:12 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0xb3d, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:12 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2$9p(&(0x7f00000000c0), 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x4000, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3ff, 0x183100) 06:05:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001bc) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:05:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = socket(0x9, 0x80007, 0x8) getsockopt$netlink(r2, 0x10e, 0x0, &(0x7f0000000100)=""/4096, &(0x7f0000000040)=0x1000) close(r1) 06:05:12 executing program 5: clone(0x13102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x3e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 06:05:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/82, 0x52}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) mlockall(0x0) recvfrom$inet(r2, 0x0, 0xfffffffe, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) [ 1141.079580][ T3531] block nbd0: shutting down sockets [ 1141.095815][ T3530] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:05:13 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0xc00, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:13 executing program 0: socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000100)) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:05:13 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x800454d2) 06:05:13 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0xe00, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:13 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x80000, 0xffffffffffff0001) getsockopt$inet_dccp_int(r1, 0x21, 0x90a92dd85f14f9d6, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000180)=@HCI_EVENT_PKT={0x4, "d1ffc4509b3b813a8b8e5272c8bc74e9a7d3566b2a96af5d05c4804563d2baf35e64514d2adea5200f2b3bf52afe6822a759fd664c088da25fd9c4a34fcec893e20bbc3e83e77e64947cbc4cfd0ab78125c8d569ef390ca0b3eab94a7c89895f5a1315ac7eb240e71618fa9ada63ae97af0719060d9e3fd48471ae93dbfe6642f53063d6"}, 0x85) close(r2) [ 1141.382700][ T3556] block nbd0: shutting down sockets 06:05:13 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0xf00, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) prctl$PR_MCE_KILL_GET(0x22) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) socket$nl_route(0x10, 0x3, 0x0) 06:05:16 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x8004552d) 06:05:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0x0, 0x0, 0x0) 06:05:16 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x3d0b, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001bd) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:05:16 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x400001) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x4000, 0x0) dup3(r0, r0, 0x80000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fd) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'netdevsim0\x00', 0x200}) close(r2) 06:05:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x40000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) accept$nfc_llcp(r1, &(0x7f0000000200), &(0x7f0000000280)=0x60) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000140)={'security\x00'}, &(0x7f00000001c0)=0x54) close(r2) [ 1144.154568][ T3575] block nbd0: shutting down sockets 06:05:16 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x3f00, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1144.218430][ T3583] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:05:16 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x80081270) 06:05:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) creat(&(0x7f0000000040)='./file0\x00', 0x9) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x2) 06:05:16 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) socket$inet6_dccp(0xa, 0x6, 0x0) [ 1144.403926][ T3597] block nbd0: shutting down sockets 06:05:16 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x4000, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1144.477324][ T3600] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:05:16 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x80081272) 06:05:16 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x5865, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1144.567409][ T3605] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 1144.651776][ T3611] block nbd0: shutting down sockets 06:05:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000500)={0x0, 0xcf, &(0x7f0000000580)=[{&(0x7f0000000000)=""/82, 0x52}, {0x0}, {0x0, 0x1bb}, {0x0, 0xa3}, {0x0, 0x2a3}], 0x3}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) accept4(r0, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xfffffffe, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) 06:05:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) set_robust_list(&(0x7f0000000340)={0x0, 0x9, &(0x7f0000000300)={&(0x7f00000002c0)}}, 0x18) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000240), &(0x7f0000000280)=0x30) close(r1) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @in={0x2, 0x4e22, @local}}}, 0x90) 06:05:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001be) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:05:19 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) 06:05:19 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x6000, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:19 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x80086301) 06:05:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:05:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/82, 0x52}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) accept$unix(r1, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xfffffffe, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) [ 1147.272782][ T3628] block nbd0: shutting down sockets 06:05:19 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x6558, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1147.319559][ T3633] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:05:19 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x80287010) 06:05:19 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = dup(r1) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000140)={0x101, [0x0, 0x101000000000, 0xed12, 0x81, 0x3, 0x5, 0x2, 0x5, 0x4, 0x1, 0x0, 0x6, 0x8, 0x6, 0xaa, 0x4, 0x1f, 0x0, 0x6, 0xfffffffffffffffb, 0xf4, 0x5, 0xcc4, 0x3f, 0xffff, 0x1, 0x4, 0x3, 0x7, 0x2, 0x100, 0x9, 0x3, 0xbb, 0x8, 0x1, 0x4, 0xffffffffffffffc1, 0xffffffffffff8000, 0x5, 0xf0, 0x7a, 0x5, 0x6500000, 0x7, 0x7, 0x5, 0x800], 0xb}) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000040)) close(r1) 06:05:19 executing program 5: 06:05:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x7) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000100)={0xc, @pix_mp={0x7, 0x4, 0x0, 0x6, 0x7, [{0x4, 0x6}, {0x100, 0x7fffffff}, {0x4, 0x7c}, {0x9, 0x4}, {0x0, 0x7f}, {0x1f, 0x81}, {0x6, 0x800}, {0xe, 0x80000001}], 0x10001, 0xa1, 0xe, 0x1, 0x7}}) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000200)={0x0, @reserved}) [ 1147.527639][ T3653] block nbd0: shutting down sockets 06:05:19 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x8100, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1147.603679][ T3657] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:05:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001bf) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:05:22 executing program 5: 06:05:22 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x80345621) 06:05:22 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xff, 0x40) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0xa0603) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000000)={0x7fff, 0x0, 0x3017, 0x2, 0xfff, {0x0, 0x1}, 0x1}) bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @local}}, 0x1e) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x101000) write$vhci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xffffffffffffffb7) close(r1) 06:05:22 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x100) recvfrom$llc(r0, &(0x7f0000000100)=""/155, 0x9b, 0x40000020, &(0x7f00000001c0)={0x1a, 0x30d, 0xd67f, 0x3f, 0xff, 0x5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 06:05:22 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0xf000, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1150.383309][ T3673] block nbd0: shutting down sockets 06:05:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x2000) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x73}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r4 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x401, 0x800) getsockopt$inet6_mreq(r4, 0x29, 0x1f, &(0x7f0000000440)={@mcast2, 0x0}, &(0x7f0000000480)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000004c0)={@local, 0x55, r5}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f00000000c0)) 06:05:22 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x34000, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:22 executing program 5: 06:05:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xc970, 0x200) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000100), 0x4) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) close(r1) 06:05:22 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x80404508) 06:05:22 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/169, &(0x7f0000000040)=0xa9) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 1150.700119][ T3696] block nbd0: shutting down sockets 06:05:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001c0) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:05:23 executing program 5: 06:05:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(0xffffffffffffffff) 06:05:23 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x400300, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:23 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x250103, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x2, 0x0) renameat(r1, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00') r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x0) close(r3) 06:05:23 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0x80404532) 06:05:23 executing program 5: [ 1151.427348][ T3710] block nbd0: shutting down sockets 06:05:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = dup2(r1, r1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @mcast1, 0x5}, 0x1c) close(r0) 06:05:23 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0xf0ffff, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:23 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x2, 0x10000) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000180)) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x123397b10213ad26, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000000c0)=0x4, 0x4) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 06:05:23 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xc0045878) 06:05:23 executing program 5: [ 1151.720932][ T3737] block nbd0: shutting down sockets 06:05:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001c1) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:05:26 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x1000000, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:26 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, "f7467dd6a6ab51056f49ff7020ef2d4df1eb77b7caf17ebfada0565b7f49f859af51aa57c63e1a2454503cff8e35d391ff0e0b50543d4a3ae3b0477b9b51062e5620f9b20bf966aa03c4e02e7d6b17747c2a8f8fd1f94e19851ddf72bff994d55cd45b0ad6d6efae97b367e5316cdd0ad2f8d77aba8bd9b5385ef539c59a1ee3f113cab2f5efb2f38d24d080d8c278b31d38012cc558333fd48ef1a7bdc365bce5cf5c955b5805bd4dbedcf7a66df9c414f726fa9a98a45f000b51a7494f07d0192a932cf11bcc13f21e75562e38"}, 0xcf) close(r1) 06:05:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x88180) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@dev, @remote, 0x0}, &(0x7f0000000140)=0xc) sendmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x1d, r3}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x7, 0x100, 0x7, {0x0, 0x7530}, {}, {0x1, 0x322, 0x80}, 0x1, @canfd={{0x1, 0xffffffff, 0x5, 0x6}, 0x1f, 0x1, 0x0, 0x0, "c43d7a510c11d98b1a01b039efe4dc7080fa627f34d44516a72e9b3b9c4422982cefc01f33ec6599c67ba8713a3d9dcb88fc21a84ba39e44bcbb69e3eb21fa9d"}}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x1) close(r1) 06:05:26 executing program 5: 06:05:26 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xc0045878) 06:05:26 executing program 5: 06:05:26 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x801, 0x180) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000180)={0xcc, &(0x7f00000002c0)="a1f8cb82936e093be9d7907e531498cc9fbf1e9d99bb127a407ffc7fbcbc795ae78673a852fbda76524e4b3eb98d8684939d7df6dc7c850bfc32aa0952f0f1a369bdecc35e42d1d5694db2df194c28286bf53e25865a67e457fa529367847e8a4d53475b689082a8c852d163175b3774cf5ff0bb68f31799f056bf2da8c91adabe6f36427936bb0a87527a7ea6bed10a6bd2904099281fc9441033bd59db7d6155f0a4b677abc8fddd34f0d1974052ac3f64e39c1a766e35bf953b902680fa79b53a3b103680663e2eeb4b9c"}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat(r1, &(0x7f0000000080)='./file0\x00', 0x800, 0x10) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070") syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030cab745303030303030303030352c6e6f626179726965722c6e6f626172729a1cb73d31ad461d23060b25659926aed9eefc180ad9b9df412f34a161514e20b76c29619eb7e688b5cd634619bb811e9298aca7e71fe64b9fa5462ee580adf46f3378d059fc10fbb72576629ea9c2b5aed919c6d60c5ff5cac001b6614d8e24777de5bd528ddb59d8746e70c34d2782c83e69a96b45b5133c3f9d64aad09d19d261994662e6e8f46f5bc15bb03784fca89f48e4fb86294c92143ca4dd7babab0cfd8c3b5885fde370cc6caef09ed281f7e7ee30", @ANYRESHEX]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) write$vhci(r5, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r5) 06:05:26 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) r2 = socket$nl_crypto(0x10, 0x3, 0x15) getsockname$netlink(r2, &(0x7f0000000040), &(0x7f00000000c0)=0xc) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) [ 1154.620159][ T3751] block nbd0: shutting down sockets 06:05:26 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x2000000, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:26 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xc0101282) 06:05:26 executing program 5: [ 1154.863595][ T3768] hfsplus: unable to parse mount options [ 1154.939264][ T3776] block nbd0: shutting down sockets 06:05:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001c2) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:05:27 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x600, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 06:05:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x3000000, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:05:27 executing program 5: 06:05:27 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xc0189436) 06:05:27 executing program 5: 06:05:27 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x4000000, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1155.720052][ T3788] block nbd0: shutting down sockets [ 1155.720661][ T3791] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:05:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xf76c) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:05:27 executing program 5: 06:05:27 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xc020660b) 06:05:27 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x100000000400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) [ 1156.031375][ T3811] block nbd0: shutting down sockets 06:05:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001c3) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:05:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x6000000, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:30 executing program 5: r0 = gettid() creat(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, 0x0, 0xff8c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) getresuid(0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) lstat(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x1000000000016) 06:05:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) socket$inet_udp(0x2, 0x2, 0x0) dup3(r1, r1, 0x80000) 06:05:30 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() move_pages(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x6) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) 06:05:30 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xc0306201) [ 1158.866461][ T3822] block nbd0: shutting down sockets 06:05:30 executing program 5: fchdir(0xffffffffffffffff) getpgid(0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) ioctl(0xffffffffffffffff, 0x5a, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) fstatfs(r0, &(0x7f0000000400)=""/128) 06:05:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0xa000000, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1158.940312][ T3824] debugfs: Directory 'hci2' with parent 'bluetooth' already present! 06:05:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x10001, 0x400) syz_open_dev$midi(&(0x7f00000008c0)='/dev/midi#\x00', 0x3, 0x383300) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6b0, 0x3e0, 0x140, 0x3e0, 0x0, 0x3e0, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x6, &(0x7f0000000100), {[{{@ipv6={@rand_addr="ff88bce617bfddd0e41c504842d5efa6", @mcast2, [0x0, 0xff000000, 0x0, 0xffffffff], [0xffffff00, 0xff0000ff, 0xffffffff], 'bcsh0\x00', 'team0\x00', {}, {}, 0x1, 0x8, 0x7, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@cpu={0x28, 'cpu\x00', 0x0, {0x9, 0x1}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x266}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d3, 0x4d5, 0x8, 0xff, 0x2}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x5, 0x3, 0x1, [0xce04, 0x7, 0xb9be, 0x6, 0x9, 0x3, 0x80000001, 0x7, 0x21a6803b, 0x40, 0xe9a4, 0x8, 0x5996, 0x1, 0x1, 0x36cc], 0x5}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@ipv4={[], [], @loopback}, 0x5, 0x1}}}, {{@uncond, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@rand_addr="17521ba896f850db8a2d3adcfda8f574", 0x3a, 0x10, 0x1}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xfff, 0xfffffffffffffff9, 0x7}, {0x10001, 0x8, 0x1ff}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x710) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000900)={0x2, {{0xa, 0x4e22, 0x3f, @remote}}}, 0x88) close(r1) 06:05:30 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xc0404309) 06:05:30 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getitimer(0x3, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'irlan0\x00', {0x2, 0x4e21, @loopback}}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r2) [ 1159.123472][ T3840] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 06:05:31 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0xc000000, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1159.221941][ T3848] block nbd0: shutting down sockets [ 1159.359178][T32440] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 06:05:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001c4) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:05:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) memfd_create(&(0x7f0000000040)='selinux\x00', 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000100)={0x2, 0x75, 0xfffffffffffffffe, 0x1f, 0x0, 0xffff}) write$vhci(0xffffffffffffffff, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:05:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {0x0}], 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) shutdown(r0, 0x0) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) shutdown(r1, 0x0) 06:05:33 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400203) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r1) 06:05:33 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0xe000000, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:33 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xc0481273) [ 1161.998664][ T3866] block nbd0: shutting down sockets 06:05:33 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0xf000000, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:05:34 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhci\x00', 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = open(&(0x7f0000000040)='./file0\x00', 0x488100, 0x20) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000080)='/dev/vhci\x00', 0x0, r2) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f00000000c0)) write$vhci(r2, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r0) 06:05:34 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x80212a001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000280)=0x1fffffff0007fffc) 06:05:34 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xc058534f) 06:05:34 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x10000000, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 1162.279291][ T3893] debugfs: Directory 'hci2' with parent 'bluetooth' already present! [ 1162.293454][ T3889] block nbd0: shutting down sockets [ 1162.378318][ T3902] EXT4-fs warning (device sda1): ext4_group_extend:1797: can't read last block, resize aborted [ 1162.412519][ T3902] EXT4-fs warning (device sda1): ext4_group_extend:1797: can't read last block, resize aborted 06:05:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2364, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x10000000000001c5) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='Y'], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:05:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r1, &(0x7f0000000100)=@HCI_EVENT_PKT={0x4, "2acf51e76f4451af28a7873a55bf905869635504a4761b071a63a3928a08f7ef1a61492fb3dafc342fd13c20c97ba1a2da5396d316162318b1f2dc1553fccd7e055d4887477aaab450f5d3d5964318446b35a23f9c8eb8224a68da2178fb6e125c99693b91a246ccc67fb960d2cb219d333120ed4179d165229fb13bc3d9819b9a"}, 0x82) close(r1) 06:05:34 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x124, 0x124, 0x9, [@union={0xd, 0x6, 0x0, 0x5, 0x4, 0x3f, [{0x4, 0x2, 0x5}, {0x5, 0x5, 0x7fff}, {0xb, 0x3, 0xfff}, {0xe, 0x4}, {0xc, 0x3, 0xfffffffffffffff8}, {0x8, 0x4, 0x100000000}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xa, 0x4}, {0x8, 0x4}, {0xf, 0x2}, {0xd}, {0xf, 0x4}, {0x3, 0x2}]}, @const={0xc, 0x0, 0x0, 0xa, 0x3}, @var={0x5, 0x0, 0x0, 0xe, 0x14b}, @const={0x5, 0x0, 0x0, 0xa, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x7fffffff}}, @fwd={0x1}, @struct={0x5, 0x5, 0x0, 0x4, 0x9, 0x0, [{0x4, 0x5, 0xd10}, {0x3, 0x3, 0x5}, {0x4, 0x1, 0x100}, {0x0, 0x1, 0x5}, {0x10, 0x2, 0x3}]}]}, {0x0, [0x30, 0x0, 0x2e, 0x7f, 0x7f, 0x61, 0x0]}}, &(0x7f00000002c0)=""/159, 0x145, 0x9f}, 0x20) write$vhci(r1, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xefa, 0x20280) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0xa10, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c004}, 0xc040) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000380)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) close(r1) 06:05:34 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$NBD_CLEAR_SOCK(r1, 0xc06864a1) 06:05:34 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x26, 0x1, 0x0, 0x0, {0x3d0b0000, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 06:05:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x1000, 0x1) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="1000000000000000020010000000000003000000ff0100000400000000000000ff0700000000f7f43c5a5bb50000ffffffff0000000001800000000004000000ee0000000000000000000000000000040000000004000000000000000000ff0700000000000009000000000000000700000000000000000000000000000000000000000000000008000000000000000000000000000006000000000000000bc800000000000002000000000000000000001000000000000000000000000002040000000000000000000000000000050000000000000009000000003b"]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x80000, 0x0) r2 = dup(r0) r3 = accept$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000300)=0xfffffffffffffde6) sendto(0xffffffffffffffff, &(0x7f00000004c0)="333563e85f0f55142971bfe4a17a9d4f615b5ada46222fc42162b9de9d43d28e20dba90c9f3e1f1a8c1772cdb5b5be0f548a4175971fcf3c98e9e68f483cd29aa08a3746f2a050efcd7cb58d0363fe2b188308c5e404060ba609ff33681584e60c7842359bde898d71f48b8170102220c8b9319043c5921ed861", 0x7a, 0x0, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() ptrace$peekuser(0x3, r5, 0x0) socket$inet6(0xa, 0x0, 0x7ffffffa) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x33b) setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000180)=0xb0e, 0x4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000240)={0xa0000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x3, 0xdb14) fcntl$setflags(r1, 0x2, 0x2) r7 = socket$inet6(0xa, 0x400000000001, 0x0) r8 = dup(r7) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r8, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r8, r9, &(0x7f0000d83ff8), 0x8000fffffffe) [ 1163.089248][ T3917] block nbd0: shutting down sockets [ 1163.101441][ T3920] ------------[ cut here ]------------ 06:05:35 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7f454c4605e60a00060000000000000003003e000000000039010000000000004000000000000000c103000000000000f100000003003800010006006cd540000700000022050000ce2627bfffffffff7f000000000000000500000000000000080000000000000007000000000000000100000001000000658b2859acc948a80770a8a3d8578632b5bf3b210048caa48f840bb182f1a95b71e64b98238cbe4718d8f789935922fc95a31e2d74f7d7fd8697f53368c4b1853a76f85fb1f100a8ea1d6057c9795995b3e8b054f9d2b16ffce25f75ac83842213b3c73227ac0aebaf73bb910f551d906b84ffa154e0f753163865f0877e55bb3521941dd1230949778ebd18e40bc135452c47f4d3cc5103cc41a1158e24f4ecad52496278f5f6956d7bac663c83e69e4cb9955a35606697197737602993045e400d392b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007067cd9300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000353cfc7cfbdcc514c1d286102bb8de55b0afe3ad5698f0b8a9fe8f3a1ff93783c9cb793d1fef954a064fb76c15ad7d05384e963abebd03eb7014f79e694132e6e4902fa6309fbbe758d733943eafb3a3049fd06d"], 0xa3c) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000540)) fcntl$getown(r0, 0x9) r2 = fcntl$getown(r0, 0x9) r3 = syz_open_procfs(r2, &(0x7f00000003c0)='timers\x80v\xc6\xc7\x1d6\x85\xb4y\xfb\x1e:\xa8f\xe4\xf7\x9c@\xdf\xd5\x9b\xa4w\xed\xa4\xb03\xbf!\xa4^{4M+\xc0O\xbe}}\xf8\"\xfeQ\xb98\xab\xabe\x9c3\x1c$?=\xbe@%\xb8\xc3h\xc9~\x9a\x85\xd8;\x04+\x15\x92\xeeB\xb2\xecO\x0e{\xfdfO\xa5\xde\x01s\xc0\x85Y\x05n\xb6\x03az9L\xd03\xb7+\x1e.\x8e\x18\x8bE\x95U\xd0\xc5\xe8\xe8\xe2R\x00\xc3[\xc5U2l\xd4\xe5\x16\x92\xbcd_\xaab@MS7\xc6\xa8\x8euR\xf5\x93J\x19z\xb6N\x1d8\xcc\xbe\xdc\x9d\xc5\xec\xf5\xc3\xf7W\xc3\xd8\xd0\x91\x1b\xd4V]\xae\xa0\x89+\x16\x9db\xe5D\xc9\xe9k\xe6\xef\x95\xc5\'\x83\a\x12!\x88\xb8\x9fb\x9e\x9e\xd4\x90kgw\xb7`\x14\xb3E\x17\v\x97\xd6\x8a?@\x04\xd3\xe9\xef\x8d\x1c\xd9\xb0\xe7\xf8\xed#xeH\x8e\x9f\x1e\x97\xd2t\xf1(b\xe9Ro\xfbV\x05\x84\xe0\x01BF\xea\xbf\'e.|25\xfbi\x81\x80\xea*\xc8k\xdaR\x03|\"\x9a\x9aT\x11\xa1\xc9\xd8&\x8bAc\x1bD\xdc\x93\xac\xee\x98\x12B~\x14k}M\xd3B\x1d\x812\xf1\xee\xd53\xa0\xe7\xbe\xb5\xc8\xc3#f\xccj\xd1-?W\xd8\x1f\xdaF\xb8\xd2') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000300)=0x6597, 0x4) memfd_create(&(0x7f00000000c0)='/dev/udmabuf\x00', 0x6) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @in6={0xa, 0x4e20, 0x9e0, @empty, 0xfffffffffffffff8}}}, 0x90) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x200, 0x400) ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f0000000180)=0x3f) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) write$vhci(r5, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) close(r5) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/udmabuf\x00', 0x2) [ 1163.150292][ T3920] refcount_t: increment on 0; use-after-free. [ 1163.186240][ T3920] WARNING: CPU: 0 PID: 3920 at lib/refcount.c:156 refcount_inc_checked+0x61/0x70 [ 1163.195384][ T3920] Kernel panic - not syncing: panic_on_warn set ... [ 1163.202012][ T3920] CPU: 0 PID: 3920 Comm: syz-executor.0 Not tainted 5.3.0-rc1-next-20190724 #50 [ 1163.211065][ T3920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1163.221120][ T3920] Call Trace: [ 1163.224424][ T3920] dump_stack+0x172/0x1f0 [ 1163.228778][ T3920] ? refcount_inc_not_zero_checked+0x170/0x200 [ 1163.234952][ T3920] panic+0x2dc/0x755 [ 1163.238860][ T3920] ? add_taint.cold+0x16/0x16 [ 1163.243561][ T3920] ? __kasan_check_write+0x14/0x20 [ 1163.248686][ T3920] ? __warn.cold+0x5/0x4c [ 1163.253044][ T3920] ? refcount_inc_checked+0x61/0x70 [ 1163.258256][ T3920] __warn.cold+0x20/0x4c [ 1163.262519][ T3920] ? refcount_inc_checked+0x61/0x70 [ 1163.267735][ T3920] report_bug+0x263/0x2b0 [ 1163.272080][ T3920] do_error_trap+0x11b/0x200 [ 1163.276692][ T3920] do_invalid_op+0x37/0x50 [ 1163.281127][ T3920] ? refcount_inc_checked+0x61/0x70 [ 1163.286331][ T3920] invalid_op+0x23/0x30 [ 1163.290494][ T3920] RIP: 0010:refcount_inc_checked+0x61/0x70 [ 1163.296577][ T3920] Code: 1d 8b f0 63 06 31 ff 89 de e8 8b 3d 35 fe 84 db 75 dd e8 42 3c 35 fe 48 c7 c7 40 20 c6 87 c6 05 6b f0 63 06 01 e8 17 98 06 fe <0f> 0b eb c1 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 [ 1163.316188][ T3920] RSP: 0018:ffff88805a7f78f8 EFLAGS: 00010286 [ 1163.322264][ T3920] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1163.330241][ T3920] RDX: 00000000000134e9 RSI: ffffffff815c62a6 RDI: ffffed100b4fef11 [ 1163.338218][ T3920] RBP: ffff88805a7f7908 R08: ffff888089f14000 R09: ffffed1015d060b1 [ 1163.346199][ T3920] R10: ffffed1015d060b0 R11: ffff8880ae830587 R12: ffff88821ae10bf8 [ 1163.354180][ T3920] R13: ffff8880a1393c20 R14: ffff8880a1393c18 R15: ffff88821ae10b78 [ 1163.362181][ T3920] ? vprintk_func+0x86/0x189 [ 1163.366787][ T3920] ? refcount_inc_checked+0x61/0x70 [ 1163.371998][ T3920] kobject_get+0x66/0xc0 [ 1163.376259][ T3920] kobject_add_internal+0x14f/0x380 [ 1163.381470][ T3920] ? kfree_const+0x5e/0x70 [ 1163.385892][ T3920] kobject_add+0x150/0x1c0 [ 1163.390304][ T3920] ? kset_create_and_add+0x1a0/0x1a0 [ 1163.395589][ T3920] ? get_device_parent.isra.0+0x34c/0x560 [ 1163.401311][ T3920] ? rcu_read_lock_sched_held+0x110/0x130 [ 1163.407032][ T3920] ? kmem_cache_alloc_trace+0x397/0x790 [ 1163.412592][ T3920] get_device_parent.isra.0+0x413/0x560 [ 1163.418160][ T3920] device_add+0x2df/0x17a0 [ 1163.422590][ T3920] ? get_device_parent.isra.0+0x560/0x560 [ 1163.428310][ T3920] ? up_write+0x9d/0x280 [ 1163.432563][ T3920] hci_register_dev+0x2e8/0x8f0 [ 1163.437421][ T3920] __vhci_create_device+0x2c5/0x5d0 [ 1163.442627][ T3920] vhci_write+0x2d0/0x470 [ 1163.446959][ T3920] new_sync_write+0x4d3/0x770 [ 1163.451639][ T3920] ? new_sync_read+0x800/0x800 [ 1163.456407][ T3920] ? common_file_perm+0x238/0x720 [ 1163.461431][ T3920] ? __fget+0x384/0x560 [ 1163.465592][ T3920] ? apparmor_file_permission+0x25/0x30 [ 1163.471139][ T3920] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1163.477378][ T3920] ? security_file_permission+0x8f/0x380 [ 1163.483014][ T3920] __vfs_write+0xe1/0x110 [ 1163.487346][ T3920] vfs_write+0x268/0x5d0 [ 1163.491592][ T3920] ksys_write+0x14f/0x290 [ 1163.495923][ T3920] ? __ia32_sys_read+0xb0/0xb0 [ 1163.500691][ T3920] ? do_syscall_64+0x26/0x760 [ 1163.505365][ T3920] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1163.511435][ T3920] ? do_syscall_64+0x26/0x760 [ 1163.516123][ T3920] __x64_sys_write+0x73/0xb0 [ 1163.520723][ T3920] do_syscall_64+0xfa/0x760 [ 1163.525237][ T3920] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1163.531131][ T3920] RIP: 0033:0x459829 [ 1163.535028][ T3920] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1163.554639][ T3920] RSP: 002b:00007f6cad211c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1163.563064][ T3920] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 [ 1163.571044][ T3920] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000005 [ 1163.579018][ T3920] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1163.586990][ T3920] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cad2126d4 [ 1163.595230][ T3920] R13: 00000000004c9985 R14: 00000000004e0e40 R15: 00000000ffffffff [ 1163.604526][ T3920] Kernel Offset: disabled [ 1163.608987][ T3920] Rebooting in 86400 seconds..